last executing test programs: 2m31.06943167s ago: executing program 4 (id=713): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x8, &(0x7f0000002000)=ANY=[@ANYBLOB='b\n'], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 2m31.028362779s ago: executing program 4 (id=715): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x2}, {0xa, 0x4e22, 0x9, @private2}, r2, 0x6}}, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@norecovery}, {@grpid}, {@init_itable}, {@abort}, {@noblock_validity}, {@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x577}}]}, 0x0, 0x618, &(0x7f0000000640)="$eJzs3c9rHG0dAPDvzCYxed9oWpFii2LAQwvS/KjFqqe2F3soWLAHEQ8NTVJDN21oUrC1YAoeFBREvIr04j/gXYpXbyKoN89CFYl4UOnKzM60a3Y32ebN7mwznw/M9plnZvd5vjv7dJ5nNs9OALU1nz2kEWcj4k4SMdexbTbaG+eL/fb+8exutiTRan3j70kkRV65/+vi3w+zhyRiOiJ+fz3ik43ucrefPL2/0my1fT9icWdza3H7ydOLG5sr99burT1YvvTly1eWvrJ8eflY4izjunHz65/5yQ++86X1PzQvJnE1bk9+bzX2xXFc5mM+XhchduZPRMSVLNHjfXnflCEkFdeDo2kUn8fJiDgTc9HI19rmYuPHlVYOGKpWI6IF1FSi/UNNlf2Acmw/jHHwOHt1rT0A6o5/on1tJKbzsdEHe0nHyKg93j11DOVnZfz32blfZEv0uQ4xcQzl9LP7PCI+3Sv+JK/bqfwqThZ/GmnH87L0UkRMFe/FYOP/ya6c+X3ro/78vUv8ncchi/9q8W+Wf/2I5VcdPwD19PJacSLfzdbenv+ynmHZ/4ke/Z/ZHueuo6j6/Ne//1ee76fza+Tpvn5Y1t+51fsluzo5f/nRjZ/1K7+z/5ctWfllX3AUXj2POLcv/h/mHb3kzfFPehz/bJc7A5bxtT/+7Ua/bVXH33oRcb7n+OdtjzZLLe5sbpV5+76fXFzfaK4ttR97lvGb3337V/3Krzr+7PhHn/HfQcc/y9sasIxf33qx2W/b7KHxp3+dSm7nqaki57srOzuPliOmkpvFLh35lw6uS7lP+RpZ/Bc+37v994q/KCo/0Lv/9270t/XN+3v99hv4+HcPnTKvWweHe6gs/tU+n//Djv9PByzjX996/Nl9WTNl4qD4Z7pfKtl95wgBAAAAAACgPtL8O9gkXXiTTtOFhfYc3k/FB2nz4fbOF9YfPn6wGnEh/3vIybT8pnuuvZ5k68vF38OW65f2rX8xIk5HxM8bM/n6wt2HzdWqgwcAAAAAAAAAAAAAAAAAAIAx8WEx/7+8T/U/G+35/wPZOTPk2gFDN8wbzAHjTfuH+srbf1p1LYAqOP9DfWn/UF/aP9SX9g/1pf1DfWn/UF/aP9SX9g8AAAAAJ9Lpz738cxIRu1+dyZfMVLFtstKaAcP27m18fij1AEavMdKnAePkzVf/pv9D7QzU//938eOAw68OUIGkV2beOWgd3Phf9nwmAAAAAAAAAAAAADAE58+a/w91lcZvq64CUJHuifxn9wac6Oc3AOA956f/ob4+0hjfBQI4EQ6bxT/db4P5/wAAAAAAAAAAAAAwMrP5kqQLxS1AZyNNFxYiPh4Rp2IyWd9ori1FxCci4k+NyY9l68tVVxoAAAAAAAAAAAAAAAAAAABOmO0nT++vNJtrjzoT/+nKOdmJ8i6o41KfzkQkoy90JiLGIfbhJCY6cpKI3ezIj0XFHm3HWFQjzatR8X9MAAAAAAAAAAAAAAAAAABQQx1zj3s798sR1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARu/t/f+PnkgOeZ2qYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k//CwAA//9vNjw9") 2m30.652099801s ago: executing program 4 (id=722): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x80) 2m30.628522161s ago: executing program 4 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r3, 0x29, 0xd2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=prefer:0']) chdir(&(0x7f0000000140)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x802a40, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x17, 0xfffffffd, 0x4, 0xff, 0x201d2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, &(0x7f0000000280)="70a17faecda02630d083134e39e8f8146ce7a3e84ecc4108954e65a9c12879126b22d66cef6b9d97af8d4011f0da4cd2150ff9131cf6fb29f48357c1b045bdad29fc3362dc5c7995a8b4bb174cfb8ffae5b455699d29da6d91f7b07f51b0a120b60a0ad8190bccf2337edac6878d775d3648", &(0x7f0000000540)=""/187}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r9, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x7}, @val={0x23}, @val={0xc}}}}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYRESDEC=r2, @ANYRES64=r5, @ANYRES64=r8, @ANYRES64=r8, @ANYBLOB="8f769eb02dec549399933694401bae06f012", @ANYRESOCT=r5], 0x48) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x40400) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r12, 0x0, 0x9135}, 0x18) ioctl$VT_DISALLOCATE(r11, 0x5608) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB='1\t'], 0x2c}, 0x1, 0x0, 0x0, 0x2000014}, 0x8810) 2m30.498539022s ago: executing program 4 (id=725): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000480)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x1279, &(0x7f0000002880)="$eJzs3U1rY1UcB+B/pmn6MraJOo7OgHjQjSLEaReu3BSZAbGgjHZABeGOTTU0bUoTChFx6sqV4McQdelOEL9AN25cC4JINy5nIV5pk7FNk3a00xcZnmdzD+ec3z3n3tteuOEe7vYrX64sL7WqS1k7LhQKUVwbjeLdFCkuxEh0bcYLt37+5em33nn39bn5+es3U7ox9/bMyyml6Wd+eO+Tb5/9sX3x1nfT34/FVuX97T9mf926vHVl+69vot5K9VZabbZTlm43m+3sdqOWFuut5WpKbzZqWauWxntj7LUvNZpra52UrS5OTa6t11qtlK120nKtk9qF1F7vpOzDrL6aqtVqmpoMHsTC13fzPI/I89EoRZ7n+URMxsV4JKZiOspRiUfjsXg8LsUTcTmejKfiym6v8543AAAAAAAAAAAAAAAAAAAAPFzus/6/MLj+f+y8pwwAAAAAAAAAAAAAAAAAAAAPnYPr/4sRvv8PAAAAAAAAAAAAAAAAAAAAZ+w+3/8/sP7/Rev/AQAAAAAAAAAAAAAAAAAA4DSMdzelSOMRK59vLGwsdLfd+rmlqEcjanEtyvFn7K7+7+qWb7w2f/1a2lWJl1bu9PJ3NhZG+vMzo+WoFIbmZ7r51J8fi8n9+dkox6Xh488OzY/H88/t5D/r5qtRjp8+iGY0YjGi0Dv63fynMym9+sb8RH/+6k6/Q42c8mUBAACAk1RN/xh8ft/sdRra3m3qPZ+nXs/CEb8PHHg+L8bV4nkdNfe0Oh8vZ41Gbf2YhdLh+yn110z0eh57rEJEZH3x6cnfbu7s8riTP7HCyJF9SidwnvcXRo/u8wBjRfF/cDJPoPD7V/tqxuNsR7/Q+0PPGjv3z3+Xis08P9WJlYY1jQ3UVPb+mw6/ZxRO+Z7E2dm7+uc9EwAAAAAAAAAAAP6Loe8MTkTEwFuEHw3U3Hs9vD8+uOfDR//iDI4QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5mB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//5oXDMQ==") creat(&(0x7f0000000000)='./bus\x00', 0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x16, &(0x7f0000001880)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d7295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ffffe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d0606183f064b060a8ec12725d42e3a74860300bee966f27c0f4470d4400d267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c8ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57dd183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f36cac3fcbfc432216bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb19f81612a3b10fc34eb758705f1751d8c8b712eb39d2b8ad87f9eb61f19cb9cad4c2c5aa649913802383e4a6691cc8ebbaa66fb76f4266597dc55e8ac797c0509488cfcee404bdf2059e53c4acad060037b38b3c79982c06aaa855802697fd593f1bdebadcf16d8c519b5602b1955275e3faa8b4ea9ceabb32253ffe89fe71a6eda47b2336cf0c195978fe4c7cf445a13807a22384fe6fa8ea2617d43920f001bfced494d7f9ef8e907c88d828ba8481bef0e2b4adb2a086deec2566607f95f98162806e82fbc6f63814cdfb215051dd2d9d0b7d326977f5b3c32c3870c3ba0e683360a919c157980ab386a76f43fa4e187ea7f84fb100"/2387], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffcd4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="2c7766646e6f3d7f8126519d092553836559e10895ae298f45405e78e539269ba5637966aaeff68103df", @ANYRESHEX, @ANYBLOB=',directio,k']) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fremovexattr(r1, &(0x7f0000000600)=@known='trusted.syz\x00') syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000f40)={@val={0x1c, 0x9200}, @val={0x0, 0x0, 0x0, 0x300}, @ipv4=@icmp={{0x35, 0x4, 0x2, 0x22, 0x1b1, 0x67, 0x0, 0x19, 0x1, 0x0, @rand_addr=0x64010102, @loopback, {[@cipso={0x86, 0x55, 0x1, [{0x2, 0xb, "f2480cc076b3c79275"}, {0x5, 0x12, "83f4c916f9a4f9af559cfae025057cdd"}, {0x2, 0x10, "aed8a92b39e3f4d6ad8f1f3082d7"}, {0x5, 0xc, "47f5f7d9973374b40256"}, {0x2, 0x3, "e3"}, {0x0, 0x8, "fff5c67d8c9f"}, {0x0, 0xb, "0f39291761c4c736a6"}]}, @ssrr={0x89, 0xf, 0x2b, [@dev={0xac, 0x14, 0x14, 0xc}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp_addr={0x44, 0x44, 0xc, 0x1, 0x2, [{@empty}, {@empty, 0x1}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}, {@rand_addr=0x64010102, 0x4}, {@broadcast, 0x6}, {@rand_addr=0x64010102, 0x1}, {@loopback, 0x400}]}, @timestamp={0x44, 0x10, 0xf6, 0x0, 0x5, [0x1, 0xc02, 0x10000]}, @timestamp_addr={0x44, 0x4, 0x42, 0x1, 0x9}]}}, @redirect={0x5, 0x3213c193816c4f93, 0x0, @rand_addr=0x64010101, {0x34, 0x4, 0x3, 0x2, 0x0, 0x65, 0x270, 0x6, 0x5e, 0xbd53, @loopback, @rand_addr=0x64010100, {[@timestamp={0x44, 0xc, 0x95, 0x0, 0x8, [0x1000, 0x3]}, @end, @timestamp_addr={0x44, 0x14, 0xfa, 0x1, 0xe, [{@broadcast, 0x7ff}, {@empty, 0x5}]}, @generic={0x7, 0xe, "f493cec0626fa886603ee3b3"}, @cipso={0x86, 0x4b, 0xffffffffffffffff, [{0x0, 0x5, '^%E'}, {0x2, 0x2}, {0x2, 0xb, "26ba9ed533821a6f3f"}, {0x5, 0x7, "b610554158"}, {0x2, 0x10, "db506fc54228803e0e4609ef71a5"}, {0x1, 0x2}, {0x0, 0x12, "9a027b91bc147335b5526c9c93dd6a79"}, {0x6, 0x8, "cbddcf1839d6"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x6d, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x30}]}, @generic={0x83, 0xe, "64bb0b7fe51c12be1353e7b8"}, @lsrr={0x83, 0x23, 0x2a, [@private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @dev={0xac, 0x14, 0x14, 0x17}, @local]}]}}, "7cbafdbd8a"}}}, 0x1bf) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x10a) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) 2m30.360381633s ago: executing program 4 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5e6f, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a50000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = open(0x0, 0x145142, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r10}, 0x10) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0x0, 0x4}}], 0x48, 0x40841}, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 2m30.333718353s ago: executing program 32 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5e6f, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a50000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = open(0x0, 0x145142, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r10}, 0x10) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0x0, 0x4}}], 0x48, 0x40841}, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 2m30.131116814s ago: executing program 2 (id=732): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x2}, {0xa, 0x4e22, 0x9, @private2}, r2, 0x6}}, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@norecovery}, {@grpid}, {@init_itable}, {@abort}, {@noblock_validity}, {@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x577}}]}, 0x0, 0x618, &(0x7f0000000640)="$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") 2m29.794897535s ago: executing program 2 (id=734): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_io_uring_setup(0x1f87, &(0x7f0000000580)={0x0, 0x3296, 0x13580, 0x0, 0x37d}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) close(r4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_getsetattr(r6, &(0x7f0000000300)={0x800, 0x0, 0x1, 0x6}, 0x0) close(0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001600)=ANY=[@ANYBLOB="1201"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r7) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 2m28.617201581s ago: executing program 2 (id=744): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x80) 2m28.583509081s ago: executing program 2 (id=745): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r3, 0x29, 0xd2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=prefer:0']) chdir(&(0x7f0000000140)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x802a40, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x17, 0xfffffffd, 0x4, 0xff, 0x201d2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, &(0x7f0000000280)="70a17faecda02630d083134e39e8f8146ce7a3e84ecc4108954e65a9c12879126b22d66cef6b9d97af8d4011f0da4cd2150ff9131cf6fb29f48357c1b045bdad29fc3362dc5c7995a8b4bb174cfb8ffae5b455699d29da6d91f7b07f51b0a120b60a0ad8190bccf2337edac6878d775d3648", &(0x7f0000000540)=""/187}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r9, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x7}, @val={0x23}, @val={0xc}}}}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYRESDEC=r2, @ANYRES64=r5, @ANYRES64=r8, @ANYRES64=r8, @ANYBLOB="8f769eb02dec549399933694401bae06f012", @ANYRESOCT=r5], 0x48) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x40400) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r12, 0x0, 0x9135}, 0x18) ioctl$VT_DISALLOCATE(r11, 0x5608) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB='1\t'], 0x2c}, 0x1, 0x0, 0x0, 0x2000014}, 0x8810) 2m28.176216834s ago: executing program 2 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}]) io_destroy(r2) r3 = socket(0x2, 0x1, 0x0) r4 = dup(r3) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) recvmmsg$unix(r4, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000001040)}}], 0x1, 0x61, 0x0) openat$cgroup_ro(r4, &(0x7f0000001000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$pppoe(0x18, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) iopl(0x3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000780)={[{@dioread_lock}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000f94f51404919a5853aa3010203010902240001000000000904000002ff5d010009"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000710000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000ff000000000000000000f41e94abe4e97368f20ce292f2ffffffffffffff00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1000) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r9 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x5) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x0, 0x300, 0x0, 0x1, 0x0}) 2m27.678831466s ago: executing program 2 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x69, 0x0, &(0x7f0000000040), 0x0) 2m27.668047806s ago: executing program 33 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x69, 0x0, &(0x7f0000000040), 0x0) 1.506124202s ago: executing program 1 (id=3919): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 1.466782432s ago: executing program 1 (id=3921): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 1.399797922s ago: executing program 1 (id=3923): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000002080), 0x8, 0x800, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.384085803s ago: executing program 1 (id=3924): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000580)={0x0, 0x3296, 0x13580, 0x0, 0x37d}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r5) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r8 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_getsetattr(r8, &(0x7f0000000300)={0x800, 0x0, 0x1, 0x6}, 0x0) close(r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001600)=ANY=[@ANYBLOB="1201"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r9) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r10 = socket$unix(0x1, 0x5, 0x0) bind$unix(r10, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) io_uring_enter(r1, 0x54d6, 0x0, 0x0, 0x0, 0x0) 1.085392944s ago: executing program 0 (id=3930): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000680)='ext4_shutdown\x00', r0, 0x0, 0x1}, 0x47) io_uring_setup(0x1fc3, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0xa, 0x0, 0x1000000, @private1, 0x8}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mount$cgroup(0x20000000, 0x0, 0x0, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x200000001494) fcntl$setstatus(r3, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x1}}, './cgroup/../file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x1, 0x80, 0x7, 0x5, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x66, 0x0, 0x2, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4}]}}}}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x910821}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000ff000608", @ANYRES32=r5, @ANYBLOB="08003c0001000000050033000000000005002a0000000000080031000000008005002e000000000008003b000200000008003a00feffffff08003a0003000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000fbffffff00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) unshare(0x22020400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 1.019094025s ago: executing program 0 (id=3931): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10400, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 941.694585ms ago: executing program 0 (id=3935): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) ptrace(0x10, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f00000000c0)={0x0, 0xfffffdc0}) 906.841165ms ago: executing program 0 (id=3936): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b685000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00), 0x3, 0x570, &(0x7f0000000f00)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 896.339315ms ago: executing program 0 (id=3938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_clone(0x640c7000, 0x0, 0x500, 0x0, 0x0, 0x0) 791.793405ms ago: executing program 3 (id=3943): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f0540801fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0}, 0x50) 762.914116ms ago: executing program 3 (id=3944): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000015000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000010000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000180), 0x2, 0x557, &(0x7f0000000940)="$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") 745.298666ms ago: executing program 3 (id=3946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) ptrace(0x10, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f00000000c0)={0x0, 0xfffffdc0}) 567.267006ms ago: executing program 5 (id=3947): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="9ed2a450d1f77c501c8249861a52541e7de2307630cada3907560287efafbf0a653f268f8e25cf0d87848bd8eb47ce0cba2a8bd664593ac565f20951081c36ead32c91e1173b29f3d98668509433603691c536f065e406414818309f85cf40d1d8dc15465ce95bf8626eeb31dbf15d0b8c75f8c747d7853fddbad70d73058ddf2731f3db73517b306dafd2e099a32675b4582a3ef9e55b634dea2d77a930b88e1848a626f7a5b9597743dc126ff71a03c9d71e13095a681d131aa502588907527651421529a5b78fb23e7cec623e3ede5fbc837da59199918a9d2be8547b55f998053babd3edec460f707e30acfa", @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x5994, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, '^\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x3, 0x4, 0x3, 0x1}, 0xd, 0x5, 'id1\x00', 'timer0\x00', 0x0, 0x7a, 0x6, 0xb, 0x9}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000014b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xff], 0x0, 0x200000000000000, 0x1, 0x1}}, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x110}, {0x0}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) r7 = socket(0x11, 0x800000003, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r10 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x5, 0x7f, 0x0, 0x1, 0x2}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, 0x0) (rerun: 32) close(r10) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) 395.102867ms ago: executing program 3 (id=3948): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 355.238368ms ago: executing program 6 (id=3949): syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00), 0x3, 0x570, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) fsetxattr(r1, &(0x7f0000000200)=@known='trusted.overlay.impure\x00', &(0x7f0000000240)='ext4\x00', 0x5, 0x0) 343.557698ms ago: executing program 5 (id=3950): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu&-0\t||') (fail_nth: 1) 325.762738ms ago: executing program 1 (id=3951): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu&-0\t||') 273.566238ms ago: executing program 5 (id=3952): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000000)='-1\x00', 0x3) r2 = socket$inet(0x2, 0x802, 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0xfffffffe, 0x4) write(r2, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x25, 0x0}}], 0x1f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x100, @loopback, 0xfffff000}, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe77c}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, @in6={0xa, 0x4e20, 0xfc7b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}], 0x90) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 272.819268ms ago: executing program 6 (id=3953): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000010000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000540)="5d70e62689fae5b8f56c3e6e797e091ed2398db2bcc0b9835892ef3e3589cc89a924cf912dd536f13a9a6dc89d254d771939ebaee66e2e92a7b4f327fdbc1447c2677c61cda5eb1f6db5d681e0f7d3c4b7344c22a6dff3fef9495a62e4179c3b757fff7fc1d12de0b10b1a3192314b28222fe3f3179121146643f94c504c5b966708409208dbad714b6cbe7db8e1a8c9e9a3d7", 0x93}, {&(0x7f0000000600)="026e2d8e65948d36be4f229550d4d991cd80c51acfba4f8f0528ae20f3b95d052bac109088eb0fc6e1b8794ee29cad5d18e1790e2e8a0d74c5196e4f9d44568fdffa77fb48280afab7d416f4213296459b24ae57592c281a0a95fb808673bbea80a867dc44f3f286f236e0fdc611737edf5f360df245756fde2473bffa7fe49db92c1f5c40e2dcdf5f9adc471de3680c6605db618ade824b32a0ac141f41b65d6228b6", 0xa3}, {&(0x7f00000006c0)="9e7f3379b1aa2d0fc955fe4e6d99b838a395c895e7e0d33d9d99dcfa97cbba33489135d03b3497d8844d30f4acb4eee9967352e9a14b1820ccde1117c967b74ec5a095469fec5eee2ed0732cbb41651a664fd19dff44d8a715dac379bbf743750f26f74a414330fe773f3fd46c3d2f4e235e36bd4d9fffc01d3bd58018fc5b1cdf95f62cc4", 0x85}, {&(0x7f00000008c0)="1935e0377fe8e4331d8fddbeefdc62ae672455dacba654d899a8b6476180c0b4f9ebef0201c1ed6e9f00bcfd865d66a28de099933fbca4ff50a763193f6296b17d4f8d51c196", 0x46}, {&(0x7f0000000a40)="eadbfc565aeb537bb0ac71e913bdd0d654bd66ae1b2cab8e8dbbf91122a0cea30b5f1b466c360ed39e70d10316037ba40bb62dd77a19572f894f0c464e6210c2cf535c867c401bd1925be6a9ec6d960a7c282606ce075d378252d166d63a33b151b0080ac9e653983dd089869cf3247363fcfc0d70dd45f602d04cb2373055741217af7f8a9b455c5c631ae1ae6963d77b9693057ca6a64c01f9312e9278236ce2ebae7e8e66d7dd6b3e381ec69f1365bf99ac3d4d1ec0914a1b868b", 0xbc}], 0x5, 0x12, 0x0) 272.026658ms ago: executing program 5 (id=3954): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0}, 0x50) 248.430878ms ago: executing program 1 (id=3955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000700180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x4}, 0x18) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000005}) getpid() r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x2, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x40a02, 0x0) write$tcp_mem(r8, &(0x7f0000000200)={0xfffffffffffffffe, 0x20, 0xfffffffffffffffb, 0x20, 0x20000000000005}, 0x48) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x1}, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0x9) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000200)={r10, 0x4, 0x30, 0xc, 0x2}, &(0x7f0000000240)=0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 244.478628ms ago: executing program 3 (id=3956): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x80, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 173.287738ms ago: executing program 5 (id=3957): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10400, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 173.125048ms ago: executing program 6 (id=3958): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={0x0, 0xfffffdc0}) 172.749858ms ago: executing program 6 (id=3959): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000680)='ext4_shutdown\x00', r0, 0x0, 0x1}, 0x47) io_uring_setup(0x1fc3, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0xa, 0x0, 0x1000000, @private1, 0x8}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mount$cgroup(0x20000000, 0x0, 0x0, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x200000001494) fcntl$setstatus(r3, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x1}}, './cgroup/../file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x1, 0x80, 0x7, 0x5, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x66, 0x0, 0x2, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4}]}}}}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x910821}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000ff000608", @ANYRES32=r5, @ANYBLOB="08003c0001000000050033000000000005002a0000000000080031000000008005002e000000000008003b000200000008003a00feffffff08003a0003000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000fbffffff00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) unshare(0x22020400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 142.255109ms ago: executing program 6 (id=3960): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu&-0\t||') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x1d8, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @loopback, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xef, @empty, 0x5a}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @loopback, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x69, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}}}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000884}, 0x2000) 141.629659ms ago: executing program 3 (id=3961): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="02000000a20800000a000100aaaaaaaaaa350000"], 0x2c}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8993, &(0x7f0000000180)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x47, 0xfff, 0x3, 0xfff7, 0x5, 0x3, 0x9c, 0xfb, 0x2, 0x9, 0x5, 0x6, 0x1, 0x7f, 0x4, 0x1ff, [0x101, 0x4]}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8010) socket(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x28100, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x882, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x129200, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 61.914259ms ago: executing program 6 (id=3962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0xff05, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x8001, 0x2000a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20010080}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x50, 0x0, 0x47, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x700, 0x700, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0xff05, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x8001, 0x2000a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20010080}, 0x40000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async) socket$inet6(0xa, 0x1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x50, 0x0, 0x47, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x700, 0x700, 0x2, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) (async) 61.389229ms ago: executing program 5 (id=3963): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x11, &(0x7f0000000040), &(0x7f0000000140)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000024ed377353004c1b0003449c225cd7f0", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r4, &(0x7f0000000240)="2338dcfa67c78a50095e74401b6cc0914ab28f7554d2f66e4932ccbd9df4aa717439252e20a2196296f5328f0800000000d05807f47d5d5db836f81553dae5", 0xfffffd5f) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000440)={0xf048, 0x9, 0x2, 0x6, 0x14}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[], &(0x7f00000004c0)=""/237, 0x2b, 0xed, 0x0, 0x9, 0x0, @void, @value}, 0x28) unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x73, 0x4, 0x5, 0x4, 0x8000, 0x9, 0x0, {0x0, @in6={{0xa, 0x4e23, 0x4, @mcast1, 0x80}}, 0x3, 0x0, 0x18000, 0xe, 0x5}}, &(0x7f0000000200)=0xb0) 0s ago: executing program 0 (id=3964): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000000)='-1\x00', 0x3) r2 = socket$inet(0x2, 0x802, 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0xfffffffe, 0x4) write(r2, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x25, 0x0}}], 0x1f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x100, @loopback, 0xfffff000}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, @in6={0xa, 0x4e20, 0xfc7b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}], 0x84) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) kernel console output (not intermixed with test programs): [ 205.437899][T12365] Tainted: [W]=WARN [ 205.441697][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 205.451787][T12365] Call Trace: [ 205.455189][T12365] [ 205.458125][T12365] dump_stack_lvl+0xf2/0x150 [ 205.462760][T12365] dump_stack+0x15/0x20 [ 205.466915][T12365] should_fail_ex+0x223/0x230 [ 205.471701][T12365] should_fail+0xb/0x10 [ 205.475892][T12365] should_fail_usercopy+0x1a/0x20 [ 205.481070][T12365] _copy_from_user+0x1e/0xb0 [ 205.485688][T12365] restore_altstack+0x48/0xd0 [ 205.490437][T12365] __do_sys_rt_sigreturn+0xd7/0x160 [ 205.495788][T12365] x64_sys_call+0x2982/0x2dc0 [ 205.500554][T12365] do_syscall_64+0xc9/0x1c0 [ 205.505097][T12365] ? clear_bhb_loop+0x55/0xb0 [ 205.509793][T12365] ? clear_bhb_loop+0x55/0xb0 [ 205.514504][T12365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.520414][T12365] RIP: 0033:0x7f95433cc189 [ 205.525017][T12365] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 205.545005][T12365] RSP: 002b:00007f9541aa6ac0 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 205.553479][T12365] RAX: ffffffffffffffda RBX: 00007f95435f5fa0 RCX: 00007f95433cc189 [ 205.561471][T12365] RDX: 00007f9541aa6ac0 RSI: 00007f9541aa6bf0 RDI: 0000000000000021 [ 205.569444][T12365] RBP: 00007f9541aa70a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.577431][T12365] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 205.585424][T12365] R13: 0000000000000000 R14: 00007f95435f5fa0 R15: 00007ffcdd5dfa68 [ 205.593420][T12365] [ 205.647382][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.656859][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.666046][ T11] bond0 (unregistering): Released all slaves [ 205.673897][ T11] bond1 (unregistering): Released all slaves [ 205.697773][T12367] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 51929 - 0 [ 205.758481][T12373] pim6reg1: entered promiscuous mode [ 205.763828][T12373] pim6reg1: entered allmulticast mode [ 205.777003][T12367] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 51929 - 0 [ 205.795069][T12302] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.802332][T12302] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.809956][T12302] bridge_slave_0: entered allmulticast mode [ 205.816592][T12302] bridge_slave_0: entered promiscuous mode [ 205.835351][ T11] hsr_slave_0: left promiscuous mode [ 205.843613][ T11] hsr_slave_1: left promiscuous mode [ 205.849405][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.857033][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.897334][T12392] loop6: detected capacity change from 0 to 1024 [ 205.917454][T12392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.934112][ T28] smc: removing ib device syz1 [ 205.954704][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.970078][T12302] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.977220][T12302] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.984508][T12302] bridge_slave_1: entered allmulticast mode [ 205.991315][T12302] bridge_slave_1: entered promiscuous mode [ 206.000074][T12367] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 51929 - 0 [ 206.016755][T12388] macsec1: entered allmulticast mode [ 206.022151][T12388] hsr0: entered allmulticast mode [ 206.027230][T12388] hsr_slave_0: entered allmulticast mode [ 206.032898][T12388] hsr_slave_1: entered allmulticast mode [ 206.041201][T12388] hsr0: left allmulticast mode [ 206.046035][T12388] hsr_slave_0: left allmulticast mode [ 206.051419][T12388] hsr_slave_1: left allmulticast mode [ 206.128207][T12402] 9pnet_fd: Insufficient options for proto=fd [ 206.139685][T12302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.153616][T12367] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 51929 - 0 [ 206.167621][T12302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.219002][T12302] team0: Port device team_slave_0 added [ 206.231394][T12367] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 51929 - 0 [ 206.251629][T12302] team0: Port device team_slave_1 added [ 206.270308][T12367] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 51929 - 0 [ 206.282490][T12367] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 51929 - 0 [ 206.298450][T12412] 9pnet_fd: Insufficient options for proto=fd [ 206.298757][T12302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.312049][T12302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.338331][T12302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.352089][T12367] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 51929 - 0 [ 206.361922][T12302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.368965][T12302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.395011][T12302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.426795][T12302] hsr_slave_0: entered promiscuous mode [ 206.434220][T12302] hsr_slave_1: entered promiscuous mode [ 206.440487][T12302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.448198][T12302] Cannot create hsr debugfs directory [ 206.583738][T12438] macsec1: entered allmulticast mode [ 206.589384][T12438] hsr0: entered allmulticast mode [ 206.594435][T12438] hsr_slave_0: entered allmulticast mode [ 206.600494][T12438] hsr_slave_1: entered allmulticast mode [ 206.608008][T12438] hsr0: left allmulticast mode [ 206.612786][T12438] hsr_slave_0: left allmulticast mode [ 206.618203][T12438] hsr_slave_1: left allmulticast mode [ 206.629680][T12440] macsec0: entered allmulticast mode [ 206.635023][T12440] hsr0: entered allmulticast mode [ 206.640084][T12440] hsr_slave_0: entered allmulticast mode [ 206.646742][T12440] hsr0: left allmulticast mode [ 206.651602][T12440] hsr_slave_0: left allmulticast mode [ 206.826747][T12302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.837322][T12302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.854414][T12302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.871945][T12465] macsec1: entered allmulticast mode [ 206.877349][T12465] hsr0: entered allmulticast mode [ 206.882388][T12465] hsr_slave_0: entered allmulticast mode [ 206.888146][T12465] hsr_slave_1: entered allmulticast mode [ 206.897123][T12465] hsr0: left allmulticast mode [ 206.901945][T12465] hsr_slave_0: left allmulticast mode [ 206.907371][T12465] hsr_slave_1: left allmulticast mode [ 206.918435][T12302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.961611][T12302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.976635][T12302] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.986523][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.993632][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.007319][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.014456][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.133376][T12302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.152573][T12482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.186587][T12482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.263856][T12502] loop6: detected capacity change from 0 to 512 [ 207.291576][T12302] veth0_vlan: entered promiscuous mode [ 207.292721][T12502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.300024][T12302] veth1_vlan: entered promiscuous mode [ 207.317100][T12502] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.324431][T12302] veth0_macvtap: entered promiscuous mode [ 207.339581][T12302] veth1_macvtap: entered promiscuous mode [ 207.350726][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.361297][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.371244][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.381749][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.393119][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.393725][T12302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.412635][T12509] macsec0: entered allmulticast mode [ 207.418042][T12509] hsr0: entered allmulticast mode [ 207.423088][T12509] hsr_slave_0: entered allmulticast mode [ 207.456264][T12509] hsr0: left allmulticast mode [ 207.461126][T12509] hsr_slave_0: left allmulticast mode [ 207.467024][T12514] FAULT_INJECTION: forcing a failure. [ 207.467024][T12514] name failslab, interval 1, probability 0, space 0, times 0 [ 207.479728][T12514] CPU: 0 UID: 0 PID: 12514 Comm: syz.6.3099 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 207.491644][T12514] Tainted: [W]=WARN [ 207.495529][T12514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 207.505702][T12514] Call Trace: [ 207.508998][T12514] [ 207.511932][T12514] dump_stack_lvl+0xf2/0x150 [ 207.516531][T12514] dump_stack+0x15/0x20 [ 207.520697][T12514] should_fail_ex+0x223/0x230 [ 207.525397][T12514] should_failslab+0x8f/0xb0 [ 207.530037][T12514] kmem_cache_alloc_noprof+0x52/0x320 [ 207.535473][T12514] ? audit_log_start+0x34c/0x6b0 [ 207.540463][T12514] audit_log_start+0x34c/0x6b0 [ 207.545311][T12514] audit_seccomp+0x4b/0x130 [ 207.549838][T12514] __seccomp_filter+0x6fa/0x1180 [ 207.554817][T12514] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 207.560534][T12514] ? vfs_write+0x596/0x920 [ 207.565018][T12514] ? putname+0xcf/0xf0 [ 207.569125][T12514] __secure_computing+0x9f/0x1c0 [ 207.574076][T12514] syscall_trace_enter+0xd1/0x1f0 [ 207.579128][T12514] ? fpregs_assert_state_consistent+0x83/0xa0 [ 207.585238][T12514] do_syscall_64+0xaa/0x1c0 [ 207.589804][T12514] ? clear_bhb_loop+0x55/0xb0 [ 207.594573][T12514] ? clear_bhb_loop+0x55/0xb0 [ 207.599371][T12514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.605321][T12514] RIP: 0033:0x7fb5ec210849 [ 207.609754][T12514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.629454][T12514] RSP: 002b:00007fb5ea887058 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 207.637971][T12514] RAX: ffffffffffffffda RBX: 00007fb5ec3d5fa0 RCX: 00007fb5ec210849 [ 207.645952][T12514] RDX: 0000000000000000 RSI: 0000000000000411 RDI: 0000000000000010 [ 207.653936][T12514] RBP: 00007fb5ea8870a0 R08: 0000000000000000 R09: 0000000000000000 [ 207.662020][T12514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.670021][T12514] R13: 0000000000000000 R14: 00007fb5ec3d5fa0 R15: 00007ffdeb05ea98 [ 207.678011][T12514] [ 207.691299][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.701888][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.711829][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.722299][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.734711][T12302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.744281][T12302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.753350][T12302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.762364][T12302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.771222][T12302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.852490][T12537] FAULT_INJECTION: forcing a failure. [ 207.852490][T12537] name failslab, interval 1, probability 0, space 0, times 0 [ 207.865433][T12537] CPU: 1 UID: 0 PID: 12537 Comm: syz.3.3027 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 207.877365][T12537] Tainted: [W]=WARN [ 207.881173][T12537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 207.891242][T12537] Call Trace: [ 207.894541][T12537] [ 207.897515][T12537] dump_stack_lvl+0xf2/0x150 [ 207.902133][T12537] dump_stack+0x15/0x20 [ 207.906377][T12537] should_fail_ex+0x223/0x230 [ 207.911121][T12537] ? __request_region+0x57/0x430 [ 207.916152][T12537] should_failslab+0x8f/0xb0 [ 207.920762][T12537] __kmalloc_cache_noprof+0x4e/0x320 [ 207.926145][T12537] __request_region+0x57/0x430 [ 207.931001][T12537] ? __slab_free+0x67/0x2b0 [ 207.935519][T12537] serial8250_request_std_resource+0x115/0x250 [ 207.941758][T12537] serial8250_config_port+0x39/0x2c20 [ 207.947155][T12537] ? free_resource+0x106/0x260 [ 207.952024][T12537] ? __release_region+0x1d7/0x240 [ 207.957073][T12537] univ8250_config_port+0x280/0x360 [ 207.962281][T12537] uart_ioctl+0xc22/0xe20 [ 207.966946][T12537] ? do_vfs_ioctl+0x96e/0x1530 [ 207.971748][T12537] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 207.976892][T12537] tty_ioctl+0x815/0xbe0 [ 207.981208][T12537] ? __pfx_tty_ioctl+0x10/0x10 [ 207.986030][T12537] __se_sys_ioctl+0xc9/0x140 [ 207.990647][T12537] __x64_sys_ioctl+0x43/0x50 [ 207.995330][T12537] x64_sys_call+0x1690/0x2dc0 [ 208.000024][T12537] do_syscall_64+0xc9/0x1c0 [ 208.004538][T12537] ? clear_bhb_loop+0x55/0xb0 [ 208.009227][T12537] ? clear_bhb_loop+0x55/0xb0 [ 208.013912][T12537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.019828][T12537] RIP: 0033:0x7f3455740849 [ 208.024321][T12537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.043946][T12537] RSP: 002b:00007f3453db7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.052428][T12537] RAX: ffffffffffffffda RBX: 00007f3455905fa0 RCX: 00007f3455740849 [ 208.060426][T12537] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003 [ 208.068404][T12537] RBP: 00007f3453db70a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.076383][T12537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.084360][T12537] R13: 0000000000000000 R14: 00007f3455905fa0 R15: 00007fff820e1608 [ 208.092407][T12537] [ 208.268601][T12545] pim6reg1: entered promiscuous mode [ 208.274115][T12545] pim6reg1: entered allmulticast mode [ 208.314528][T12547] pim6reg1: entered promiscuous mode [ 208.320015][T12547] pim6reg1: entered allmulticast mode [ 208.509838][T12555] macsec0: entered allmulticast mode [ 208.515406][T12555] hsr0: entered allmulticast mode [ 208.520456][T12555] hsr_slave_0: entered allmulticast mode [ 208.551605][T12555] hsr0: left allmulticast mode [ 208.556481][T12555] hsr_slave_0: left allmulticast mode [ 208.681649][T12564] __nla_validate_parse: 7 callbacks suppressed [ 208.681669][T12564] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3119'. [ 208.776888][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3122'. [ 208.818990][T12573] pim6reg1: entered promiscuous mode [ 208.824390][T12573] pim6reg1: entered allmulticast mode [ 208.920151][T12574] lo speed is unknown, defaulting to 1000 [ 208.933546][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.949913][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.984570][T12574] chnl_net:caif_netlink_parms(): no params data found [ 209.025689][T12574] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.032938][T12574] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.047380][T12574] bridge_slave_0: entered allmulticast mode [ 209.054303][T12574] bridge_slave_0: entered promiscuous mode [ 209.067090][T12574] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.074306][T12574] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.080977][T12607] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3133'. [ 209.081893][T12574] bridge_slave_1: entered allmulticast mode [ 209.097497][T12574] bridge_slave_1: entered promiscuous mode [ 209.103953][T12607] loop6: detected capacity change from 0 to 1024 [ 209.130005][T12574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.140681][T12574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.156703][T12607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.183906][T12574] team0: Port device team_slave_0 added [ 209.190628][T12574] team0: Port device team_slave_1 added [ 209.191415][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.235335][T12621] FAULT_INJECTION: forcing a failure. [ 209.235335][T12621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.242430][T12574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.248470][T12621] CPU: 1 UID: 0 PID: 12621 Comm: syz.0.3139 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 209.255425][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.267245][T12621] Tainted: [W]=WARN [ 209.267255][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 209.267271][T12621] Call Trace: [ 209.267296][T12621] [ 209.267305][T12621] dump_stack_lvl+0xf2/0x150 [ 209.267329][T12621] dump_stack+0x15/0x20 [ 209.293204][T12574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.297077][T12621] should_fail_ex+0x223/0x230 [ 209.312729][T12574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.313351][T12621] should_fail+0xb/0x10 [ 209.317992][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.322105][T12621] should_fail_usercopy+0x1a/0x20 [ 209.332609][T12574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.337251][T12621] _copy_from_user+0x1e/0xb0 [ 209.369028][T12624] loop6: detected capacity change from 0 to 512 [ 209.374179][T12621] copy_msghdr_from_user+0x54/0x2a0 [ 209.400503][T12624] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 209.400559][T12621] ? __fget_files+0x17c/0x1c0 [ 209.405766][T12624] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 209.417184][T12621] __sys_sendmsg+0x13e/0x230 [ 209.417238][T12621] __x64_sys_sendmsg+0x46/0x50 [ 209.421966][T12624] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3140: Corrupt directory, running e2fsck is recommended [ 209.432021][T12621] x64_sys_call+0x2734/0x2dc0 [ 209.439470][T12624] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 209.441379][T12621] do_syscall_64+0xc9/0x1c0 [ 209.454421][T12624] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.3140: corrupted in-inode xattr: invalid ea_ino [ 209.458932][T12621] ? clear_bhb_loop+0x55/0xb0 [ 209.458962][T12621] ? clear_bhb_loop+0x55/0xb0 [ 209.469350][T12624] EXT4-fs (loop6): Remounting filesystem read-only [ 209.471592][T12621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.485661][T12624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.489517][T12621] RIP: 0033:0x7f974d6a0849 [ 209.494275][T12624] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 209.500749][T12621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.500776][T12621] RSP: 002b:00007f974bd17058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.500800][T12621] RAX: ffffffffffffffda RBX: 00007f974d865fa0 RCX: 00007f974d6a0849 [ 209.500817][T12621] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 209.507789][T12624] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.519071][T12621] RBP: 00007f974bd170a0 R08: 0000000000000000 R09: 0000000000000000 [ 209.519090][T12621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.519107][T12621] R13: 0000000000000000 R14: 00007f974d865fa0 R15: 00007fff539e6d28 [ 209.519133][T12621] [ 209.599449][T12627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3141'. [ 209.631951][T12624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.642242][T12624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.662871][T12574] hsr_slave_0: entered promiscuous mode [ 209.675962][T12574] hsr_slave_1: entered promiscuous mode [ 209.686710][T12574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.694298][T12574] Cannot create hsr debugfs directory [ 209.707233][T12631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3143'. [ 209.791085][T12638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3146'. [ 209.806014][T12574] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.896611][T12574] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.956155][T12574] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.990932][T12649] 9pnet_fd: Insufficient options for proto=fd [ 210.002034][T12656] FAULT_INJECTION: forcing a failure. [ 210.002034][T12656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.015130][T12656] CPU: 1 UID: 0 PID: 12656 Comm: +}[@ Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 210.026600][T12656] Tainted: [W]=WARN [ 210.030443][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.040571][T12656] Call Trace: [ 210.043848][T12656] [ 210.046811][T12656] dump_stack_lvl+0xf2/0x150 [ 210.051407][T12656] dump_stack+0x15/0x20 [ 210.055640][T12656] should_fail_ex+0x223/0x230 [ 210.060393][T12656] should_fail+0xb/0x10 [ 210.064895][T12656] should_fail_usercopy+0x1a/0x20 [ 210.069995][T12656] _copy_from_user+0x1e/0xb0 [ 210.074588][T12656] do_sys_poll+0x153/0xc20 [ 210.079014][T12656] ? avc_has_perm+0xd4/0x160 [ 210.083757][T12656] ? set_user_sigmask+0x83/0x190 [ 210.088768][T12656] __se_sys_ppoll+0x1af/0x1f0 [ 210.093529][T12656] __x64_sys_ppoll+0x67/0x80 [ 210.098121][T12656] x64_sys_call+0x2acc/0x2dc0 [ 210.102804][T12656] do_syscall_64+0xc9/0x1c0 [ 210.107308][T12656] ? clear_bhb_loop+0x55/0xb0 [ 210.112096][T12656] ? clear_bhb_loop+0x55/0xb0 [ 210.116862][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.122785][T12656] RIP: 0033:0x7f82d6b90849 [ 210.127205][T12656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.146881][T12656] RSP: 002b:00007f82d5207058 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 210.155296][T12656] RAX: ffffffffffffffda RBX: 00007f82d6d55fa0 RCX: 00007f82d6b90849 [ 210.163266][T12656] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00000000200000c0 [ 210.171387][T12656] RBP: 00007f82d52070a0 R08: 0000000000000000 R09: 0000000000000000 [ 210.179428][T12656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.187400][T12656] R13: 0000000000000000 R14: 00007f82d6d55fa0 R15: 00007ffe3da13968 [ 210.195452][T12656] [ 210.225942][T12574] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.249533][T12662] FAULT_INJECTION: forcing a failure. [ 210.249533][T12662] name failslab, interval 1, probability 0, space 0, times 0 [ 210.262287][T12662] CPU: 0 UID: 0 PID: 12662 Comm: syz.5.3156 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 210.274213][T12662] Tainted: [W]=WARN [ 210.278068][T12662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.288130][T12662] Call Trace: [ 210.291410][T12662] [ 210.294404][T12662] dump_stack_lvl+0xf2/0x150 [ 210.299005][T12662] dump_stack+0x15/0x20 [ 210.303232][T12662] should_fail_ex+0x223/0x230 [ 210.307963][T12662] ? __pfx_vlan_setup+0x10/0x10 [ 210.312888][T12662] should_failslab+0x8f/0xb0 [ 210.317515][T12662] __kmalloc_node_noprof+0xad/0x410 [ 210.322739][T12662] ? __kvmalloc_node_noprof+0x72/0x170 [ 210.328259][T12662] ? __pfx_vlan_setup+0x10/0x10 [ 210.333133][T12662] __kvmalloc_node_noprof+0x72/0x170 [ 210.338509][T12662] alloc_netdev_mqs+0xa8/0x9c0 [ 210.343281][T12662] ? __pfx_vlan_setup+0x10/0x10 [ 210.348219][T12662] rtnl_create_link+0x233/0x680 [ 210.353103][T12662] rtnl_newlink_create+0x133/0x5c0 [ 210.358295][T12662] rtnl_newlink+0xe3a/0x1200 [ 210.362910][T12662] ? xa_load+0xb9/0xe0 [ 210.367009][T12662] ? memcg_list_lru_alloc+0xce/0x4e0 [ 210.372363][T12662] ? mod_objcg_state+0x2ea/0x4f0 [ 210.377510][T12662] ? mod_objcg_state+0x2ea/0x4f0 [ 210.382516][T12662] ? __rcu_read_unlock+0x4e/0x70 [ 210.387480][T12662] ? avc_has_perm_noaudit+0x1cc/0x210 [ 210.392865][T12662] ? selinux_capable+0x1f2/0x260 [ 210.397936][T12662] ? security_capable+0x81/0x90 [ 210.402797][T12662] ? ns_capable+0x7d/0xb0 [ 210.407212][T12662] ? __pfx_rtnl_newlink+0x10/0x10 [ 210.412302][T12662] rtnetlink_rcv_msg+0x651/0x710 [ 210.417278][T12662] ? avc_has_perm_noaudit+0x1cc/0x210 [ 210.422661][T12662] netlink_rcv_skb+0x12c/0x230 [ 210.427509][T12662] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.433009][T12662] rtnetlink_rcv+0x1c/0x30 [ 210.437475][T12662] netlink_unicast+0x599/0x670 [ 210.442276][T12662] netlink_sendmsg+0x5cc/0x6e0 [ 210.447202][T12662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.452536][T12662] __sock_sendmsg+0x140/0x180 [ 210.457339][T12662] ____sys_sendmsg+0x312/0x410 [ 210.462122][T12662] __sys_sendmsg+0x19d/0x230 [ 210.466815][T12662] __x64_sys_sendmsg+0x46/0x50 [ 210.471593][T12662] x64_sys_call+0x2734/0x2dc0 [ 210.476303][T12662] do_syscall_64+0xc9/0x1c0 [ 210.480884][T12662] ? clear_bhb_loop+0x55/0xb0 [ 210.485571][T12662] ? clear_bhb_loop+0x55/0xb0 [ 210.490255][T12662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.496173][T12662] RIP: 0033:0x7f82d6b90849 [ 210.500592][T12662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.520297][T12662] RSP: 002b:00007f82d5207058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.528720][T12662] RAX: ffffffffffffffda RBX: 00007f82d6d55fa0 RCX: 00007f82d6b90849 [ 210.536698][T12662] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000007 [ 210.544715][T12662] RBP: 00007f82d52070a0 R08: 0000000000000000 R09: 0000000000000000 [ 210.552699][T12662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.560762][T12662] R13: 0000000000000000 R14: 00007f82d6d55fa0 R15: 00007ffe3da13968 [ 210.568754][T12662] [ 210.620884][ T29] kauditd_printk_skb: 730 callbacks suppressed [ 210.620904][ T29] audit: type=1326 audit(1732944715.948:115701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12663 comm="syz.6.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ec210849 code=0x7ffc0000 [ 210.650995][ T29] audit: type=1326 audit(1732944715.948:115702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12663 comm="syz.6.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb5ec210849 code=0x7ffc0000 [ 210.674756][ T29] audit: type=1326 audit(1732944715.948:115703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12663 comm="syz.6.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ec210849 code=0x7ffc0000 [ 210.732499][ T29] audit: type=1326 audit(1732944716.068:115704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.0.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974d6a0849 code=0x7ffc0000 [ 210.757501][T12574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.791412][T12574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.798459][ T29] audit: type=1326 audit(1732944716.068:115705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.0.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f974d6a0849 code=0x7ffc0000 [ 210.804453][T12676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3163'. [ 210.822226][ T29] audit: type=1326 audit(1732944716.068:115706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12672 comm="syz.0.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974d6a0849 code=0x7ffc0000 [ 210.869377][T12674] pim6reg1: entered promiscuous mode [ 210.874801][T12674] pim6reg1: entered allmulticast mode [ 210.896629][T12574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.907205][T12574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.993873][ T29] audit: type=1326 audit(1732944716.318:115707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12680 comm="syz.5.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d6b90849 code=0x7ffc0000 [ 211.017731][ T29] audit: type=1326 audit(1732944716.318:115708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12680 comm="syz.5.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d6b90849 code=0x7ffc0000 [ 211.025151][T12574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.041531][ T29] audit: type=1326 audit(1732944716.318:115709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12680 comm="syz.5.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82d6b90849 code=0x7ffc0000 [ 211.053459][T12574] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.071811][ T29] audit: type=1326 audit(1732944716.318:115710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12680 comm="syz.5.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d6b90849 code=0x7ffc0000 [ 211.109552][T12670] netlink: 'syz.6.3161': attribute type 29 has an invalid length. [ 211.120248][T12679] netlink: 'syz.6.3161': attribute type 29 has an invalid length. [ 211.132115][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.139290][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.153921][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.161042][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.283936][T12574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.303504][T12684] 9pnet_fd: Insufficient options for proto=fd [ 211.331262][T12698] loop6: detected capacity change from 0 to 512 [ 211.350319][T12698] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 211.361922][T12698] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 211.372067][T12698] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3167: Corrupt directory, running e2fsck is recommended [ 211.383948][T12574] veth0_vlan: entered promiscuous mode [ 211.392667][T12698] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 211.401556][T12698] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.3167: corrupted in-inode xattr: invalid ea_ino [ 211.415743][T12698] EXT4-fs (loop6): Remounting filesystem read-only [ 211.422605][T12698] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.423742][T12574] veth1_vlan: entered promiscuous mode [ 211.440611][T12698] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 211.447632][T12698] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.460652][T12690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.471289][T12690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.487198][T12574] veth0_macvtap: entered promiscuous mode [ 211.494518][T12574] veth1_macvtap: entered promiscuous mode [ 211.506944][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.517628][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.527501][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.537983][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.547875][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.558333][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.569256][T12574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.580017][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.590805][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.600783][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.611232][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.621119][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.631550][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.642127][T12574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.652733][T12574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.661672][T12574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.670610][T12574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.679455][T12574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.782111][T12729] macsec1: entered allmulticast mode [ 211.787530][T12729] hsr0: entered allmulticast mode [ 211.792573][T12729] hsr_slave_0: entered allmulticast mode [ 211.798365][T12729] hsr_slave_1: entered allmulticast mode [ 211.806318][T12729] hsr0: left allmulticast mode [ 211.811207][T12729] hsr_slave_0: left allmulticast mode [ 211.816880][T12729] hsr_slave_1: left allmulticast mode [ 211.890260][T12732] 9pnet_fd: Insufficient options for proto=fd [ 211.923052][T12739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3181'. [ 211.987748][T12743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3183'. [ 212.029035][T12745] FAULT_INJECTION: forcing a failure. [ 212.029035][T12745] name failslab, interval 1, probability 0, space 0, times 0 [ 212.041772][T12745] CPU: 0 UID: 0 PID: 12745 Comm: syz.3.3184 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 212.053708][T12745] Tainted: [W]=WARN [ 212.057615][T12745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 212.067740][T12745] Call Trace: [ 212.071068][T12745] [ 212.074021][T12745] dump_stack_lvl+0xf2/0x150 [ 212.078642][T12745] dump_stack+0x15/0x20 [ 212.082925][T12745] should_fail_ex+0x223/0x230 [ 212.087638][T12745] should_failslab+0x8f/0xb0 [ 212.092246][T12745] kmem_cache_alloc_noprof+0x52/0x320 [ 212.097724][T12745] ? getname_kernel+0x3d/0x1e0 [ 212.102555][T12745] getname_kernel+0x3d/0x1e0 [ 212.107173][T12745] kern_path+0x21/0x120 [ 212.111404][T12745] unix_find_other+0x88/0x550 [ 212.116111][T12745] unix_dgram_sendmsg+0x75a/0xff0 [ 212.121169][T12745] ? selinux_socket_sendmsg+0x185/0x1c0 [ 212.126827][T12745] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 212.132388][T12745] __sock_sendmsg+0x140/0x180 [ 212.137090][T12745] ____sys_sendmsg+0x312/0x410 [ 212.141913][T12745] __sys_sendmmsg+0x227/0x4b0 [ 212.146641][T12745] __x64_sys_sendmmsg+0x57/0x70 [ 212.151547][T12745] x64_sys_call+0x29aa/0x2dc0 [ 212.156324][T12745] do_syscall_64+0xc9/0x1c0 [ 212.160846][T12745] ? clear_bhb_loop+0x55/0xb0 [ 212.165605][T12745] ? clear_bhb_loop+0x55/0xb0 [ 212.170362][T12745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.176276][T12745] RIP: 0033:0x7f3455740849 [ 212.180720][T12745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.200341][T12745] RSP: 002b:00007f3453db7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.208874][T12745] RAX: ffffffffffffffda RBX: 00007f3455905fa0 RCX: 00007f3455740849 [ 212.216851][T12745] RDX: 0000000000000001 RSI: 0000000020002100 RDI: 0000000000000006 [ 212.224829][T12745] RBP: 00007f3453db70a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.232804][T12745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.240782][T12745] R13: 0000000000000000 R14: 00007f3455905fa0 R15: 00007fff820e1608 [ 212.248771][T12745] [ 212.310056][T12751] loop6: detected capacity change from 0 to 1024 [ 212.317137][T12751] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.340540][T12751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.379882][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.440791][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3192'. [ 212.492267][T12774] pim6reg1: entered promiscuous mode [ 212.497814][T12774] pim6reg1: entered allmulticast mode [ 212.590244][T12779] 9pnet_fd: Insufficient options for proto=fd [ 212.660906][T12789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.674390][T12789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.700376][T12793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.715679][T12793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.737253][T12789] syzkaller0: entered promiscuous mode [ 212.742776][T12789] syzkaller0: entered allmulticast mode [ 212.972567][T12809] pim6reg1: entered promiscuous mode [ 212.978060][T12809] pim6reg1: entered allmulticast mode [ 213.042309][T12815] vlan2: entered allmulticast mode [ 213.104639][T12824] FAULT_INJECTION: forcing a failure. [ 213.104639][T12824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.118091][T12824] CPU: 0 UID: 0 PID: 12824 Comm: syz.3.3214 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 213.130004][T12824] Tainted: [W]=WARN [ 213.133809][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.143886][T12824] Call Trace: [ 213.147168][T12824] [ 213.150142][T12824] dump_stack_lvl+0xf2/0x150 [ 213.154746][T12824] dump_stack+0x15/0x20 [ 213.158985][T12824] should_fail_ex+0x223/0x230 [ 213.163738][T12824] should_fail+0xb/0x10 [ 213.167962][T12824] should_fail_usercopy+0x1a/0x20 [ 213.173038][T12824] _copy_from_iter+0xd5/0xd00 [ 213.177790][T12824] ? kmalloc_reserve+0x16e/0x190 [ 213.182812][T12824] ? __build_skb_around+0x196/0x1f0 [ 213.188096][T12824] ? __alloc_skb+0x21f/0x310 [ 213.192715][T12824] ? __virt_addr_valid+0x1ed/0x250 [ 213.197896][T12824] ? __check_object_size+0x364/0x520 [ 213.203231][T12824] netlink_sendmsg+0x460/0x6e0 [ 213.208091][T12824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.213387][T12824] __sock_sendmsg+0x140/0x180 [ 213.218186][T12824] ____sys_sendmsg+0x312/0x410 [ 213.222959][T12824] __sys_sendmsg+0x19d/0x230 [ 213.227567][T12824] __x64_sys_sendmsg+0x46/0x50 [ 213.232334][T12824] x64_sys_call+0x2734/0x2dc0 [ 213.237029][T12824] do_syscall_64+0xc9/0x1c0 [ 213.241586][T12824] ? clear_bhb_loop+0x55/0xb0 [ 213.246396][T12824] ? clear_bhb_loop+0x55/0xb0 [ 213.251134][T12824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.257073][T12824] RIP: 0033:0x7f3455740849 [ 213.261581][T12824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.281202][T12824] RSP: 002b:00007f3453db7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.289748][T12824] RAX: ffffffffffffffda RBX: 00007f3455905fa0 RCX: 00007f3455740849 [ 213.297774][T12824] RDX: 0000000004048000 RSI: 0000000020000440 RDI: 0000000000000006 [ 213.305759][T12824] RBP: 00007f3453db70a0 R08: 0000000000000000 R09: 0000000000000000 [ 213.313748][T12824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.321731][T12824] R13: 0000000000000000 R14: 00007f3455905fa0 R15: 00007fff820e1608 [ 213.329805][T12824] [ 213.554971][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.556021][T12859] FAULT_INJECTION: forcing a failure. [ 213.556021][T12859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.576678][T12859] CPU: 0 UID: 0 PID: 12859 Comm: syz.1.3230 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 213.588675][T12859] Tainted: [W]=WARN [ 213.592554][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.602628][T12859] Call Trace: [ 213.605970][T12859] [ 213.608906][T12859] dump_stack_lvl+0xf2/0x150 [ 213.613511][T12859] dump_stack+0x15/0x20 [ 213.617680][T12859] should_fail_ex+0x223/0x230 [ 213.622392][T12859] should_fail+0xb/0x10 [ 213.626576][T12859] should_fail_usercopy+0x1a/0x20 [ 213.631723][T12859] strncpy_from_user+0x25/0x210 [ 213.636614][T12859] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 213.642283][T12859] ? getname_flags+0x81/0x3b0 [ 213.647138][T12859] getname_flags+0xb0/0x3b0 [ 213.651674][T12859] user_path_at+0x26/0x120 [ 213.656172][T12859] do_fchownat+0x92/0x1a0 [ 213.660617][T12859] __x64_sys_lchown+0x4a/0x60 [ 213.665308][T12859] x64_sys_call+0x1e29/0x2dc0 [ 213.670037][T12859] do_syscall_64+0xc9/0x1c0 [ 213.674548][T12859] ? clear_bhb_loop+0x55/0xb0 [ 213.679234][T12859] ? clear_bhb_loop+0x55/0xb0 [ 213.683986][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.689944][T12859] RIP: 0033:0x7f4bd6ea0849 [ 213.694431][T12859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.714091][T12859] RSP: 002b:00007f4bd5517058 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 213.722595][T12859] RAX: ffffffffffffffda RBX: 00007f4bd7065fa0 RCX: 00007f4bd6ea0849 [ 213.730573][T12859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 213.738579][T12859] RBP: 00007f4bd55170a0 R08: 0000000000000000 R09: 0000000000000000 [ 213.746625][T12859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.754601][T12859] R13: 0000000000000000 R14: 00007f4bd7065fa0 R15: 00007ffe611d4398 [ 213.762638][T12859] [ 213.766631][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.906483][T12871] loop6: detected capacity change from 0 to 2048 [ 213.942019][T12871] Alternate GPT is invalid, using primary GPT. [ 213.948560][T12871] loop6: p2 p3 p7 [ 214.006397][T12881] FAULT_INJECTION: forcing a failure. [ 214.006397][T12881] name failslab, interval 1, probability 0, space 0, times 0 [ 214.019129][T12881] CPU: 1 UID: 0 PID: 12881 Comm: syz.1.3240 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 214.031102][T12881] Tainted: [W]=WARN [ 214.034907][T12881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 214.045211][T12881] Call Trace: [ 214.048590][T12881] [ 214.051529][T12881] dump_stack_lvl+0xf2/0x150 [ 214.056158][T12881] dump_stack+0x15/0x20 [ 214.060398][T12881] should_fail_ex+0x223/0x230 [ 214.065244][T12881] should_failslab+0x8f/0xb0 [ 214.069954][T12881] kmem_cache_alloc_noprof+0x52/0x320 [ 214.075343][T12881] ? audit_log_start+0x34c/0x6b0 [ 214.080300][T12881] audit_log_start+0x34c/0x6b0 [ 214.085092][T12881] audit_seccomp+0x4b/0x130 [ 214.089617][T12881] __seccomp_filter+0x6fa/0x1180 [ 214.094568][T12881] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 214.100213][T12881] ? vfs_write+0x596/0x920 [ 214.104804][T12881] ? putname+0xcf/0xf0 [ 214.108895][T12881] __secure_computing+0x9f/0x1c0 [ 214.113873][T12881] syscall_trace_enter+0xd1/0x1f0 [ 214.118965][T12881] ? fpregs_assert_state_consistent+0x83/0xa0 [ 214.125077][T12881] do_syscall_64+0xaa/0x1c0 [ 214.129616][T12881] ? clear_bhb_loop+0x55/0xb0 [ 214.134362][T12881] ? clear_bhb_loop+0x55/0xb0 [ 214.139043][T12881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.144958][T12881] RIP: 0033:0x7f4bd6ea0849 [ 214.149415][T12881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.169037][T12881] RSP: 002b:00007f4bd5517058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 214.177508][T12881] RAX: ffffffffffffffda RBX: 00007f4bd7065fa0 RCX: 00007f4bd6ea0849 [ 214.185585][T12881] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 214.193640][T12881] RBP: 00007f4bd55170a0 R08: 0000000000000000 R09: 0000000000000000 [ 214.201754][T12881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.209784][T12881] R13: 0000000000000000 R14: 00007f4bd7065fa0 R15: 00007ffe611d4398 [ 214.217781][T12881] [ 214.269891][T12891] syz.5.3244[12891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.269965][T12891] syz.5.3244[12891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.282659][T12891] syz.5.3244[12891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.342098][T12899] syz.0.3247[12899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.364204][T12899] syz.0.3247[12899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.405345][T12899] syz.0.3247[12899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.550332][T12924] __nla_validate_parse: 8 callbacks suppressed [ 214.550402][T12924] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3259'. [ 214.702605][T12929] 9pnet_fd: Insufficient options for proto=fd [ 214.707795][T12940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3265'. [ 214.898508][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.911514][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.924793][T12976] xt_hashlimit: max too large, truncated to 1048576 [ 214.960057][T12976] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 214.966698][T12976] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 214.974184][T12976] vhci_hcd vhci_hcd.0: Device attached [ 215.036350][T12982] vhci_hcd: connection closed [ 215.036689][ T28] vhci_hcd: stop threads [ 215.045737][ T28] vhci_hcd: release socket [ 215.050171][ T28] vhci_hcd: disconnect device [ 215.119219][T12992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=12992 comm=syz.6.3286 [ 215.196925][T13011] macsec1: entered allmulticast mode [ 215.202292][T13011] hsr0: entered allmulticast mode [ 215.207384][T13011] hsr_slave_0: entered allmulticast mode [ 215.209085][T13013] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3295'. [ 215.213030][T13011] hsr_slave_1: entered allmulticast mode [ 215.228157][T13011] hsr0: left allmulticast mode [ 215.233056][T13011] hsr_slave_0: left allmulticast mode [ 215.238536][T13011] hsr_slave_1: left allmulticast mode [ 215.245402][T13013] loop6: detected capacity change from 0 to 1024 [ 215.266775][T13013] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.291873][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.367181][T13027] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3298'. [ 215.407637][T13029] macvlan2: entered promiscuous mode [ 215.413134][T13029] bridge0: entered promiscuous mode [ 215.420249][T13029] bridge0: port 2(macvlan2) entered blocking state [ 215.427105][T13029] bridge0: port 2(macvlan2) entered disabled state [ 215.434578][T13029] macvlan2: entered allmulticast mode [ 215.440171][T13029] bridge0: entered allmulticast mode [ 215.448795][T13029] macvlan2: left allmulticast mode [ 215.453973][T13029] bridge0: left allmulticast mode [ 215.480691][T13029] bridge0: left promiscuous mode [ 215.514358][T13043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3306'. [ 215.556817][T13049] macsec1: entered allmulticast mode [ 215.562192][T13049] hsr0: entered allmulticast mode [ 215.567302][T13049] hsr_slave_0: entered allmulticast mode [ 215.572984][T13049] hsr_slave_1: entered allmulticast mode [ 215.624230][T13049] hsr0: left allmulticast mode [ 215.629330][T13049] hsr_slave_0: left allmulticast mode [ 215.634751][T13049] hsr_slave_1: left allmulticast mode [ 215.662586][ T29] kauditd_printk_skb: 886 callbacks suppressed [ 215.662603][ T29] audit: type=1326 audit(1732944720.998:116595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 215.693349][ T29] audit: type=1326 audit(1732944721.008:116596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 215.717325][ T29] audit: type=1326 audit(1732944721.008:116597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 215.741459][ T29] audit: type=1326 audit(1732944721.008:116598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 215.765346][ T29] audit: type=1326 audit(1732944721.008:116599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 215.789315][ T29] audit: type=1326 audit(1732944721.008:116600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 215.813031][ T29] audit: type=1326 audit(1732944721.008:116601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 215.836804][ T29] audit: type=1326 audit(1732944721.008:116602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 215.860575][ T29] audit: type=1326 audit(1732944721.008:116603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 215.884550][ T29] audit: type=1326 audit(1732944721.008:116604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13065 comm="syz.1.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 215.909342][T13078] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 215.916039][T13078] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 215.923863][T13078] vhci_hcd vhci_hcd.0: Device attached [ 215.934748][T13069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.944269][T13069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.952330][T13080] vhci_hcd: connection closed [ 215.953535][ T998] vhci_hcd: stop threads [ 215.962613][ T998] vhci_hcd: release socket [ 215.967123][ T998] vhci_hcd: disconnect device [ 215.981030][T13084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3321'. [ 216.132852][T13089] pim6reg1: entered promiscuous mode [ 216.138283][T13089] pim6reg1: entered allmulticast mode [ 216.147758][T13088] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3323'. [ 216.361263][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3330'. [ 216.372792][T13106] macsec1: entered allmulticast mode [ 216.378197][T13106] hsr0: entered allmulticast mode [ 216.383330][T13106] hsr_slave_0: entered allmulticast mode [ 216.389041][T13106] hsr_slave_1: entered allmulticast mode [ 216.397074][T13106] hsr0: left allmulticast mode [ 216.401874][T13106] hsr_slave_0: left allmulticast mode [ 216.407333][T13106] hsr_slave_1: left allmulticast mode [ 216.418166][T13104] vlan1: entered allmulticast mode [ 216.521186][T13113] loop6: detected capacity change from 0 to 2048 [ 216.575758][T13113] Alternate GPT is invalid, using primary GPT. [ 216.582224][T13113] loop6: p2 p3 p7 [ 216.620327][T13127] hsr0: entered promiscuous mode [ 216.633644][ T3022] Alternate GPT is invalid, using primary GPT. [ 216.640060][ T3022] loop6: p2 p3 p7 [ 216.644185][T13127] macsec1: entered allmulticast mode [ 216.649607][T13127] hsr0: entered allmulticast mode [ 216.654879][T13127] hsr_slave_0: entered allmulticast mode [ 216.660820][T13127] hsr_slave_1: entered allmulticast mode [ 216.672039][T13127] hsr0: left allmulticast mode [ 216.676938][T13127] hsr_slave_0: left allmulticast mode [ 216.682395][T13127] hsr_slave_1: left allmulticast mode [ 216.758705][ T3022] Alternate GPT is invalid, using primary GPT. [ 216.765132][ T3022] loop6: p2 p3 p7 [ 216.805510][T13115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.819322][ T6589] udevd[6589]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 216.820080][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 216.836814][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 216.872812][T13115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.877579][T13143] macsec1: entered allmulticast mode [ 216.885948][T13143] hsr0: entered allmulticast mode [ 216.890991][T13143] hsr_slave_0: entered allmulticast mode [ 216.896660][T13143] hsr_slave_1: entered allmulticast mode [ 216.911060][ T6589] udevd[6589]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 216.921267][T13143] hsr0: left allmulticast mode [ 216.922329][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 216.926110][T13143] hsr_slave_0: left allmulticast mode [ 216.937751][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 216.941214][T13143] hsr_slave_1: left allmulticast mode [ 216.963068][ T6589] udevd[6589]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 216.978896][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 216.991722][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 217.084055][T13159] loop6: detected capacity change from 0 to 512 [ 217.090895][T13157] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3352'. [ 217.101905][T13159] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 217.111219][T13159] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 217.126895][T13159] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 217.139981][T13159] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 217.148199][T13159] System zones: 0-2, 18-18, 34-34 [ 217.155385][T13159] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 217.181256][T13159] EXT4-fs (loop6): 1 truncate cleaned up [ 217.222008][T13159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.225857][T13155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.244441][T13159] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3353'. [ 217.258402][T13155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.335191][T13155] syz.0.3351[13155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.335271][T13155] syz.0.3351[13155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.355484][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.370102][T13155] syz.0.3351[13155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.392306][T13179] pim6reg1: entered promiscuous mode [ 217.409233][T13179] pim6reg1: entered allmulticast mode [ 217.438011][T13181] 9pnet_fd: Insufficient options for proto=fd [ 217.440936][T13183] macsec0: entered allmulticast mode [ 217.449460][T13183] hsr0: entered allmulticast mode [ 217.454553][T13183] hsr_slave_0: entered allmulticast mode [ 217.463654][T13183] hsr0: left allmulticast mode [ 217.468525][T13183] hsr_slave_0: left allmulticast mode [ 217.550315][T13194] loop6: detected capacity change from 0 to 164 [ 217.557641][T13194] Unable to read rock-ridge attributes [ 217.571179][T13194] Unable to read rock-ridge attributes [ 217.593109][T13194] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 217.603551][T13198] ip6gre1: entered allmulticast mode [ 217.609639][T13198] FAULT_INJECTION: forcing a failure. [ 217.609639][T13198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.622872][T13198] CPU: 1 UID: 0 PID: 13198 Comm: syz.5.3371 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 217.634853][T13198] Tainted: [W]=WARN [ 217.638661][T13198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.648731][T13198] Call Trace: [ 217.652067][T13198] [ 217.655052][T13198] dump_stack_lvl+0xf2/0x150 [ 217.659735][T13198] dump_stack+0x15/0x20 [ 217.663964][T13198] should_fail_ex+0x223/0x230 [ 217.668709][T13198] should_fail+0xb/0x10 [ 217.672926][T13198] should_fail_usercopy+0x1a/0x20 [ 217.678006][T13198] _copy_from_user+0x1e/0xb0 [ 217.682619][T13198] copy_msghdr_from_user+0x54/0x2a0 [ 217.687914][T13198] ? __fget_files+0x17c/0x1c0 [ 217.692610][T13198] __sys_sendmmsg+0x1e8/0x4b0 [ 217.697354][T13198] __x64_sys_sendmmsg+0x57/0x70 [ 217.702225][T13198] x64_sys_call+0x29aa/0x2dc0 [ 217.706953][T13198] do_syscall_64+0xc9/0x1c0 [ 217.711463][T13198] ? clear_bhb_loop+0x55/0xb0 [ 217.716150][T13198] ? clear_bhb_loop+0x55/0xb0 [ 217.720883][T13198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.726896][T13198] RIP: 0033:0x7f82d6b90849 [ 217.731388][T13198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.751092][T13198] RSP: 002b:00007f82d5207058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 217.759533][T13198] RAX: ffffffffffffffda RBX: 00007f82d6d55fa0 RCX: 00007f82d6b90849 [ 217.767510][T13198] RDX: 0000000000000001 RSI: 00000000200017c0 RDI: 0000000000000003 [ 217.775531][T13198] RBP: 00007f82d52070a0 R08: 0000000000000000 R09: 0000000000000000 [ 217.783579][T13198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.791631][T13198] R13: 0000000000000000 R14: 00007f82d6d55fa0 R15: 00007ffe3da13968 [ 217.799678][T13198] [ 217.893393][T13208] loop6: detected capacity change from 0 to 1024 [ 217.933046][T13208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.946954][T13216] pim6reg1: entered promiscuous mode [ 217.952399][T13216] pim6reg1: entered allmulticast mode [ 217.969671][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.004526][T13218] hsr0: entered promiscuous mode [ 218.009774][T13218] macsec1: entered allmulticast mode [ 218.015171][T13218] hsr0: entered allmulticast mode [ 218.020254][T13218] hsr_slave_0: entered allmulticast mode [ 218.026042][T13218] hsr_slave_1: entered allmulticast mode [ 218.033879][T13218] hsr0: left allmulticast mode [ 218.035553][T13212] 9pnet_fd: Insufficient options for proto=fd [ 218.038712][T13218] hsr_slave_0: left allmulticast mode [ 218.050314][T13218] hsr_slave_1: left allmulticast mode [ 218.097129][T13229] loop6: detected capacity change from 0 to 512 [ 218.159686][T13229] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 218.167725][T13229] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 218.176703][T13229] System zones: 0-1, 15-15, 18-18, 34-34 [ 218.185597][T13229] EXT4-fs (loop6): orphan cleanup on readonly fs [ 218.192006][T13229] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 218.206650][T13229] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 218.219387][T13229] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3383: bg 0: block 40: padding at end of block bitmap is not set [ 218.274610][T13229] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 218.283722][T13229] EXT4-fs (loop6): 1 truncate cleaned up [ 218.300080][T13229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.370694][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.657151][T13271] 9pnet_fd: Insufficient options for proto=fd [ 218.838710][T13295] loop6: detected capacity change from 0 to 2048 [ 218.887047][T13303] pim6reg1: entered promiscuous mode [ 218.892480][T13303] pim6reg1: entered allmulticast mode [ 218.921317][T13295] Alternate GPT is invalid, using primary GPT. [ 218.927750][T13295] loop6: p2 p3 p7 [ 219.029008][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 219.144157][T13314] 9pnet_fd: Insufficient options for proto=fd [ 219.289146][T13339] pim6reg1: entered promiscuous mode [ 219.294763][T13339] pim6reg1: entered allmulticast mode [ 219.338909][T13345] bridge0: entered promiscuous mode [ 219.344689][T13345] macvlan2: entered promiscuous mode [ 219.352022][T13345] bridge0: port 3(macvlan2) entered blocking state [ 219.358737][T13345] bridge0: port 3(macvlan2) entered disabled state [ 219.365704][T13345] macvlan2: entered allmulticast mode [ 219.371112][T13345] bridge0: entered allmulticast mode [ 219.377082][T13345] macvlan2: left allmulticast mode [ 219.382385][T13345] bridge0: left allmulticast mode [ 219.389135][T13345] bridge0: left promiscuous mode [ 219.402752][T13349] macvlan2: entered promiscuous mode [ 219.408164][T13349] bridge0: entered promiscuous mode [ 219.429784][T13349] bridge0: port 4(macvlan2) entered blocking state [ 219.436443][T13349] bridge0: port 4(macvlan2) entered disabled state [ 219.443510][T13349] macvlan2: entered allmulticast mode [ 219.448991][T13349] bridge0: entered allmulticast mode [ 219.456144][T13349] macvlan2: left allmulticast mode [ 219.461334][T13349] bridge0: left allmulticast mode [ 219.476220][T13349] bridge0: left promiscuous mode [ 219.602896][T13355] hub 6-0:1.0: USB hub found [ 219.607687][T13355] hub 6-0:1.0: 8 ports detected [ 219.692300][T13377] __nla_validate_parse: 9 callbacks suppressed [ 219.692320][T13377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 219.736470][T13368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.766000][T13368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.777877][T13386] bridge0: entered promiscuous mode [ 219.788348][T13386] macvlan2: entered promiscuous mode [ 219.809568][T13386] bridge0: port 3(macvlan2) entered blocking state [ 219.816189][T13386] bridge0: port 3(macvlan2) entered disabled state [ 219.829954][T13386] macvlan2: entered allmulticast mode [ 219.835820][T13386] bridge0: entered allmulticast mode [ 219.853793][T13386] macvlan2: left allmulticast mode [ 219.859036][T13386] bridge0: left allmulticast mode [ 219.874160][T13386] bridge0: left promiscuous mode [ 219.893120][T13393] macsec0: entered allmulticast mode [ 219.898579][T13393] hsr0: entered allmulticast mode [ 219.903782][T13393] hsr_slave_0: entered allmulticast mode [ 219.911837][T13393] hsr0: left allmulticast mode [ 219.916706][T13393] hsr_slave_0: left allmulticast mode [ 219.995547][T13401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.004673][T13401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.042672][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.053157][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.316821][T13426] loop6: detected capacity change from 0 to 2048 [ 220.370908][T13426] Alternate GPT is invalid, using primary GPT. [ 220.377361][T13426] loop6: p2 p3 p7 [ 220.498276][T13442] loop6: detected capacity change from 0 to 1024 [ 220.541912][T13442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.573797][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.611260][T13456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.615937][T13455] loop6: detected capacity change from 0 to 1024 [ 220.624612][T13456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.641765][T13453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.651645][T13453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.662484][T13455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.681058][ T29] kauditd_printk_skb: 875 callbacks suppressed [ 220.681073][ T29] audit: type=1326 audit(1732944726.018:117479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 220.711128][ T29] audit: type=1326 audit(1732944726.018:117480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.0.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974d6a0849 code=0x7ffc0000 [ 220.734891][ T29] audit: type=1326 audit(1732944726.018:117481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 220.758684][ T29] audit: type=1326 audit(1732944726.018:117482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 220.782435][ T29] audit: type=1326 audit(1732944726.018:117483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 220.806455][ T29] audit: type=1326 audit(1732944726.018:117484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 220.830201][ T29] audit: type=1326 audit(1732944726.018:117485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 220.854209][ T29] audit: type=1326 audit(1732944726.018:117486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 220.877936][ T29] audit: type=1326 audit(1732944726.018:117487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 220.901833][ T29] audit: type=1326 audit(1732944726.018:117488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd6ea0849 code=0x7ffc0000 [ 220.927833][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.091306][T13470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.103837][T13470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.191943][T13472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.201053][T13472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.214001][T13493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3494'. [ 221.497383][T13521] FAULT_INJECTION: forcing a failure. [ 221.497383][T13521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.510531][T13521] CPU: 0 UID: 0 PID: 13521 Comm: syz.3.3505 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 221.522544][T13521] Tainted: [W]=WARN [ 221.526455][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.536574][T13521] Call Trace: [ 221.539872][T13521] [ 221.542801][T13521] dump_stack_lvl+0xf2/0x150 [ 221.547492][T13521] dump_stack+0x15/0x20 [ 221.551647][T13521] should_fail_ex+0x223/0x230 [ 221.556335][T13521] should_fail+0xb/0x10 [ 221.560497][T13521] should_fail_usercopy+0x1a/0x20 [ 221.565589][T13521] fpu__restore_sig+0x11d/0xb00 [ 221.570480][T13521] restore_sigcontext+0x1b5/0x220 [ 221.575532][T13521] __do_sys_rt_sigreturn+0xfd/0x160 [ 221.580771][T13521] x64_sys_call+0x2982/0x2dc0 [ 221.585507][T13521] do_syscall_64+0xc9/0x1c0 [ 221.590075][T13521] ? clear_bhb_loop+0x55/0xb0 [ 221.594763][T13521] ? clear_bhb_loop+0x55/0xb0 [ 221.599493][T13521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.605422][T13521] RIP: 0033:0x7f3455740847 [ 221.609838][T13521] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 221.629470][T13521] RSP: 002b:00007f3453d96058 EFLAGS: 00000246 [ 221.635547][T13521] RAX: 00000000000000ca RBX: 00007f3455906080 RCX: 00007f3455740849 [ 221.643617][T13521] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000000002000cffc [ 221.651615][T13521] RBP: 00007f3453d960a0 R08: 0000000020048000 R09: 0000000000000000 [ 221.659765][T13521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.667740][T13521] R13: 0000000000000000 R14: 00007f3455906080 R15: 00007fff820e1608 [ 221.675797][T13521] [ 221.680844][T13525] pim6reg1: entered promiscuous mode [ 221.686324][T13525] pim6reg1: entered allmulticast mode [ 221.898780][T13549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3520'. [ 221.953076][T13555] pim6reg1: entered promiscuous mode [ 221.958488][T13555] pim6reg1: entered allmulticast mode [ 222.126890][T13577] FAULT_INJECTION: forcing a failure. [ 222.126890][T13577] name failslab, interval 1, probability 0, space 0, times 0 [ 222.139789][T13577] CPU: 1 UID: 0 PID: 13577 Comm: syz.0.3532 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 222.151748][T13577] Tainted: [W]=WARN [ 222.155593][T13577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.165694][T13577] Call Trace: [ 222.168990][T13577] [ 222.172050][T13577] dump_stack_lvl+0xf2/0x150 [ 222.176670][T13577] dump_stack+0x15/0x20 [ 222.180874][T13577] should_fail_ex+0x223/0x230 [ 222.185625][T13577] should_failslab+0x8f/0xb0 [ 222.190250][T13577] kmem_cache_alloc_node_noprof+0x59/0x320 [ 222.196085][T13577] ? perf_event_alloc+0x157/0x12e0 [ 222.201244][T13577] ? __mod_memcg_lruvec_state+0x141/0x290 [ 222.207243][T13577] perf_event_alloc+0x157/0x12e0 [ 222.212275][T13577] inherit_event+0x7e/0x780 [ 222.216804][T13577] ? __kmalloc_cache_noprof+0x186/0x320 [ 222.222427][T13577] inherit_task_group+0x26b/0x6a0 [ 222.227477][T13577] perf_event_init_task+0x242/0x480 [ 222.232761][T13577] copy_process+0xbbf/0x1f90 [ 222.237482][T13577] ? 0xffffffff81000000 [ 222.241654][T13577] kernel_clone+0x167/0x5e0 [ 222.246181][T13577] ? vfs_write+0x596/0x920 [ 222.250702][T13577] __x64_sys_clone+0xe8/0x120 [ 222.255421][T13577] x64_sys_call+0x2d7e/0x2dc0 [ 222.260182][T13577] do_syscall_64+0xc9/0x1c0 [ 222.264700][T13577] ? clear_bhb_loop+0x55/0xb0 [ 222.269393][T13577] ? clear_bhb_loop+0x55/0xb0 [ 222.274096][T13577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.280100][T13577] RIP: 0033:0x7f974d6a0849 [ 222.284536][T13577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.304221][T13577] RSP: 002b:00007f974bd17008 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 222.312654][T13577] RAX: ffffffffffffffda RBX: 00007f974d865fa0 RCX: 00007f974d6a0849 [ 222.320639][T13577] RDX: 0000000000000000 RSI: 0000000000008630 RDI: 0000000004023480 [ 222.328624][T13577] RBP: 00007f974bd170a0 R08: 0000000000000000 R09: 0000000000000000 [ 222.336616][T13577] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 222.344673][T13577] R13: 0000000000000000 R14: 00007f974d865fa0 R15: 00007fff539e6d28 [ 222.352733][T13577] [ 222.501765][T13604] macsec1: entered allmulticast mode [ 222.507164][T13604] hsr0: entered allmulticast mode [ 222.512311][T13604] hsr_slave_0: entered allmulticast mode [ 222.518103][T13604] hsr_slave_1: entered allmulticast mode [ 222.549517][T13604] hsr0: left allmulticast mode [ 222.554524][T13604] hsr_slave_0: left allmulticast mode [ 222.560038][T13604] hsr_slave_1: left allmulticast mode [ 222.576601][T13596] 9pnet_fd: Insufficient options for proto=fd [ 222.649295][T13620] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3548'. [ 222.686701][T13629] FAULT_INJECTION: forcing a failure. [ 222.686701][T13629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.702590][T13629] CPU: 0 UID: 0 PID: 13629 Comm: syz.0.3550 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 222.714629][T13629] Tainted: [W]=WARN [ 222.718503][T13629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.728577][T13629] Call Trace: [ 222.731872][T13629] [ 222.734820][T13629] dump_stack_lvl+0xf2/0x150 [ 222.739435][T13629] dump_stack+0x15/0x20 [ 222.743621][T13629] should_fail_ex+0x223/0x230 [ 222.748341][T13629] should_fail+0xb/0x10 [ 222.752560][T13629] should_fail_usercopy+0x1a/0x20 [ 222.757649][T13629] _copy_from_iter+0xd5/0xd00 [ 222.762411][T13629] ? skb_set_owner_w+0x164/0x1b0 [ 222.767378][T13629] ? __virt_addr_valid+0x1ed/0x250 [ 222.772572][T13629] ? __check_object_size+0x364/0x520 [ 222.777887][T13629] skb_copy_datagram_from_iter+0xb3/0x460 [ 222.783654][T13629] ? skb_put+0xba/0x100 [ 222.787840][T13629] unix_stream_sendmsg+0x430/0x880 [ 222.793023][T13629] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 222.798768][T13629] __sock_sendmsg+0x140/0x180 [ 222.803482][T13629] ____sys_sendmsg+0x312/0x410 [ 222.808313][T13629] __sys_sendmsg+0x19d/0x230 [ 222.812931][T13629] __x64_sys_sendmsg+0x46/0x50 [ 222.817766][T13629] x64_sys_call+0x2734/0x2dc0 [ 222.822460][T13629] do_syscall_64+0xc9/0x1c0 [ 222.826974][T13629] ? clear_bhb_loop+0x55/0xb0 [ 222.831657][T13629] ? clear_bhb_loop+0x55/0xb0 [ 222.836346][T13629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.842288][T13629] RIP: 0033:0x7f974d6a0849 [ 222.846709][T13629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.866332][T13629] RSP: 002b:00007f974bd17058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.874835][T13629] RAX: ffffffffffffffda RBX: 00007f974d865fa0 RCX: 00007f974d6a0849 [ 222.882816][T13629] RDX: 0000000000000003 RSI: 0000000020000980 RDI: 0000000000000005 [ 222.890944][T13629] RBP: 00007f974bd170a0 R08: 0000000000000000 R09: 0000000000000000 [ 222.899004][T13629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.906989][T13629] R13: 0000000000000000 R14: 00007f974d865fa0 R15: 00007fff539e6d28 [ 222.915023][T13629] [ 222.943074][T13638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3554'. [ 223.018322][T13648] veth1_macvtap: left promiscuous mode [ 223.023987][T13648] macsec0: entered promiscuous mode [ 223.055228][T13657] macsec1: entered allmulticast mode [ 223.060774][T13657] hsr0: entered allmulticast mode [ 223.065891][T13657] hsr_slave_0: entered allmulticast mode [ 223.071601][T13657] hsr_slave_1: entered allmulticast mode [ 223.081499][T13657] hsr0: left allmulticast mode [ 223.086340][T13657] hsr_slave_0: left allmulticast mode [ 223.091805][T13657] hsr_slave_1: left allmulticast mode [ 223.228544][T13684] pim6reg1: entered promiscuous mode [ 223.233963][T13684] pim6reg1: entered allmulticast mode [ 223.352006][T13701] macsec1: entered allmulticast mode [ 223.357532][T13701] hsr0: entered allmulticast mode [ 223.362605][T13701] hsr_slave_0: entered allmulticast mode [ 223.368604][T13701] hsr_slave_1: entered allmulticast mode [ 223.396555][T13701] hsr0: left allmulticast mode [ 223.401383][T13701] hsr_slave_0: left allmulticast mode [ 223.406828][T13701] hsr_slave_1: left allmulticast mode [ 223.422136][T13709] FAULT_INJECTION: forcing a failure. [ 223.422136][T13709] name failslab, interval 1, probability 0, space 0, times 0 [ 223.434838][T13709] CPU: 0 UID: 0 PID: 13709 Comm: syz.6.3584 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 223.446854][T13709] Tainted: [W]=WARN [ 223.450670][T13709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.460815][T13709] Call Trace: [ 223.464116][T13709] [ 223.467062][T13709] dump_stack_lvl+0xf2/0x150 [ 223.471671][T13709] dump_stack+0x15/0x20 [ 223.475842][T13709] should_fail_ex+0x223/0x230 [ 223.480548][T13709] should_failslab+0x8f/0xb0 [ 223.485156][T13709] kmem_cache_alloc_node_noprof+0x59/0x320 [ 223.491072][T13709] ? __alloc_skb+0x10b/0x310 [ 223.495676][T13709] __alloc_skb+0x10b/0x310 [ 223.500104][T13709] netlink_alloc_large_skb+0xad/0xe0 [ 223.505487][T13709] netlink_sendmsg+0x3b4/0x6e0 [ 223.510297][T13709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.515653][T13709] __sock_sendmsg+0x140/0x180 [ 223.520384][T13709] ____sys_sendmsg+0x312/0x410 [ 223.525214][T13709] __sys_sendmsg+0x19d/0x230 [ 223.529884][T13709] __x64_sys_sendmsg+0x46/0x50 [ 223.534671][T13709] x64_sys_call+0x2734/0x2dc0 [ 223.539425][T13709] do_syscall_64+0xc9/0x1c0 [ 223.544066][T13709] ? clear_bhb_loop+0x55/0xb0 [ 223.548809][T13709] ? clear_bhb_loop+0x55/0xb0 [ 223.553501][T13709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.559490][T13709] RIP: 0033:0x7fb5ec210849 [ 223.563910][T13709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.583544][T13709] RSP: 002b:00007fb5ea887058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.592001][T13709] RAX: ffffffffffffffda RBX: 00007fb5ec3d5fa0 RCX: 00007fb5ec210849 [ 223.599986][T13709] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 223.608002][T13709] RBP: 00007fb5ea8870a0 R08: 0000000000000000 R09: 0000000000000000 [ 223.616027][T13709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.624040][T13709] R13: 0000000000000000 R14: 00007fb5ec3d5fa0 R15: 00007ffdeb05ea98 [ 223.632025][T13709] [ 223.667050][T13716] bond1: entered promiscuous mode [ 223.672216][T13716] bond1: entered allmulticast mode [ 223.679297][T13716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.689889][T13716] bond1 (unregistering): Released all slaves [ 223.708076][T13721] pim6reg1: entered promiscuous mode [ 223.713483][T13721] pim6reg1: entered allmulticast mode [ 224.011017][T13747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.031105][T13747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.058392][T13762] loop6: detected capacity change from 0 to 2048 [ 224.258671][T13762] loop6: unable to read partition table [ 224.290723][T13762] loop6: partition table beyond EOD, truncated [ 224.297049][T13762] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 224.365876][T13787] 9pnet: Could not find request transport: fd rfdno=0xffffffffffffffff [ 224.478630][T13800] macvlan2: entered promiscuous mode [ 224.478652][T13800] bridge0: entered promiscuous mode [ 224.479032][T13800] bridge0: port 2(macvlan2) entered blocking state [ 224.479061][T13800] bridge0: port 2(macvlan2) entered disabled state [ 224.480853][T13800] macvlan2: entered allmulticast mode [ 224.480873][T13800] bridge0: entered allmulticast mode [ 224.481375][T13800] macvlan2: left allmulticast mode [ 224.481392][T13800] bridge0: left allmulticast mode [ 224.481683][T13800] bridge0: left promiscuous mode [ 224.742164][T13822] 9pnet_fd: Insufficient options for proto=fd [ 224.809571][T13834] loop6: detected capacity change from 0 to 164 [ 224.818710][T13834] Unable to read rock-ridge attributes [ 224.827664][T13834] Unable to read rock-ridge attributes [ 224.833365][T13834] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 224.852204][T13837] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3632'. [ 224.871826][T13831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.882077][T13831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.906946][T13839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=13839 comm=syz.6.3638 [ 225.119442][T13875] macvlan2: entered promiscuous mode [ 225.124943][T13875] bridge0: entered promiscuous mode [ 225.131074][T13875] bridge0: port 2(macvlan2) entered blocking state [ 225.137650][T13875] bridge0: port 2(macvlan2) entered disabled state [ 225.144368][T13875] macvlan2: entered allmulticast mode [ 225.149836][T13875] bridge0: entered allmulticast mode [ 225.157086][T13875] macvlan2: left allmulticast mode [ 225.162308][T13875] bridge0: left allmulticast mode [ 225.168064][T13875] bridge0: left promiscuous mode [ 225.296963][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3661'. [ 225.382597][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3657'. [ 225.775025][T13906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.893071][T13906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.997044][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3675'. [ 226.130171][T13930] bridge0: entered promiscuous mode [ 226.136634][T13930] macvlan2: entered promiscuous mode [ 226.143406][T13930] bridge0: port 3(macvlan2) entered blocking state [ 226.150062][T13930] bridge0: port 3(macvlan2) entered disabled state [ 226.158128][T13930] macvlan2: entered allmulticast mode [ 226.163587][T13930] bridge0: entered allmulticast mode [ 226.171088][T13930] macvlan2: left allmulticast mode [ 226.176263][T13930] bridge0: left allmulticast mode [ 226.182537][T13930] bridge0: left promiscuous mode [ 226.213390][ T29] kauditd_printk_skb: 895 callbacks suppressed [ 226.213408][ T29] audit: type=1326 audit(1732944731.548:118384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13936 comm="syz.6.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ec210849 code=0x7ffc0000 [ 226.243566][T13940] loop6: detected capacity change from 0 to 1024 [ 226.252190][ T29] audit: type=1326 audit(1732944731.548:118385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13936 comm="syz.6.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ec210849 code=0x7ffc0000 [ 226.275989][ T29] audit: type=1326 audit(1732944731.548:118386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13936 comm="syz.6.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb5ec210849 code=0x7ffc0000 [ 226.299777][ T29] audit: type=1326 audit(1732944731.548:118387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13936 comm="syz.6.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ec210849 code=0x7ffc0000 [ 226.323530][ T29] audit: type=1326 audit(1732944731.548:118388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13936 comm="syz.6.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ec210849 code=0x7ffc0000 [ 226.368269][ T29] audit: type=1326 audit(1732944731.608:118389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d6b90849 code=0x7ffc0000 [ 226.375586][T13940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.392142][ T29] audit: type=1326 audit(1732944731.608:118390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82d6b90849 code=0x7ffc0000 [ 226.427747][ T29] audit: type=1326 audit(1732944731.608:118391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d6b90849 code=0x7ffc0000 [ 226.451653][ T29] audit: type=1326 audit(1732944731.618:118392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82d6b90849 code=0x7ffc0000 [ 226.475602][ T29] audit: type=1326 audit(1732944731.618:118393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.5.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d6b90849 code=0x7ffc0000 [ 226.551724][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.730169][T13987] pim6reg1: entered promiscuous mode [ 226.735624][T13987] pim6reg1: entered allmulticast mode [ 226.784233][T13989] pim6reg1: entered promiscuous mode [ 226.789651][T13989] pim6reg1: entered allmulticast mode [ 227.054640][T14003] lo speed is unknown, defaulting to 1000 [ 227.097322][ T11] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 51929 - 0 [ 227.120872][T14018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.150765][T14018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.189448][ T11] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 51929 - 0 [ 227.212303][T14003] chnl_net:caif_netlink_parms(): no params data found [ 227.287278][ T11] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 51929 - 0 [ 227.359261][ T11] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 51929 - 0 [ 227.413172][T14003] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.420291][T14003] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.436525][T14003] bridge_slave_0: entered allmulticast mode [ 227.444011][T14003] bridge_slave_0: entered promiscuous mode [ 227.455894][T14003] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.462986][T14003] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.471958][T14003] bridge_slave_1: entered allmulticast mode [ 227.478517][T14003] bridge_slave_1: entered promiscuous mode [ 227.501143][T14003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.522565][T14072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3731'. [ 227.533824][T14003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.552856][T14065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.575728][T14065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.584235][ T11] macvlan0: left allmulticast mode [ 227.589438][ T11] macvlan0: left promiscuous mode [ 227.594673][ T11] bridge0: port 3(macvlan0) entered disabled state [ 227.602420][ T11] bridge_slave_1: left allmulticast mode [ 227.608190][ T11] bridge_slave_1: left promiscuous mode [ 227.613864][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.622100][ T11] bridge_slave_0: left allmulticast mode [ 227.627900][ T11] bridge_slave_0: left promiscuous mode [ 227.633691][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.687416][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.696825][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.706234][ T11] bond0 (unregistering): Released all slaves [ 227.714835][T14003] team0: Port device team_slave_0 added [ 227.722362][T14003] team0: Port device team_slave_1 added [ 227.753320][ T11] hsr_slave_0: left promiscuous mode [ 227.759803][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.776257][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.900372][ T11] team0 (unregistering): Port device team_slave_1 removed [ 227.907316][T14095] loop6: detected capacity change from 0 to 1024 [ 227.923202][ T11] team0 (unregistering): Port device team_slave_0 removed [ 227.931716][T14095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.020220][T14003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.027246][T14003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.053333][T14003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.105112][T14100] lo speed is unknown, defaulting to 1000 [ 228.198037][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.274047][T14003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.281102][T14003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.307132][T14003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.371368][T14111] bridge0: entered promiscuous mode [ 228.376968][T14111] macvlan2: entered promiscuous mode [ 228.384101][T14111] bridge0: port 3(macvlan2) entered blocking state [ 228.390741][T14111] bridge0: port 3(macvlan2) entered disabled state [ 228.397818][T14111] macvlan2: entered allmulticast mode [ 228.403494][T14111] bridge0: entered allmulticast mode [ 228.417471][T14111] macvlan2: left allmulticast mode [ 228.422670][T14111] bridge0: left allmulticast mode [ 228.428389][T14111] bridge0: left promiscuous mode [ 228.439095][T14003] hsr_slave_0: entered promiscuous mode [ 228.445875][T14003] hsr_slave_1: entered promiscuous mode [ 228.461766][T14120] random: crng reseeded on system resumption [ 228.558915][T14118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.578084][T14118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.699493][T14135] pim6reg1: entered promiscuous mode [ 228.704835][T14135] pim6reg1: entered allmulticast mode [ 228.840125][T14149] bridge0: entered promiscuous mode [ 228.845794][T14149] macvlan2: entered promiscuous mode [ 228.852560][T14149] bridge0: port 3(macvlan2) entered blocking state [ 228.859211][T14149] bridge0: port 3(macvlan2) entered disabled state [ 228.867007][T14149] macvlan2: entered allmulticast mode [ 228.872411][T14149] bridge0: entered allmulticast mode [ 228.879204][T14149] macvlan2: left allmulticast mode [ 228.884400][T14149] bridge0: left allmulticast mode [ 228.891342][T14149] bridge0: left promiscuous mode [ 228.989616][T14003] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.001145][T14003] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.010201][T14003] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.027073][T14003] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.099349][T14003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.116479][T14003] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.126406][ T3416] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.133516][ T3416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.167224][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.174328][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.196254][T14167] pim6reg1: entered promiscuous mode [ 229.201641][T14167] pim6reg1: entered allmulticast mode [ 229.211355][T14003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.221785][T14003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.328669][T14003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.550027][T14198] FAULT_INJECTION: forcing a failure. [ 229.550027][T14198] name failslab, interval 1, probability 0, space 0, times 0 [ 229.562706][T14198] CPU: 1 UID: 0 PID: 14198 Comm: syz.6.3778 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 229.574625][T14198] Tainted: [W]=WARN [ 229.578467][T14198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.580863][T14003] veth0_vlan: entered promiscuous mode [ 229.588626][T14198] Call Trace: [ 229.588636][T14198] [ 229.588645][T14198] dump_stack_lvl+0xf2/0x150 [ 229.604895][T14198] dump_stack+0x15/0x20 [ 229.609099][T14198] should_fail_ex+0x223/0x230 [ 229.613815][T14198] should_failslab+0x8f/0xb0 [ 229.618466][T14198] kmem_cache_alloc_node_noprof+0x59/0x320 [ 229.624420][T14198] ? __alloc_skb+0x10b/0x310 [ 229.629020][T14198] __alloc_skb+0x10b/0x310 [ 229.633440][T14198] ? audit_log_start+0x34c/0x6b0 [ 229.638400][T14198] audit_log_start+0x368/0x6b0 [ 229.643195][T14198] audit_seccomp+0x4b/0x130 [ 229.647715][T14198] __seccomp_filter+0x6fa/0x1180 [ 229.652679][T14198] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 229.658336][T14198] ? vfs_write+0x596/0x920 [ 229.662912][T14198] ? putname+0xcf/0xf0 [ 229.666996][T14198] __secure_computing+0x9f/0x1c0 [ 229.671945][T14198] syscall_trace_enter+0xd1/0x1f0 [ 229.677022][T14198] ? fpregs_assert_state_consistent+0x83/0xa0 [ 229.683171][T14198] do_syscall_64+0xaa/0x1c0 [ 229.687680][T14198] ? clear_bhb_loop+0x55/0xb0 [ 229.692364][T14198] ? clear_bhb_loop+0x55/0xb0 [ 229.697073][T14198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.703078][T14198] RIP: 0033:0x7fb5ec210849 [ 229.707497][T14198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.727145][T14198] RSP: 002b:00007fb5ea887058 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 229.735585][T14198] RAX: ffffffffffffffda RBX: 00007fb5ec3d5fa0 RCX: 00007fb5ec210849 [ 229.743571][T14198] RDX: 0000000000006000 RSI: 0000000020000000 RDI: 0000000000000000 [ 229.751548][T14198] RBP: 00007fb5ea8870a0 R08: 0000000000000000 R09: 0000000000000000 [ 229.759544][T14198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.767573][T14198] R13: 0000000000000000 R14: 00007fb5ec3d5fa0 R15: 00007ffdeb05ea98 [ 229.775602][T14198] [ 229.783791][T14003] veth1_vlan: entered promiscuous mode [ 229.798598][T14003] veth0_macvtap: entered promiscuous mode [ 229.807409][T14003] veth1_macvtap: entered promiscuous mode [ 229.817610][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.828169][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.838102][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.848658][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.858556][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.869106][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.879184][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.889904][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.901838][T14003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.911901][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.922437][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.932341][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.942826][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.952829][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.963567][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.973541][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.984108][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.994764][T14003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.007512][T14003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.016278][T14003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.025087][T14003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.033898][T14003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.164528][T14231] netlink: 'syz.0.3789': attribute type 1 has an invalid length. [ 230.172428][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'. [ 230.351297][T14252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3797'. [ 230.378820][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.387532][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.407457][T14255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.430301][T14255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.445584][T14259] FAULT_INJECTION: forcing a failure. [ 230.445584][T14259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.458843][T14259] CPU: 1 UID: 0 PID: 14259 Comm: syz.5.3800 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 230.470794][T14259] Tainted: [W]=WARN [ 230.474607][T14259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.484684][T14259] Call Trace: [ 230.487977][T14259] [ 230.490925][T14259] dump_stack_lvl+0xf2/0x150 [ 230.495549][T14259] dump_stack+0x15/0x20 [ 230.499761][T14259] should_fail_ex+0x223/0x230 [ 230.504501][T14259] should_fail+0xb/0x10 [ 230.508690][T14259] should_fail_usercopy+0x1a/0x20 [ 230.513749][T14259] _copy_from_user+0x1e/0xb0 [ 230.518359][T14259] copy_msghdr_from_user+0x54/0x2a0 [ 230.523580][T14259] ? __fget_files+0x17c/0x1c0 [ 230.528305][T14259] __sys_sendmsg+0x13e/0x230 [ 230.532930][T14259] __x64_sys_sendmsg+0x46/0x50 [ 230.537763][T14259] x64_sys_call+0x2734/0x2dc0 [ 230.542462][T14259] do_syscall_64+0xc9/0x1c0 [ 230.546977][T14259] ? clear_bhb_loop+0x55/0xb0 [ 230.551662][T14259] ? clear_bhb_loop+0x55/0xb0 [ 230.556370][T14259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.562282][T14259] RIP: 0033:0x7f6a0aca0849 [ 230.566703][T14259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.586417][T14259] RSP: 002b:00007f6a09317058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.594841][T14259] RAX: ffffffffffffffda RBX: 00007f6a0ae65fa0 RCX: 00007f6a0aca0849 [ 230.602831][T14259] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 230.610809][T14259] RBP: 00007f6a093170a0 R08: 0000000000000000 R09: 0000000000000000 [ 230.618787][T14259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.626898][T14259] R13: 0000000000000000 R14: 00007f6a0ae65fa0 R15: 00007ffdde9c51a8 [ 230.634881][T14259] [ 230.654937][T14265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3801'. [ 230.800806][T14241] syz.6.3793[14241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.800917][T14241] syz.6.3793[14241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.812529][T14241] syz.6.3793[14241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.873441][T14283] 9pnet_fd: Insufficient options for proto=fd [ 230.897955][T14291] bridge0: entered promiscuous mode [ 230.903367][T14291] macvlan2: entered promiscuous mode [ 230.909961][T14291] bridge0: port 3(macvlan2) entered blocking state [ 230.916630][T14291] bridge0: port 3(macvlan2) entered disabled state [ 230.926574][T14291] macvlan2: entered allmulticast mode [ 230.932144][T14291] bridge0: entered allmulticast mode [ 230.938402][T14291] macvlan2: left allmulticast mode [ 230.943534][T14291] bridge0: left allmulticast mode [ 230.949341][T14291] bridge0: left promiscuous mode [ 231.099130][T14319] FAULT_INJECTION: forcing a failure. [ 231.099130][T14319] name failslab, interval 1, probability 0, space 0, times 0 [ 231.111898][T14319] CPU: 1 UID: 0 PID: 14319 Comm: syz.5.3826 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 231.123846][T14319] Tainted: [W]=WARN [ 231.127655][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.137734][T14319] Call Trace: [ 231.141020][T14319] [ 231.143958][T14319] dump_stack_lvl+0xf2/0x150 [ 231.148646][T14319] dump_stack+0x15/0x20 [ 231.152814][T14319] should_fail_ex+0x223/0x230 [ 231.157605][T14319] ? audit_log_d_path+0x96/0x250 [ 231.162690][T14319] should_failslab+0x8f/0xb0 [ 231.167346][T14319] __kmalloc_cache_noprof+0x4e/0x320 [ 231.172852][T14319] audit_log_d_path+0x96/0x250 [ 231.177766][T14319] ? __rcu_read_unlock+0x4e/0x70 [ 231.183065][T14319] audit_log_d_path_exe+0x42/0x70 [ 231.188234][T14319] audit_log_task+0x192/0x1c0 [ 231.192932][T14319] audit_seccomp+0x68/0x130 [ 231.197542][T14319] __seccomp_filter+0x6fa/0x1180 [ 231.202494][T14319] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 231.208159][T14319] ? vfs_write+0x596/0x920 [ 231.212620][T14319] __secure_computing+0x9f/0x1c0 [ 231.217568][T14319] syscall_trace_enter+0xd1/0x1f0 [ 231.222602][T14319] ? fpregs_assert_state_consistent+0x83/0xa0 [ 231.228699][T14319] do_syscall_64+0xaa/0x1c0 [ 231.233229][T14319] ? clear_bhb_loop+0x55/0xb0 [ 231.237916][T14319] ? clear_bhb_loop+0x55/0xb0 [ 231.242602][T14319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.248518][T14319] RIP: 0033:0x7f6a0aca0849 [ 231.252970][T14319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.272588][T14319] RSP: 002b:00007f6a09317058 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 231.281021][T14319] RAX: ffffffffffffffda RBX: 00007f6a0ae65fa0 RCX: 00007f6a0aca0849 [ 231.289041][T14319] RDX: 0000000000000000 RSI: 0000000020002980 RDI: ffffffffffffffff [ 231.297033][T14319] RBP: 00007f6a093170a0 R08: 0000000000000000 R09: 0000000000000000 [ 231.305086][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.313078][T14319] R13: 0000000000000000 R14: 00007f6a0ae65fa0 R15: 00007ffdde9c51a8 [ 231.321095][T14319] [ 231.324589][ T29] kauditd_printk_skb: 664 callbacks suppressed [ 231.324604][ T29] audit: type=1326 audit(1732944736.438:119056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.5.3826" exe="" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f6a0aca0849 code=0x7ffc0000 [ 231.361937][ T29] audit: type=1326 audit(1732944736.698:119057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.5.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6a0ac9f25c code=0x7ffc0000 [ 231.385561][ T29] audit: type=1326 audit(1732944736.698:119058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.5.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6a0ac9f2ff code=0x7ffc0000 [ 231.409340][ T29] audit: type=1326 audit(1732944736.698:119059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.5.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6a0ac9f4aa code=0x7ffc0000 [ 231.426387][T14323] pim6reg1: entered promiscuous mode [ 231.432915][ T29] audit: type=1326 audit(1732944736.698:119060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.5.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0aca0849 code=0x7ffc0000 [ 231.438248][T14323] pim6reg1: entered allmulticast mode [ 231.468100][ T29] audit: type=1326 audit(1732944736.698:119061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.5.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0aca0849 code=0x7ffc0000 [ 231.498483][T14324] @: renamed from bond0 (while UP) [ 231.554102][ T29] audit: type=1326 audit(1732944736.888:119062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14336 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0aca0849 code=0x7ffc0000 [ 231.578082][ T29] audit: type=1326 audit(1732944736.888:119063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14336 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0aca0849 code=0x7ffc0000 [ 231.611667][ T29] audit: type=1326 audit(1732944736.888:119064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14336 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a0aca0849 code=0x7ffc0000 [ 231.635436][ T29] audit: type=1326 audit(1732944736.888:119065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14336 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0aca0849 code=0x7ffc0000 [ 231.722879][T14344] 9pnet_fd: Insufficient options for proto=fd [ 231.833155][T14361] veth1_macvtap: left promiscuous mode [ 231.838789][T14361] macsec0: entered allmulticast mode [ 231.896505][T14365] macvlan2: entered promiscuous mode [ 231.901900][T14365] bridge0: entered promiscuous mode [ 231.918020][T14365] bridge0: port 2(macvlan2) entered blocking state [ 231.924597][T14365] bridge0: port 2(macvlan2) entered disabled state [ 231.932377][T14365] macvlan2: entered allmulticast mode [ 231.937827][T14365] bridge0: entered allmulticast mode [ 231.966382][T14365] macvlan2: left allmulticast mode [ 231.971554][T14365] bridge0: left allmulticast mode [ 231.995343][T14365] bridge0: left promiscuous mode [ 232.089693][T14390] FAULT_INJECTION: forcing a failure. [ 232.089693][T14390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 232.103084][T14390] CPU: 1 UID: 0 PID: 14390 Comm: syz.6.3853 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 232.115008][T14390] Tainted: [W]=WARN [ 232.118830][T14390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.128907][T14390] Call Trace: [ 232.132257][T14390] [ 232.135259][T14390] dump_stack_lvl+0xf2/0x150 [ 232.139873][T14390] dump_stack+0x15/0x20 [ 232.144052][T14390] should_fail_ex+0x223/0x230 [ 232.148893][T14390] should_fail_alloc_page+0xfd/0x110 [ 232.154207][T14390] __alloc_pages_noprof+0x109/0x340 [ 232.159503][T14390] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 232.164976][T14390] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 232.170355][T14393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.170376][T14390] handle_mm_fault+0xdd7/0x2ac0 [ 232.178904][T14393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.183541][T14390] exc_page_fault+0x3b9/0x650 [ 232.195989][T14390] asm_exc_page_fault+0x26/0x30 [ 232.200956][T14390] RIP: 0033:0x7fb5ec1bdb4b [ 232.205388][T14390] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 232.225135][T14390] RSP: 002b:00007fb5ea884e30 EFLAGS: 00010246 [ 232.231232][T14390] RAX: 00007fb5ea886f50 RBX: 00007fb5ec3a0620 RCX: 0000000000000000 [ 232.239223][T14390] RDX: 00007fb5ea886f98 RSI: 00007fb5ec26eae8 RDI: 00007fb5ea884e50 [ 232.240453][T14378] syz.1.3848[14378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.247273][T14390] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 232.247293][T14390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.247309][T14390] R13: 0000000000000000 R14: 00007fb5ec3d5fa0 R15: 00007ffdeb05ea98 [ 232.264668][T14378] syz.1.3848[14378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.266635][T14390] [ 232.266930][T14390] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 232.279682][T14378] syz.1.3848[14378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.333449][T14400] pim6reg1: entered promiscuous mode [ 232.350522][T14400] pim6reg1: entered allmulticast mode [ 232.377197][T14408] FAULT_INJECTION: forcing a failure. [ 232.377197][T14408] name failslab, interval 1, probability 0, space 0, times 0 [ 232.389949][T14408] CPU: 1 UID: 0 PID: 14408 Comm: syz.3.3861 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 232.401882][T14408] Tainted: [W]=WARN [ 232.405753][T14408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.415821][T14408] Call Trace: [ 232.419099][T14408] [ 232.422034][T14408] dump_stack_lvl+0xf2/0x150 [ 232.426652][T14408] dump_stack+0x15/0x20 [ 232.430833][T14408] should_fail_ex+0x223/0x230 [ 232.435586][T14408] should_failslab+0x8f/0xb0 [ 232.440205][T14408] __kmalloc_cache_node_noprof+0x56/0x320 [ 232.446030][T14408] ? __get_vm_area_node+0xfb/0x1c0 [ 232.451224][T14408] __get_vm_area_node+0xfb/0x1c0 [ 232.456285][T14408] __vmalloc_node_range_noprof+0x280/0xe80 [ 232.462126][T14408] ? copy_process+0x3a9/0x1f90 [ 232.466985][T14408] ? mod_objcg_state+0x3a7/0x4f0 [ 232.471966][T14408] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 232.478084][T14408] ? kmem_cache_alloc_node_noprof+0x22e/0x320 [ 232.484184][T14408] dup_task_struct+0x4a2/0x710 [ 232.489059][T14408] ? copy_process+0x3a9/0x1f90 [ 232.493903][T14408] copy_process+0x3a9/0x1f90 [ 232.498584][T14408] ? 0xffffffff81000000 [ 232.502741][T14408] ? selinux_file_permission+0x22a/0x360 [ 232.508414][T14408] ? __rcu_read_unlock+0x4e/0x70 [ 232.513435][T14408] kernel_clone+0x167/0x5e0 [ 232.518063][T14408] ? vfs_write+0x596/0x920 [ 232.522554][T14408] __x64_sys_clone+0xe8/0x120 [ 232.527317][T14408] x64_sys_call+0x2d7e/0x2dc0 [ 232.532011][T14408] do_syscall_64+0xc9/0x1c0 [ 232.536522][T14408] ? clear_bhb_loop+0x55/0xb0 [ 232.541268][T14408] ? clear_bhb_loop+0x55/0xb0 [ 232.546004][T14408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.551917][T14408] RIP: 0033:0x7f3455740849 [ 232.556361][T14408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.575987][T14408] RSP: 002b:00007f3453db7008 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 232.584429][T14408] RAX: ffffffffffffffda RBX: 00007f3455905fa0 RCX: 00007f3455740849 [ 232.592428][T14408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002280e080 [ 232.600408][T14408] RBP: 00007f3453db70a0 R08: 0000000000000000 R09: 0000000000000000 [ 232.608386][T14408] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 232.616366][T14408] R13: 0000000000000000 R14: 00007f3455905fa0 R15: 00007fff820e1608 [ 232.624474][T14408] [ 232.627801][T14408] warn_alloc: 1 callbacks suppressed [ 232.627836][T14408] syz.3.3861: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 232.648290][T14408] CPU: 1 UID: 0 PID: 14408 Comm: syz.3.3861 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 232.660258][T14408] Tainted: [W]=WARN [ 232.664113][T14408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.674213][T14408] Call Trace: [ 232.677504][T14408] [ 232.680487][T14408] dump_stack_lvl+0xf2/0x150 [ 232.685107][T14408] dump_stack+0x15/0x20 [ 232.689323][T14408] warn_alloc+0x145/0x1b0 [ 232.693693][T14408] __vmalloc_node_range_noprof+0x2a5/0xe80 [ 232.699659][T14408] ? mod_objcg_state+0x3a7/0x4f0 [ 232.704716][T14408] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 232.710877][T14408] ? kmem_cache_alloc_node_noprof+0x22e/0x320 [ 232.717011][T14408] dup_task_struct+0x4a2/0x710 [ 232.721796][T14408] ? copy_process+0x3a9/0x1f90 [ 232.726583][T14408] copy_process+0x3a9/0x1f90 [ 232.731197][T14408] ? 0xffffffff81000000 [ 232.735413][T14408] ? selinux_file_permission+0x22a/0x360 [ 232.741159][T14408] ? __rcu_read_unlock+0x4e/0x70 [ 232.746122][T14408] kernel_clone+0x167/0x5e0 [ 232.750642][T14408] ? vfs_write+0x596/0x920 [ 232.755088][T14408] __x64_sys_clone+0xe8/0x120 [ 232.759977][T14408] x64_sys_call+0x2d7e/0x2dc0 [ 232.764673][T14408] do_syscall_64+0xc9/0x1c0 [ 232.769187][T14408] ? clear_bhb_loop+0x55/0xb0 [ 232.773873][T14408] ? clear_bhb_loop+0x55/0xb0 [ 232.778571][T14408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.784596][T14408] RIP: 0033:0x7f3455740849 [ 232.789017][T14408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.808665][T14408] RSP: 002b:00007f3453db7008 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 232.817088][T14408] RAX: ffffffffffffffda RBX: 00007f3455905fa0 RCX: 00007f3455740849 [ 232.825129][T14408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002280e080 [ 232.833104][T14408] RBP: 00007f3453db70a0 R08: 0000000000000000 R09: 0000000000000000 [ 232.841136][T14408] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 232.849110][T14408] R13: 0000000000000000 R14: 00007f3455905fa0 R15: 00007fff820e1608 [ 232.857151][T14408] [ 232.860443][T14408] Mem-Info: [ 232.863561][T14408] active_anon:7225 inactive_anon:2 isolated_anon:0 [ 232.863561][T14408] active_file:14805 inactive_file:12272 isolated_file:0 [ 232.863561][T14408] unevictable:0 dirty:178 writeback:3 [ 232.863561][T14408] slab_reclaimable:3101 slab_unreclaimable:16147 [ 232.863561][T14408] mapped:30999 shmem:1724 pagetables:1297 [ 232.863561][T14408] sec_pagetables:0 bounce:0 [ 232.863561][T14408] kernel_misc_reclaimable:0 [ 232.863561][T14408] free:1874502 free_pcp:14042 free_cma:0 [ 232.908966][T14408] Node 0 active_anon:28900kB inactive_anon:8kB active_file:59220kB inactive_file:49088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123996kB dirty:712kB writeback:12kB shmem:6896kB writeback_tmp:0kB kernel_stack:3424kB pagetables:5188kB sec_pagetables:0kB all_unreclaimable? no [ 232.936984][T14408] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.963869][T14408] lowmem_reserve[]: 0 2866 7844 0 [ 232.969131][T14408] Node 0 DMA32 free:2950408kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953940kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 232.997532][T14408] lowmem_reserve[]: 0 0 4978 0 [ 233.002377][T14408] Node 0 Normal free:4532240kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:29132kB inactive_anon:8kB active_file:59220kB inactive_file:49088kB unevictable:0kB writepending:724kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:52252kB local_pcp:32452kB free_cma:0kB [ 233.032745][T14408] lowmem_reserve[]: 0 0 0 0 [ 233.037428][T14408] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 233.050555][T14408] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950408kB [ 233.066984][T14408] Node 0 Normal: 546*4kB (ME) 291*8kB (UME) 111*16kB (UM) 238*32kB (UME) 165*64kB (UME) 77*128kB (UME) 58*256kB (UME) 22*512kB (ME) 5*1024kB (ME) 35*2048kB (UME) 1073*4096kB (UM) = 4532240kB [ 233.086107][T14408] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 233.095613][T14408] 28802 total pagecache pages [ 233.100425][T14408] 2 pages in swap cache [ 233.104572][T14408] Free swap = 124472kB [ 233.108856][T14408] Total swap = 124996kB [ 233.113049][T14408] 2097051 pages RAM [ 233.116880][T14408] 0 pages HighMem/MovableOnly [ 233.121578][T14408] 80174 pages reserved [ 233.286292][T14447] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14447 comm=syz.5.3878 [ 233.324204][T14452] loop6: detected capacity change from 0 to 164 [ 233.349810][T14452] Unable to read rock-ridge attributes [ 233.358375][T14452] Unable to read rock-ridge attributes [ 233.367250][T14456] bridge0: entered promiscuous mode [ 233.372529][T14456] macvlan2: entered promiscuous mode [ 233.379024][T14452] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 233.389219][T14456] bridge0: port 3(macvlan2) entered blocking state [ 233.395981][T14456] bridge0: port 3(macvlan2) entered disabled state [ 233.420631][T14456] macvlan2: entered allmulticast mode [ 233.426149][T14456] bridge0: entered allmulticast mode [ 233.435365][T14456] macvlan2: left allmulticast mode [ 233.440548][T14456] bridge0: left allmulticast mode [ 233.446762][T14456] bridge0: left promiscuous mode [ 233.491194][T14464] pim6reg1: entered promiscuous mode [ 233.496738][T14464] pim6reg1: entered allmulticast mode [ 233.576911][T14462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.596329][T14462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.650979][T14462] syz.6.3883[14462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.651110][T14462] syz.6.3883[14462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.662928][T14462] syz.6.3883[14462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.775132][T14481] lo speed is unknown, defaulting to 1000 [ 233.926796][T14495] macsec1: entered allmulticast mode [ 233.932356][T14495] hsr0: entered allmulticast mode [ 233.937565][T14495] hsr_slave_0: entered allmulticast mode [ 233.943295][T14495] hsr_slave_1: entered allmulticast mode [ 233.951508][T14495] hsr0: left allmulticast mode [ 233.956334][T14495] hsr_slave_0: left allmulticast mode [ 233.961729][T14495] hsr_slave_1: left allmulticast mode [ 234.035377][T14490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.043889][T14490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.332989][T14519] macvlan2: entered promiscuous mode [ 234.338475][T14519] bridge0: entered promiscuous mode [ 234.355651][T14519] bridge0: port 2(macvlan2) entered blocking state [ 234.362284][T14519] bridge0: port 2(macvlan2) entered disabled state [ 234.369162][T14519] macvlan2: entered allmulticast mode [ 234.374591][T14519] bridge0: entered allmulticast mode [ 234.381996][T14519] macvlan2: left allmulticast mode [ 234.387255][T14519] bridge0: left allmulticast mode [ 234.392886][T14519] bridge0: left promiscuous mode [ 234.395703][T14513] 9pnet_fd: Insufficient options for proto=fd [ 234.408086][T14523] macsec1: entered allmulticast mode [ 234.413406][T14523] hsr0: entered allmulticast mode [ 234.418534][T14523] hsr_slave_0: entered allmulticast mode [ 234.424303][T14523] hsr_slave_1: entered allmulticast mode [ 234.432545][T14523] hsr0: left allmulticast mode [ 234.437438][T14523] hsr_slave_0: left allmulticast mode [ 234.442839][T14523] hsr_slave_1: left allmulticast mode [ 234.535495][T14537] macvlan2: entered promiscuous mode [ 234.540922][T14537] bridge0: entered promiscuous mode [ 234.547183][T14537] bridge0: port 2(macvlan2) entered blocking state [ 234.553947][T14537] bridge0: port 2(macvlan2) entered disabled state [ 234.560795][T14537] macvlan2: entered allmulticast mode [ 234.566276][T14537] bridge0: entered allmulticast mode [ 234.572183][T14537] macvlan2: left allmulticast mode [ 234.577486][T14537] bridge0: left allmulticast mode [ 234.583884][T14537] bridge0: left promiscuous mode [ 234.808834][T14562] macsec1: entered allmulticast mode [ 234.814196][T14562] hsr0: entered allmulticast mode [ 234.819359][T14562] hsr_slave_0: entered allmulticast mode [ 234.825243][T14562] hsr_slave_1: entered allmulticast mode [ 234.834774][T14562] hsr0: left allmulticast mode [ 234.839684][T14562] hsr_slave_0: left allmulticast mode [ 234.845127][T14562] hsr_slave_1: left allmulticast mode [ 234.953834][T14571] lo speed is unknown, defaulting to 1000 [ 234.960308][T14564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.970097][T14564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.991630][T14568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.031849][T14568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.064796][T14547] syz.6.3915[14547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.089272][T14577] pim6reg1: entered promiscuous mode [ 235.106495][T14577] pim6reg1: entered allmulticast mode [ 235.593015][T14622] lo speed is unknown, defaulting to 1000 [ 235.943292][T14635] loop6: detected capacity change from 0 to 1024 [ 235.962314][T14635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.991979][ T5701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.032530][T14650] pim6reg1: entered promiscuous mode [ 236.037914][T14650] pim6reg1: entered allmulticast mode [ 236.099272][T14659] syzkaller0: entered allmulticast mode [ 236.131675][T14659] syzkaller0 (unregistering): left allmulticast mode [ 236.189184][T14666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3961'. [ 236.296943][T14674] ================================================================== [ 236.305086][T14674] BUG: KCSAN: data-race in n_tty_write / tty_set_termios [ 236.312163][T14674] [ 236.314504][T14674] read-write to 0xffff888119fe4914 of 4 bytes by task 14679 on cpu 0: [ 236.322671][T14674] tty_set_termios+0x1a2/0x8b0 [ 236.327550][T14674] set_termios+0x365/0x4e0 [ 236.331987][T14674] tty_mode_ioctl+0x391/0x5d0 [ 236.336684][T14674] n_tty_ioctl_helper+0x8d/0x240 [ 236.341778][T14674] n_tty_ioctl+0xfd/0x200 [ 236.346133][T14674] tty_ioctl+0x87a/0xbe0 [ 236.350391][T14674] __se_sys_ioctl+0xc9/0x140 [ 236.355006][T14674] __x64_sys_ioctl+0x43/0x50 [ 236.359638][T14674] x64_sys_call+0x1690/0x2dc0 [ 236.364349][T14674] do_syscall_64+0xc9/0x1c0 [ 236.368869][T14674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.374793][T14674] [ 236.377121][T14674] read to 0xffff888119fe4914 of 4 bytes by task 14674 on cpu 1: [ 236.384759][T14674] n_tty_write+0xa0/0xb80 [ 236.389109][T14674] file_tty_write+0x37a/0x680 [ 236.393800][T14674] tty_write+0x28/0x30 [ 236.397883][T14674] vfs_write+0x77f/0x920 [ 236.402164][T14674] ksys_write+0xe8/0x1b0 [ 236.406434][T14674] __x64_sys_write+0x42/0x50 [ 236.411049][T14674] x64_sys_call+0x287e/0x2dc0 [ 236.415756][T14674] do_syscall_64+0xc9/0x1c0 [ 236.420288][T14674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.426223][T14674] [ 236.428555][T14674] value changed: 0x00008a3b -> 0x00000006 [ 236.434276][T14674] [ 236.436614][T14674] Reported by Kernel Concurrency Sanitizer on: [ 236.442769][T14674] CPU: 1 UID: 0 PID: 14674 Comm: syz.5.3963 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 236.454760][T14674] Tainted: [W]=WARN [ 236.458565][T14674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.468625][T14674] ==================================================================