last executing test programs: 2.647936718s ago: executing program 0 (id=7344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x2, {0x3}}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x79c, &(0x7f0000001700)="$eJzs3c9rXNUeAPDvnck0Tdr3kgcP3qurgKCB0ompsVVwUXEhgoWCrm2HyTS0mWRKZlKaELBFBDeCFheCbrquWndu/bHV/8KFtFSbFisuJHInM+00mUmTJpkp5POB255zf53zvef+OJN7mAlgzxpJ/8lEHIqIj5OIocb8JCJy9VRfxInV9e4vLxXTKYmVlbd/T+rr3FteKkbLNqkDjcz/I+KHDyIOZ9aXW11YnC6Uy6W5Rn6sNnNhrLqweOTcTGGqNFWaPTY+MXH0+EvHj+1crH/8vHjw1idvPP/1ib/e/9+Nj35M4kQcbCxrjWOnjMRI45jk0kP4iNd3urAeS3pdAZ5IemlmV6/yOBRDka2nOhjoZs0AgN3yXkSsAAB7TOL5DwB7TPPvAPeWl4rNqbd/keiu269FxP7V+JvvN1eX9DXe2e2vvwcdvJc88mYkiYjhHSh/JCK++PbdL9Mpduk9JEA7l69ExJnhkfX3/2TdmIWtemET66x92+z+B93zXdr/ebld/y/zoP8Tbfo//c2xY9u0dh/rr//MzR0opqO0//dqy9i2+y3xNwxnG7l/1ft8ueTsuXIpvbf9OyJGI9ef5sc3KGP07t93Oy1r7f/duXr+elr+nWxcf7hG5mZf/yObZLcV8Bq3r0Q809cu/uRB+ycd+r+nNlnGm698+HmnZWn8adzNqR7/1fPXtxXUFqxci3iubfs/HNGWtBufOJVrjE8cq58OY82Too1vfvlssFP5re2fTmn5zc8C3ZC2/+DG8Q8nreM1q1sv46drQ993XJh5XPzrzv+YLNQK+5J36ul9jXmXCrXa3HjEvuSt9fOPPty2mW+un8Y/+mz763+j8z/9THhmk/H33frtq07Lnob2n9xS+289ceP+dMd71uPjT9t/op4abcxJ2/9xcW22gts5dgAAAAAAAAAAAAAAAAAAAAAAAACwWZmIOBhJJv8gncnk86u/4f3fGMyUK9Xa4bOV+dnJqP9W9nDkMs2vuhxq+T7U8cb34TfzR9fkX4yI/0TEp/0D9Xy+WClP9jp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGg40OH3/1O/9ve6dgDArtnf6woAAF3n+Q8Ae8/Wnv8Du1YPAKB7fP4HgL3H8x8A9h7PfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZqZMn02nlz+WlYpqfvLgwP125eGSyVJ3Oz8wX88XK3IX8VKUyVS7li5WZjju6vPpfuVK5MBGz85fGaqVqbay6sHh6pjI/Wzt9bqYwVTpdynUtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYvOrC4nShXC7NbSeR7mgn9tOtRP/TUQ2JriaysXtF5OKJNs9GRK8Py0YXddNAz+5PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+7fwIAAP//IIQicg==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = gettid() r5 = timerfd_create(0x0, 0x0) read(r5, &(0x7f0000000240)=""/123, 0x7b) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x6, 0xfffffffffffffffb, r4}) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) tkill(0x0, 0x7) 2.086000659s ago: executing program 1 (id=7362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2.046040223s ago: executing program 1 (id=7364): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.577702836s ago: executing program 0 (id=7374): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x2, 0x7, 0x18, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x1, 0xb, 0x7}}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000d40)={0x0, 0x82a2, 0x0, 0x6ea5, 0x0, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xf}, {0xffe0, 0xffe0}, {0xfff3, 0x1}}}, 0x24}}, 0x10004000) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xd, &(0x7f00000000c0)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x18}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fdatasync(r6) 1.472774255s ago: executing program 2 (id=7375): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a002800"], 0x0) (fail_nth: 2) 1.439214799s ago: executing program 1 (id=7376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000dc718edb2d8da586274b290793990800000000000000000000ad00110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x7d, 0x0, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000540)={@private2, r3}, 0x14) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x26b, &(0x7f0000000600)="$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") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001d0000090000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8080) syz_usb_disconnect(r6) 996.537989ms ago: executing program 0 (id=7379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071105d000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(r1, 0x80080400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) 971.018301ms ago: executing program 2 (id=7380): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x4, 0x101800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x75, 0x5a, &(0x7f0000000180)="0588ff57a0dcc64843010447e4bacc568d8bbad4b8bc93f418d4a87705bac1db5d8479b942ffb3b92823be74faeecdce5f10d925438c71f7820dadce896f89da512473534b24483fd25ef688e137b48529057ec209085f2129d4a9653c9899fff9bb952b1ec758bc0838f2843ef62e024dc48e9942", &(0x7f00000003c0)=""/90, 0x3ff, 0x0, 0x1000, 0xef, &(0x7f0000000a00)="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", &(0x7f00000006c0)="323aa6c033ed1f99c57ba2e44699c862e3c9fd468487843ab445c17213052827bf359b98ef97b09fbbb129468d5278bef40e490d7d4dec7d5b49e1996c6d6c0e0a785581590fce838d39b3d0c307791920213367d521905fb4afc7be843b24ceeeb1faa3fb1089e2b58cdd94b919440265d0c3e2d19092cc678c4332c200136f68a99d5c56b9c836105ce343634e4125e82e745236f5baf76c98311b9fafeddb839dd7a64cdc416b81536688ab30b33ea273ab3e5ddf8ce672bcfb5369d24e9fef9dc4609943c2144c801c5c49c547b81ea124b1d1ce191b5169d2c764b8fbe0084d429ef4e10f8a81b67a34762b83", 0x2, 0x0, 0x401}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x1a0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x13c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x70, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x35, 0x3, "e095dff355a2669c6d17d8cbb7db6eaf8dee70ddccc3c74803df6ecdcb8fe9667fb21eeec3b2e5bd751a393c7a2a6bd517"}, @NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}, @NFTA_TARGET_INFO={0xb, 0x3, "fe7808884e7318"}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x1c8}}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000240)="240000001e005f1814fffffffffffff807000000010000000000000008000500c4cb0b02", 0x24) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18009a89fefe94ca000000010000000000a439764fefbba68ea6a3c370b5bbe3b1c546630b4e095edbab619fcb71b196267130bc0b5f5297f99ff03b35a377b99c4e7834fb28271806aa615845902c4552f9ef6d9f5769d6f332b36fe2a3278eb4830b1a04eb5c626e9cba40bdbb7e", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711068000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r6, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 970.799831ms ago: executing program 0 (id=7381): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 950.364723ms ago: executing program 4 (id=7382): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000003000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000400)=0x10, 0x80000) ioctl$sock_ifreq(r1, 0x8933, &(0x7f00000004c0)={'veth0_to_bridge\x00', @ifru_hwaddr}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r2], 0x18, 0x14004090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000020007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000008000000001000011c6f88579ce3d182e8454e8b8d6c25b350bd078e0a7170cf467cfd7c9e02c128ba01fcce96c746d184cd57789c22314515d1a7b7f5c18e9730cefeb8c4b2836c74f0e8812f582933b50d43dd1761960cfa59842a26495ce2a34c8934a34bbf37bbbdeb5a4ddd5ad757a76ef82816a6a50a973a045a08f0c101e0b530f290526fa90c3f3c7ac769d9c683ede90", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_free\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r8, &(0x7f0000000540)="3f030e03f007120006001e1f89e9aaa911d7c2290f0089061327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x13, 0x40001, &(0x7f0000000500)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000633c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 950.065673ms ago: executing program 0 (id=7383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 888.916559ms ago: executing program 0 (id=7384): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x2, {0x3}}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x79c, &(0x7f0000001700)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = gettid() r5 = timerfd_create(0x0, 0x0) read(r5, &(0x7f0000000240)=""/123, 0x7b) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x6, 0xfffffffffffffffb, r4}) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) tkill(0x0, 0x7) 888.237149ms ago: executing program 2 (id=7385): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 887.967479ms ago: executing program 2 (id=7386): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8080) syz_usb_disconnect(r0) 880.55347ms ago: executing program 4 (id=7387): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 863.941511ms ago: executing program 4 (id=7388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0xfffffffffffffffe, &(0x7f0000000080)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="fffff7ffffffaaaaaaaaaa4008004510006200000000002f9078ac1414bbe0000801248022eb000000000008000810000800000800090004000086dd080088be00000000100000800022eb000000002000000002000000000000000000000008006558000000f180a06425ed28d8fa1b7a09cef6a174b66f9a7c5d63031d64245411e54100d29df7d05f43"], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$lock(r4, 0x25, &(0x7f0000000340)={0x1, 0x0, 0xa, 0x3, r5}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$sndseq(0xffffffffffffffff, &(0x7f0000001580)=[{0x2, 0x5, 0x2, 0x81, @tick=0x101b, {0x0, 0x3}, {0x9}, @ext={0x34, &(0x7f00000014c0)="2fd997dd87d23c0a01232efbc63147439b27d952f34987295799e7bdd87060cfe29efffe1a2d0f07976ca0ec8f843f9d9a325733"}}], 0x1c) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="b8000000190067"], 0xb8}}, 0x0) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x154, 0x10, 0x1, 0x100004, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x75f0de9c, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {}, {}, 0xffffffff, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2a, 0x400000}}]}, 0x154}}, 0x80) 825.395115ms ago: executing program 4 (id=7390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0xfffffffffffffffe, &(0x7f0000000080)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="fffff7ffffffaaaaaaaaaa4008004510006200000000002f9078ac1414bbe0000801248022eb000000000008000810000800000800090004000086dd080088be00000000100000800022eb000000002000000002000000000000000000000008006558000000f180a06425ed28d8fa1b7a09cef6a174b66f9a7c5d63031d64245411e54100d29df7d05f43"], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$lock(r4, 0x25, &(0x7f0000000340)={0x1, 0x0, 0xa, 0x3, r5}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") 783.251358ms ago: executing program 4 (id=7391): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000080)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000100)={0x0, 0x30000, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r7, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x300, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20000044) 644.723111ms ago: executing program 4 (id=7394): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000480)) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0c00, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r7}, &(0x7f00000004c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 491.284025ms ago: executing program 3 (id=7398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000003000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000400)=0x10, 0x80000) ioctl$sock_ifreq(r1, 0x8933, &(0x7f00000004c0)={'veth0_to_bridge\x00', @ifru_hwaddr}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r2], 0x18, 0x14004090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000020007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000008000000001000011c6f88579ce3d182e8454e8b8d6c25b350bd078e0a7170cf467cfd7c9e02c128ba01fcce96c746d184cd57789c22314515d1a7b7f5c18e9730cefeb8c4b2836c74f0e8812f582933b50d43dd1761960cfa59842a26495ce2a34c8934a34bbf37bbbdeb5a4ddd5ad757a76ef82816a6a50a973a045a08f0c101e0b530f290526fa90c3f3c7ac769d9c683ede90", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_free\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r8, &(0x7f0000000540)="3f030e03f007120006001e1f89e9aaa911d7c2290f0089061327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x13, 0x40001, &(0x7f0000000500)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 456.926729ms ago: executing program 3 (id=7399): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x68040200) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18) 352.564498ms ago: executing program 3 (id=7400): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000080000000000000000000000900"/28], 0x48) r1 = socket$inet6(0xa, 0x3, 0xff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, 0x0, 0x0) dup2(r1, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x84000, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xb4}, 0x1, 0x7a00}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000100)={0xb6, 0x1, 0x7, 0xfffffffffffffffa}) mq_timedreceive(r9, &(0x7f0000000340)=""/221, 0xdd, 0xfffffffe, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r5, 0x5e, 0x8, 0x6, 0xfb90, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x700, 0x7800, 0x0, 0x6}}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000007f0000000000000000000000000000003c4d0000000000000000000000000000fffffffffeffffff00"/192]) 274.434426ms ago: executing program 3 (id=7401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0xfffffffffffffffe, &(0x7f0000000080)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="fffff7ffffffaaaaaaaaaa4008004510006200000000002f9078ac1414bbe0000801248022eb000000000008000810000800000800090004000086dd080088be00000000100000800022eb000000002000000002000000000000000000000008006558000000f180a06425ed28d8fa1b7a09cef6a174b66f9a7c5d63031d64245411e54100d29df7d05f43"], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$lock(r4, 0x25, &(0x7f0000000340)={0x1, 0x0, 0xa, 0x3, r5}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$sndseq(0xffffffffffffffff, &(0x7f0000001580)=[{0x2, 0x5, 0x2, 0x81, @tick=0x101b, {0x0, 0x3}, {0x9}, @ext={0x34, &(0x7f00000014c0)="2fd997dd87d23c0a01232efbc63147439b27d952f34987295799e7bdd87060cfe29efffe1a2d0f07976ca0ec8f843f9d9a325733"}}], 0x1c) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="b8000000190067"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x154, 0x10, 0x1, 0x100004, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x75f0de9c, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {}, {}, 0xffffffff, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2a, 0x400000}}]}, 0x154}}, 0x80) 244.015218ms ago: executing program 3 (id=7402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0xfffffffffffffffe, &(0x7f0000000080)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000001580)=[{0x2, 0x5, 0x2, 0x81, @tick=0x101b, {0x0, 0x3}, {0x9}, @ext={0x34, &(0x7f00000014c0)="2fd997dd87d23c0a01232efbc63147439b27d952f34987295799e7bdd87060cfe29efffe1a2d0f07976ca0ec8f843f9d9a325733"}}], 0x1c) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") 215.97294ms ago: executing program 1 (id=7403): shmat(0x0, &(0x7f000029f000/0x4000)=nil, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xa, 0x0, @fd_index}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x8000, 0x0) syz_clone3(&(0x7f0000000240)={0x2000a0080, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1], 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ac6, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[], 0x1c}}, 0x0) write$nci(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="61030107fb0279717bc5bd99209fc4b9524e"], 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x2, 0xffe0}, {0xe}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x42, [0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfe, 0x1, 0xb, 0x0, 0x0, 0x0, 0x3], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x800}]}, 0x90}, 0x1, 0x0, 0x0, 0x40010}, 0x4040801) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) capget(&(0x7f0000000000)={0x20071026}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000480)={0x7, 'bridge_slave_0\x00', {0x80000001}, 0xffff}) creat(&(0x7f0000003840)='./bus\x00', 0x0) 187.638153ms ago: executing program 1 (id=7404): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20000400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x50, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000ac0)=0x1fc245da, 0x4) syz_genetlink_get_family_id$ethtool(0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 162.143056ms ago: executing program 3 (id=7405): syz_usb_connect(0x2, 0x10e0, &(0x7f0000002380)={{0x12, 0x1, 0x250, 0x12, 0x1d, 0x95, 0xff, 0x460, 0x4, 0xae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10ce, 0x4, 0x1c, 0x2, 0x80, 0xbc, [{{0x9, 0x4, 0x7f, 0x5, 0x1, 0xc, 0xd7, 0x5, 0x80, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0xe4}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x80, 0xffff, 0x6, "2d30dac65fd3e6ad21"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x80, 0x8, 0x7, 0x0, "c2aa0ee2d8"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0x0, 0x8, 'f', "2cba45"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x100, 0x3}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2a, 0x2, 0x6, 0x7, "01f36a52"}]}, @generic={0x5f, 0x8, "90d5de38d2f212c8e7c409f0fb4209d63d1938fa5d18b6f26c2beb3ba36a2f69b87180af9ac47a8d3a13a72165bc5066ac3887ff525a964d762c03c45b17ae3eb53c36b57c31d7f6b86db98a4014d64463deaf3faca44483183a7488b5"}], [{{0x9, 0x5, 0x82, 0x10, 0x20, 0x5, 0xd, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x3a6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x1}]}}]}}, {{0x9, 0x4, 0xa3, 0x9, 0x8, 0x98, 0x2f, 0x14, 0x0, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "c368c66ac073"}, {0x5, 0x24, 0x0, 0x5881}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x8, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x22}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x80, 0x2, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x80}, @country_functional={0x12, 0x24, 0x7, 0x8, 0x401, [0xb0, 0x9, 0x7ff, 0x4, 0x962c, 0x9]}]}], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0x1, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x1, 0xf, 0x0, [@generic={0xfa, 0xa, "915a5800329950957af60f3d7b3b008ed56294fc5cce53b5f2086acd81a089c13c102061012e9f8b14c6f964272d5a64d951e84044dea1904302f27d0e29c126017d35d7e846fdf9d960d83d72df34d356ec0ef2f80e57c7a8894c4676b8c3869ca0c5088e7d6e1dbd9153d70fa2afa893fc943e16faa5a90432cfd8b0b6d83cf8954c69bd8cf30c5fc575e003312d3a50c803948ed8cc3ee5e9e1aa26f334c329b04e8fdc5fd5f1880e1009620e0d1daf04b888f8d713d3a0c8a263ff18e0866b940fccb48ffbb28a1d13c444a65460e8a7f9fd5e27bffb950c67c052f1090c97a0f983d4e33e17e4570e5ddadbd7993f0ae8f6d6c0cdc8"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x40, 0x3, 0x1, [@generic={0x73, 0x2f, "faa3376efb34403e3609acec42f01ed6aea59e349a140eed67e54427f70915245b79fcb831c25210786edcf7f080ce78dc5ebcdb90e4c3b8846e644ed2bf8d1349bf9f5e2e73d317f4d2654946a2221ca7944ddd44df908487d062c5b3d77972f66d1a85102b040dd38484df2c02d4e1b1"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0xd5}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x80, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x1}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x1, 0x8, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x40, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa3, 0x5}, @generic={0xc6, 0xe, "9566fa69a23e88d54b313031ffd5a8c8d536668d2036fbafbbd008e64f1b3f1b34724b6fc31dab11aa072d8c6b77ddb65899bc69654757b5e03cb703c5c7f8e0cb60291f6a83f479f50104d55b691b81cec2a7421e3078c5cbaf0455f7da6bf00597dcac11a839e5bbca82d90562ad1f237b75a7be1f651063968b36fa3d94ed090be336c5f9343ea18d28ff3af7773f1259850f69ac7d185807967ac1f2a9f734c1ae38d6487ab01fc02d0372c70ef085dad472f15ad0be3aaaa2719fa41ac92f782f01"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x7f, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x23, 0x3fa}, @generic={0xf4, 0xa, "277eab0cfff9fad4f5a542b3a49dd48108c6e42d45b167898621d41c65c46b2726cfa3955c56d8a98d2a49a7158aabf7a4650e968172072fc19c173a5b5d60a9bafd25e243f4f43117c01f035cbc500c975d0af2a60e6a1b35e5ecbec89eff2221a7c1b3bb03a77e3f0bdbff0b596a77a3d474b2694bc40d87538d673a570addee07a3ebd4cb21579e0c8cef9e64a0ee344e7b1dba6ef433e91711bad2da3ce41cfe35feed30d75378aa31594307ca0fc558f2aafb56ba46376de9dfa1887006ece3920362a2c894772bc39304e5f33ee4fe07d2f6c5a02d76ec79958b0686903f199b1168ffb90af76609dbf461f57a4204"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x4, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x40}, @generic={0xb0, 0xcd3809e771196345, "9c5b05e7329c9c8453feddeb04589ac746bbe176396839507c153ba8697fa83a64cdaee9570212a3fe9ce87f052f561343ca9cf9edf786907cf34bbb532e12d9f629aa376a57382e8bbcaa33cbafef40267a853497a5986971a1c22c84102cb62e13bded53b3b687a4dbfe57e408a7c12f343dd96cce3432bd9519b3fffd7f72b2485f24efaeed67e38375c9d7c9b7d8f29285729c25a6000126301f29ef7de1f6944e344079cd156682a5448e71"}]}}]}}, {{0x9, 0x4, 0x57, 0x81, 0x10, 0x49, 0x5f, 0xd1, 0x6, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "b8"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xf, 0x4, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@mdlm_detail={0x2a, 0x24, 0x13, 0x9, "5a31ba628b8b7dbf4eb5c377658a1b1ade06386c6cdbca56c90223c672961219688a856bc5d4"}]}, @generic={0x3f, 0x2, "3c88ab94d5b0359084994e2d12d859c39f38b27dc940a64cacc3672b112f500e17bf413ca09b2365fdfb12a08073c34180b0cb0c86bcfc9ab3e279d660"}], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x80, 0x20, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x60, 0x2, 0x8a, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x9, 0x3, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8d}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x6, 0x9, 0x40, [@generic={0xb5, 0x0, "966d30a5c3dffef01b7484624dd8ca8d58894985495a50328995cee5c9dbf21d101f4767e268a80b10fb779ee7d270285102fa464118b78f37385011afa8e355f66c6b472c5b17310eb1d1cd9b2bd3da8f6751593af67f00a7e4ce8580a5cfcb9ab78805e99c49dc034811396fcc7bcbab3505a56a35e605a2a22da44d15c09286dc63f16f56783058ff1e9b54b58f3b74ba62cda41c95abe0425d11c5bc52cc7355a010910f23cc6485811043c82d35b98c72"}, @generic={0xa, 0x22, "14ab0eaa08a0d3cf"}]}}, {{0x9, 0x5, 0x8a, 0x0, 0x3ff, 0x55, 0x4, 0x3}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x4, 0x5, 0x6, [@generic={0x1c, 0x21, "8bd67e428a7b9933d218104f2f1773a3288b81c6bd0d53ec97e7"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x8, 0x41, 0x2}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0xce, 0x4, 0x7}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0xf, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xff}, @generic={0x32, 0xf, "2eaa6fd4ceb860dfaa41d3e5203f87b0336b2a9e9cce4de8b52a5e02ee78c7d441fed54da8876673afa4f0719bc8e08c"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x3, 0x46, 0xe, [@generic={0xf4, 0x3, "10261693cc66c85b4635cc540ba0b5cf90baaacb2db1c1760ee11e46a2426dade6d5e7e573a9a99c3d8a0945faf129a0ca8c35ce05ab80274539b0795d5cfcfc796890542cb92158e2a1292f2464580eb91bb62fc86516cc30e9a4388c7667a52017aa493b69fdc2e6b732021dc211c23ab3ad322c70ede60d1a38338ba9bc171f2ab354824abcba7b6941ee55115d81f92ac3dec37fcdda3928416b1d98fdc3be9dccbc2bdd180e2d743ee9733046ecf49193422d41574514ef6afc2ff07a9e83fb973246bd82691b8af844a49a6b1799f91dbad0c837d57e6a766fa32362691aed4f12965fc713f8388c60b1c4d6d57a62"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x80, 0xb, 0x84, [@generic={0xe1, 0xc, "69b7af5fd8318e79a54dde2999e0e192a567eb1c20d5c6cdc7a6e111066b66f86698b41e753b8284ab416101906bfca427c6a62925dff584efb17a710c412baab9cb4ad337e069b45631097a1b5d54afb2c90ae4e8f7e0a0d512e73f4d615065d435d361f15126505ab7f2b4a41b6e25cb73975f7cd24dec0374b290285b626fb30102d37eb2b74e859f9695c85ae4130a5c5b7effd83471daf0d4b4ccab30b3236bdda010dd38bad5c31ce8e779954ade54f294329015fe86582ddbaf914023cfb56b43d87d765b6ff47228df99755fc5838c09c86ad200ce8d5c2da011de"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x5}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x3e, 0x9, 0xf7}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0xa1, 0x77, 0xd, [@generic={0xaa, 0x21, "6e9bdb8ee1ac976618a8185c39a4f6f22076f0b9cfdc54497eaf25ca56a64b56fed59ded27202bfcdbde38ee5495cc81c76f10c70c2679a625cd9431518b87d40b10bbee34e180b49b6bc77e6c92718a71027b96a9216fdad7b3ba6bfead4d75342e1754bd0f642bc3aa290320ad20f39a6c11bee6e498484213a845f18096352d36646d9c5c3ada3ccfac50210492f8c2464ba79526fedee79b89a2dffa5152c1b6d46a95ae6437"}, @generic={0x8f, 0x1, "7fe81ff883d1dee5abcdff30da04576ac6dac2f8a02fe7e26e3ac57b590322996bdeb2540ef6423ca8158ac0213b40b36abf50e2aa797dbf936f11a0533077420743f6f351338dfb559d549d868103c4a76be8543f8de7efffeeface730c1d5b51e4444141f93dcc495ede3c97c5809da4fa2b8fb590304f0de30b1c4ad970accb6d5ddc6fa3ebf9bc9227f195"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x7, 0xc, 0x7}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x7, 0x5d, 0x85, [@generic={0x26, 0x3, "0bd3e80cfad23b03a86033983700b51625ebe1d971d1970635340fef53414623db0600ee"}, @generic={0x27, 0x23, "2f61c6b1a2508428539ba4701b13616aa9ee3c33dcba25d715faa8151201b460394309577a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x80, 0x7, 0xf, [@generic={0xf5, 0x21, "5f449eff8eddc5c068a2df95ab3edaf33ac1906ede5ed83777144fcb8daec4b258fe52112e10a1fae19c4692fa02f71df08e803505b88d4f7e719eae4d68b5698738f66873433cd6728ae28951f560757b1691081ede42d1637f7bce38e23db36c9447b3eefa6e2948f04f505bd573c0c9c90f66b18410ba50cb937531e7e256c208ba8058e5834789a60a45fb5666a2d93fc63f029bc1f50a84790dda8f048d8e2f343fa8f3efeaf8a69f7d4438500399a6be81f1cfd7ef454be1d8a16c0766e3200752eb46b683c1077b48d27d9fc41d3b06fcd7bbac2318740368eabd409995a936e1979db1a6b3b58d1789f93bf93e373f"}, @generic={0x1a, 0xc, "4f94c482d41a26b67829c8cd583bd76ec19e996e0ab474fb"}]}}]}}, {{0x9, 0x4, 0xdf, 0x9, 0xb, 0xff, 0xff, 0xff, 0x9, [@hid_hid={0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0xe72}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x80, 0xa, 0x5}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x12, 0x0, 0x1, "cdd87ca2"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x40, 0x2, 0xc9, 0x6, "929dce", "28eda3"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0x85, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x3, 0x6, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x42, 0x6, 0xf}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0x10, 0xe3, [@generic={0x59, 0x11, "891e16dfa5e745657f3d86bf9ffa364422ba8d46c8d3a910dde37cf73bfc9c6782f23cb7fee6d04beae7fc46b4d9dd28cd9f110b996eb9b4660411cad2d7d2294177c71a36e5cd87dc55f9107816579663af013f93437e"}, @generic={0x84, 0x30, "2ac723f67db152235ce827ca2ccf968ababe3f0c482da53099c802f6a31327bb50004b9b385f09d97a317ed6dd655d82e076682d9ef1cc7368effd02efe87ce168d2f6d187704e8d19d8382281b432078c28ed2f4692d7e896931acdb1ff8bd1f84bcc84e6fc366c5338d79b711ef027c39b51d1d5d12cb6b5a93c6f0d5b8d40b450"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x0, 0x9, 0xdb, [@generic={0xaa, 0x5, "90733b772508d140fb0727c52512b66094687df340eeaa5c3acfd9ccf16fde66844fc492709381353895a5ba31a6ef105da936bee84cda795cb142f4558a34623b12f03d73d2696c45dddeb673c02368884fe7c4e0f89ea727106e493f91df4ca6ae7e1449f79aa7f092bf8e5b0d0a3966e7f036a2c313d88fc51557e4173e5499fe9cb133e6340b09ee791bf2a340267d8c93ac4bae5a08867052471c1245962cb9fefae9661260"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0xf9, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x4}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x9, 0x7, 0x5, [@generic={0x97, 0x24, "65b305aab72d4218bf73dbdcc105679bbfc8f1020d12bd94b60776004c5e7d743e29d01e22c9a20d60512b1a5be05a216f7ca234a8c3f3e1c4526c46af8921809d37d772b1187ad73b6524dcacbbb13c352fac76cefbf49518a869ce088c6d837ff3d4eb49cafc900764885c8392fb0c85f4360e7384fc455af4da8450cfec7c579df0005d6427627d85f709ff03ad7c06bd06344a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x6, 0xa8, [@generic={0x87, 0x23, "7ce52cf3b37236032f395318525b1a27de1d6a5160146a61e18cd1158c7ad2a7333ebad4869377c5990faa0ad1b4f4ca522d5d8ac0af2bbe4a73bf8a17908a39ed74686af185fef583b22815f5df2f1599a1d8bab0efb49d5fe39366e3be2caa88ce8bcfcc69856e3af8abf7c22362c7d8116df4a6b5c6cebfb0c3f927d6dac14d4be5e4be"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x6, 0x4, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7}, @generic={0x85, 0x4, "b83957d0f9a24251bab197e0c109fa3d7680e57202e31301d8015a91115d941dc2865a6becc10d345fe467fcfc73f2195ddb6c0a698b4b42850fc665cd151e74e22db3b5db632117dd3dc3975c18119cb0cb60ffbd60af1f22dd943ed0e8aed329ccc459e785bca9fd9e16acb933d1a21ca5cc35739a83031323b4dd26cc923d5fe371"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xb, 0x8, 0x40}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x4, 0x75, 0x5, [@generic={0xd7, 0x20, "914046788345b79c7fbea082ff7738c65b28d60ec2798831c9700c85fefa506d68231cbd9a8843b97b37710b30efd48fa70f7bf5a1b1010ddc8f55702e42aabbbd29f516bbbc6dc5ab79acaf91e9d1de0796f1a9c45f19ea01a141792e57368c09c56748f0598005ee25e2cfa218dd0f4788e004a0e91de40bf039caa4b539c8487a5ac2bba15b1cbf19b789663408c6f0554c66a2eb29ca3b8fed9276f8d2a51031aef5db1fbd47b5747f1ec5c128c585c03f8ae10b640dfcdd3c2f10e882616a7ea252c2db24865deec1b49287f899d564544e07"}]}}]}}]}}]}}, &(0x7f0000003840)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0xfd, 0xd, 0x0, 0x10, 0x9}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x9, 0x5, 0xe, 0x6}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc0c}}, {0xcf, &(0x7f0000003480)=ANY=[@ANYBLOB="cf03e82b18c1f7bd933f6a08a2cc7c724f58c174149b6892d242c2d05e0c52d591a5658721da468665ff0ee26ae696ab15b75dce1ea6d31d4c487534d531c87a96077db49dfc6ecd0bc6eabd4b5624a52c9c444709c347f88a82fa113aa0b9bbefd3f77321cc4a47099ef1b0de77ff7f478cc1e9587f38050605f490aaf14eefd6a590e08988500c6b4a9486a457f629d8ef2990f10b73099a3ea7423aaedbecc136294ec071f33717bcb3f9931eef7ee54762d131ec056ba7473fb745e94874e6444cfc7ed36bda88b8f7f0bc7453"]}, {0xc1, &(0x7f0000003580)=@string={0xc1, 0x3, "14222c02f4bc0eafa84204f0c965f6ff759687846fa115650a269729fdd6e1c3bcecdac8e51c4d885f56c1569985d8922097fa46fa5fe2e6ed941d6af4ca6afdbe54d401054a30d5883b53a4c4ee545046e78799130ce18ed51ca4e46ec87486c3e2cd18f64185706532cf5e1b488e66aede80a0d0fe751a41e05ffc573181bcf1b5754c6e02b5b37811ccf7f18a48123eef91135d294ea0909b743e91ea81e9ce3b18b0b6c40ecc6c3d8803725300fc876083a2656054f32b99278e75da34"}}, {0xb4, &(0x7f0000000900)=ANY=[@ANYBLOB="b403443b5214996afddc0af7abdbeeb2b5f47ab9286d081a9b7e48bab97434f44829beab7bd9f5349264a790295bc36bc240fb305f48f781d2c7d860559a2bad84fca48d6c735f617284678a4eb827ab91fd8e215ad4f6646cda38b5bf09aee7436bea236986b57d9d029ae9fdc9cf3863771c9f1a373e2f6cb414ac04f602cb8c38d06f770ed7ca2caa7747dbe2e9dd67c49306fe152cadc896593bafacb6d01e90e993087fc8c9c79cd1508181000000000000"]}, {0xe8, &(0x7f0000003680)=@string={0xe8, 0x3, "ccae914cdff9914bdb4a643de023e4addb6fa68a43310650ddde40447784d61e1fcc8330ad9960c9d79ac3285c82fa810be9a7a2deb8ece1ebcd030d8300426f507e085b7db0255cf26f70263fb176ef4c33a277791032b77b9fcebe4d26d4eec278a38aebda183e003c8358191de7929afe90477b5e8d73802ec5b07071a026e1777e35ba3c4df3124c667bf4cf9bd8c8f1b14f7f2b1cb8f7053fcc14b59a0f4d7028c17807e81d8535a5dd0ecd89835b581efd21dbdfd348d6916ba93efa67e677812d49c54e0bce51a4571128faa3c00ed19a826a16edee7f44ee8eba357bd45f4173eac9"}}, {0x8d, &(0x7f0000003780)=@string={0x8d, 0x3, "84ff4272eb2b30fbec0e708582330494c804597ee6abe9a204a15be733cb977be08a7f7ad82f36a35bb7ddb8e61fdd4faf6db51a5423d959af939d9083cead0152cdb2d77ae20e21d3769421f9dde47b52fe7927dfefd35e2e66c18505d82c537372b6d0a1e4d274d7d50795b12df0e48b681f1073477eb55e682e867f267e5482365ef3cce04dc1b5c8da"}}, {0x27, &(0x7f0000000180)=@string={0x27, 0x3, "24e8b5922523857f7915b6773d2a443d911dadfaa39835777abc1bc0ef5973a05aa68ef72a"}}]}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000000000000012000000000000002900000004"], 0x30}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x4ef, &(0x7f00000003c0)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x80080, &(0x7f0000000240)=ANY=[@ANYRES16], 0xfd, 0x122b, &(0x7f00000038c0)="$eJzs3U9rHHUYB/Bnk22TpqYbtVZbEH/gRS9jk4N48BIkBemC0jaF9iBMzUaX3eyGzBLYHmxvXn0dnr35GnLx4lnwlovHHMQRd4JJlgTbaroxfD6XDJnnC8/8YeE3zLO7+/F3G531IlvPBzFVq0V9MyLtpUgxFdNReRrv3//5l7fvPnh4e7nZXLmT0q3le4sfppTq+xWDy/d/uPLjTOwsfLH729KvO9d2ru/+ce/rdpHaRer1BylPj/r9Qf6o20pr7aKTpfR5t5UXrdTuFa2tI/vXu/3NzWHKe2vzc5tbraJIeW+YOq1hGvTTYGuY8q/ydi9lWZbm54IXdzFWv9+bjjKiLC/ExSjLsrwUc3E5Xon5uBKNWIhX47V4Pa7GG3Et3oy34vqoatKdAwAAAAAAAAAAAAAAAAAAwPmyN5rmN/8PAAAAAAAAAAAAAAAAAAAAk3Ty/P+s+X8AAAAAAAAAAAAAAAAAAAB4SZ7x9/+nzP8DAAAAAAAAAAAAAAAAAADA6bn74OHt5WZz5U5KsxEb326vbq9Wf6v9y+vRjm604mY04vcYTf9Xqu1bnzZXbqaRhfgonuznn2yvTh/NL46+TuDY/GKVT/HBxqH8TMwdzi9FI64en186Nj8b7717KJ9FI376MvrRjbX4K3uQ/2YxpU8+a47lb4zqAAAA4DzI0t8Wjq5/q/V7lqVarSod21/98+TnA2Vj7PnA2Pq6HjfqEzxwRorh407e7ba2/l8b+7dkPO7k75xc/PSU24g4G2dj5uBsnIl+/mFjv9t/eXVm47+9o2pn6RxeeoaaCxFxim1M4tOIl+3gok+6EwAAAAAAAAAAAJ7Hc7wYWH/RtyMnfYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqgAAAP//DVTZRw==") bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r4}, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000004cc0)={0x1d, 0x18, &(0x7f0000004b80)=ANY=[@ANYRESDEC=r0, @ANYRES8=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000028000000000032907800000000ffffffff1100907800000000000000000000000000000000d7d0d25149edf328"], 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 81.198313ms ago: executing program 2 (id=7406): openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000200)="c3dce3b3b88355d088b7e81004295421a255ff1db168928a0239447c5c3424741ed7b60185470edcdc65dd5a107309ebd4701e227d6ba71489bb04982bc6bbdafb07353d1b1bcd05c48b7d36f9a776c5572b2ebf522443698513", 0x5a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpid() pipe2$9p(&(0x7f0000000400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100000005000000000000000000", @ANYRES32=r5], 0x20}}, 0x0) 18.320789ms ago: executing program 1 (id=7407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x2040400) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004007f00ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, &(0x7f00000008c0)=""/242, &(0x7f0000000380), &(0x7f0000000a40)="e86a247798c5ca334465d9a36da1e873baf462e6e0d536f91e48d9b7aeff13306de69ab70bcc6130b4979e80d875e2dfb6ba32b80764d837612984f7fabfbb3b349aa4869801128cd07d9acf891bb7c7e56ded08814e633ba7de494f29e54b8d92b10e3358a204fa15b2d9b0ea10a363b6c00b6854dc641a8a428dab1019dfbe9037d0027640c63558673aef71024eb07672f4e82ea3f6115230493bd4e46bdb75f3e7e2c4c779e6393cd87df42e4ff4578947179ea3f9221e8535039b417a44a2fcb27dec1ff5c1472c287d95803d42a8c1f2e8a5af5108fa6472c7e25e8f", 0x3, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801e9ffffff00000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfd20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 2 (id=7408): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0c00, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.174710][ T29] audit: type=1326 audit(1727696298.317:30031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.1.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f7eedff9 code=0x7ffc0000 [ 456.198455][ T29] audit: type=1326 audit(1727696298.317:30032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.1.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe3f7eedff9 code=0x7ffc0000 [ 456.200711][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6800'. [ 456.231602][ T29] audit: type=1400 audit(1727696298.335:30033): avc: denied { create } for pid=22461 comm="syz.1.6798" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 456.253083][ T29] audit: type=1326 audit(1727696298.335:30034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.1.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3f7eee033 code=0x7ffc0000 [ 456.277274][ T29] audit: type=1400 audit(1727696298.335:30035): avc: denied { map } for pid=22461 comm="syz.1.6798" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 456.301790][ T29] audit: type=1400 audit(1727696298.335:30036): avc: denied { read write } for pid=22461 comm="syz.1.6798" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 456.326896][ T29] audit: type=1326 audit(1727696298.335:30037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.1.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3f7eee033 code=0x7ffc0000 [ 456.350334][ T29] audit: type=1326 audit(1727696298.335:30038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22461 comm="syz.1.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f7eedff9 code=0x7ffc0000 [ 456.386569][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.425258][T22472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6803'. [ 456.445038][T22472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6803'. [ 456.470148][T22481] loop1: detected capacity change from 0 to 512 [ 456.490290][T22481] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.6807: corrupted in-inode xattr: invalid ea_ino [ 456.505601][T22481] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.6807: couldn't read orphan inode 15 (err -117) [ 456.512529][T22472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6803'. [ 456.517981][T22481] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.550712][T19579] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 456.602589][T20185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.641962][T22498] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 456.657691][T22495] loop3: detected capacity change from 0 to 4096 [ 456.669387][T22495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.693083][T20185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.405161][T22512] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 457.407806][T22514] syz.0.6820[22514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.679522][T22544] serio: Serial port ptm0 [ 457.681131][T22541] loop1: detected capacity change from 0 to 2048 [ 457.718094][T22541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.793589][T22552] loop3: detected capacity change from 0 to 512 [ 458.246122][T22572] FAULT_INJECTION: forcing a failure. [ 458.246122][T22572] name failslab, interval 1, probability 0, space 0, times 0 [ 458.258946][T22572] CPU: 1 UID: 0 PID: 22572 Comm: syz.2.6840 Not tainted 6.12.0-rc1-syzkaller #0 [ 458.268135][T22572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 458.278235][T22572] Call Trace: [ 458.281525][T22572] [ 458.284440][T22572] dump_stack_lvl+0xf2/0x150 [ 458.289064][T22572] dump_stack+0x15/0x20 [ 458.293227][T22572] should_fail_ex+0x223/0x230 [ 458.298342][T22572] ? __alloc_skb+0x10b/0x310 [ 458.302926][T22572] should_failslab+0x8f/0xb0 [ 458.307578][T22572] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 458.313573][T22572] __alloc_skb+0x10b/0x310 [ 458.318079][T22572] audit_log_start+0x368/0x6b0 [ 458.322919][T22572] audit_seccomp+0x4b/0x130 [ 458.327456][T22572] __seccomp_filter+0x6fa/0x1180 [ 458.332420][T22572] ? proc_fail_nth_write+0x12a/0x150 [ 458.337736][T22572] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 458.343623][T22572] ? vfs_write+0x580/0x910 [ 458.348106][T22572] __secure_computing+0x9f/0x1c0 [ 458.353302][T22572] syscall_trace_enter+0xd1/0x1f0 [ 458.358357][T22572] do_syscall_64+0xaa/0x1c0 [ 458.362952][T22572] ? clear_bhb_loop+0x55/0xb0 [ 458.367669][T22572] ? clear_bhb_loop+0x55/0xb0 [ 458.372350][T22572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.378311][T22572] RIP: 0033:0x7ff4ea6fdff9 [ 458.382836][T22572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.402482][T22572] RSP: 002b:00007ff4e9371038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 458.410959][T22572] RAX: ffffffffffffffda RBX: 00007ff4ea8b5f80 RCX: 00007ff4ea6fdff9 [ 458.419097][T22572] RDX: 0000000000400000 RSI: 0000000000002000 RDI: 0000000020144000 [ 458.427125][T22572] RBP: 00007ff4e9371090 R08: 000000002082a000 R09: 0000000000000000 [ 458.435142][T22572] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 458.443121][T22572] R13: 0000000000000000 R14: 00007ff4ea8b5f80 R15: 00007ffe2ddec548 [ 458.451188][T22572] [ 458.555727][T22579] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 458.577702][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.641336][T22589] loop1: detected capacity change from 0 to 512 [ 458.657512][T22589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.670115][T22589] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.745984][T22595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6847'. [ 458.914092][T22604] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 459.002602][T22608] loop3: detected capacity change from 0 to 2048 [ 459.025395][T22608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.498975][T22613] serio: Serial port ptm0 [ 459.547784][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.785970][T22637] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 459.905469][T20185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.941121][T22639] loop3: detected capacity change from 0 to 128 [ 460.300721][T22641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6867'. [ 460.437240][T22645] siw: device registration error -23 [ 460.590833][T22647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6869'. [ 460.609360][T22647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6869'. [ 460.633823][T22647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6869'. [ 460.673813][T22654] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 460.724870][T22656] IPVS: You probably need to specify IP address on multicast interface. [ 460.733749][T22656] IPVS: Error connecting to the multicast addr [ 460.764570][T22664] loop1: detected capacity change from 0 to 512 [ 460.783989][T22664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.797513][T22664] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.819937][T22667] loop3: detected capacity change from 0 to 128 [ 460.843608][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.917895][T22675] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 460.978060][T22678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6880'. [ 461.047761][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 461.047774][ T29] audit: type=1326 audit(1727696302.812:30349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22666 comm="syz.3.6877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 461.078815][ T29] audit: type=1326 audit(1727696302.812:30350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22666 comm="syz.3.6877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 461.139657][T22687] loop1: detected capacity change from 0 to 2048 [ 461.149226][T22687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.163927][ T29] audit: type=1400 audit(1727696302.922:30351): avc: denied { map } for pid=22686 comm="syz.1.6883" path="/248/file0/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 461.238050][ T29] audit: type=1400 audit(1727696302.996:30352): avc: denied { ioctl } for pid=22686 comm="syz.1.6883" path="/248/file0/cgroup.controllers" dev="loop1" ino=18 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 461.345341][T22693] siw: device registration error -23 [ 461.659000][ T29] audit: type=1326 audit(1727696303.384:30353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.3.6886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 461.682946][T22698] loop3: detected capacity change from 0 to 128 [ 461.683494][ T29] audit: type=1326 audit(1727696303.384:30354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.3.6886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 461.712885][ T29] audit: type=1326 audit(1727696303.384:30355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.3.6886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 461.737015][ T29] audit: type=1326 audit(1727696303.384:30356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.3.6886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 461.761926][ T29] audit: type=1326 audit(1727696303.384:30357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.3.6886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 461.785698][ T29] audit: type=1326 audit(1727696303.384:30358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22697 comm="syz.3.6886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 461.955189][T22700] IPVS: You probably need to specify IP address on multicast interface. [ 461.963915][T22700] IPVS: Error connecting to the multicast addr [ 462.043643][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.170098][ T57] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 462.326097][T22727] loop1: detected capacity change from 0 to 512 [ 462.397557][T22734] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 462.608305][T22753] loop3: detected capacity change from 0 to 2048 [ 462.624845][T22753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.673724][T22759] siw: device registration error -23 [ 463.054669][T22758] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 463.454729][T22798] loop1: detected capacity change from 0 to 4096 [ 463.465203][T22798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.473944][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 463.494365][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.507747][T20185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.002929][T22822] bpf_get_probe_write_proto: 8 callbacks suppressed [ 464.002944][T22822] syz.0.6929[22822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.009971][T22822] syz.0.6929[22822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.021645][T22822] syz.0.6929[22822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.212305][T22850] futex_wake_op: syz.1.6941 tries to shift op by 35; fix this program [ 464.215070][T22849] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 464.526550][T22881] loop3: detected capacity change from 0 to 512 [ 464.532327][T22883] syz.1.6955[22883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.533011][T22883] syz.1.6955[22883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.546674][T22883] syz.1.6955[22883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.561413][T22881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.580340][T22891] __nla_validate_parse: 2 callbacks suppressed [ 464.580382][T22891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6957'. [ 464.588083][T22881] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.622518][T22891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6957'. [ 464.653274][T22891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6957'. [ 464.678667][T20185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.706020][T22903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6959'. [ 464.868339][T22925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6969'. [ 464.886208][T22925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6969'. [ 464.908173][T22925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6969'. [ 465.016879][T22934] IPVS: You probably need to specify IP address on multicast interface. [ 465.025631][T22934] IPVS: Error connecting to the multicast addr [ 465.071456][T22944] syz.3.6977[22944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.071559][T22944] syz.3.6977[22944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.083697][T22944] syz.3.6977[22944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.432346][T22962] loop3: detected capacity change from 0 to 128 [ 465.675519][T22976] IPVS: You probably need to specify IP address on multicast interface. [ 465.683957][T22978] loop1: detected capacity change from 0 to 4096 [ 465.685650][T22976] IPVS: Error connecting to the multicast addr [ 465.710222][T22978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.733815][T22984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6989'. [ 465.743435][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.751205][T22984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6989'. [ 465.784803][T22984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6989'. [ 465.970263][ T57] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 466.082050][T23027] IPVS: You probably need to specify IP address on multicast interface. [ 466.090598][T23027] IPVS: Error connecting to the multicast addr [ 466.456208][T23056] IPVS: You probably need to specify IP address on multicast interface. [ 466.466152][T23056] IPVS: Error connecting to the multicast addr [ 466.502019][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 466.502051][ T29] audit: type=1326 audit(1727696307.851:30629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.3.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 466.535278][ T29] audit: type=1326 audit(1727696307.851:30630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.3.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 466.559318][ T29] audit: type=1326 audit(1727696307.851:30631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.3.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 466.583392][ T29] audit: type=1326 audit(1727696307.851:30632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.3.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 466.607338][ T29] audit: type=1326 audit(1727696307.851:30633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.3.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 466.631285][ T29] audit: type=1326 audit(1727696307.851:30634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.3.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 466.655226][ T29] audit: type=1326 audit(1727696307.851:30635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.3.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 466.678973][ T29] audit: type=1326 audit(1727696307.851:30636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.3.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 466.702881][ T29] audit: type=1326 audit(1727696307.851:30637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.3.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 466.846668][ T29] audit: type=1326 audit(1727696308.174:30638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.3.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc5edff9 code=0x7ffc0000 [ 466.887623][T23081] loop3: detected capacity change from 0 to 512 [ 466.916061][T23081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.929227][T23081] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.940594][T23088] FAULT_INJECTION: forcing a failure. [ 466.940594][T23088] name failslab, interval 1, probability 0, space 0, times 0 [ 466.953548][T23088] CPU: 1 UID: 0 PID: 23088 Comm: syz.0.7025 Not tainted 6.12.0-rc1-syzkaller #0 [ 466.959791][T23081] netlink: '+}[@': attribute type 39 has an invalid length. [ 466.962573][T23088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 466.962590][T23088] Call Trace: [ 466.983520][T23088] [ 466.986460][T23088] dump_stack_lvl+0xf2/0x150 [ 466.991068][T23088] dump_stack+0x15/0x20 [ 466.995222][T23088] should_fail_ex+0x223/0x230 [ 467.000084][T23088] ? dup_fd+0x4c/0x6c0 [ 467.004208][T23088] should_failslab+0x8f/0xb0 [ 467.008977][T23088] kmem_cache_alloc_noprof+0x4c/0x290 [ 467.014367][T23088] dup_fd+0x4c/0x6c0 [ 467.018276][T23088] ? _raw_spin_unlock+0x26/0x50 [ 467.023196][T23088] ksys_unshare+0x353/0x720 [ 467.027773][T23088] __x64_sys_unshare+0x1f/0x30 [ 467.032676][T23088] x64_sys_call+0x2c8d/0x2d60 [ 467.037353][T23088] do_syscall_64+0xc9/0x1c0 [ 467.041932][T23088] ? clear_bhb_loop+0x55/0xb0 [ 467.046607][T23088] ? clear_bhb_loop+0x55/0xb0 [ 467.051277][T23088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.057238][T23088] RIP: 0033:0x7fc6aa76dff9 [ 467.061662][T23088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.081600][T23088] RSP: 002b:00007fc6a93e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 467.090015][T23088] RAX: ffffffffffffffda RBX: 00007fc6aa925f80 RCX: 00007fc6aa76dff9 [ 467.097998][T23088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 467.105999][T23088] RBP: 00007fc6a93e7090 R08: 0000000000000000 R09: 0000000000000000 [ 467.113986][T23088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.122049][T23088] R13: 0000000000000000 R14: 00007fc6aa925f80 R15: 00007ffc824f1b38 [ 467.130041][T23088] [ 467.133260][T23081] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.140517][T23081] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.230387][T23103] loop1: detected capacity change from 0 to 4096 [ 467.239815][T23103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.263420][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.311161][T23116] syz.4.7037[23116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 467.335191][T23089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.584993][T23129] chnl_net:caif_netlink_parms(): no params data found [ 467.635267][T23129] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.642527][T23129] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.650076][T23129] bridge_slave_0: entered allmulticast mode [ 467.656787][T23129] bridge_slave_0: entered promiscuous mode [ 467.663979][T23129] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.671364][T23129] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.678814][T23129] bridge_slave_1: entered allmulticast mode [ 467.685211][T23129] bridge_slave_1: entered promiscuous mode [ 467.705311][T23129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.717592][T23129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.736568][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 467.747016][T23129] team0: Port device team_slave_0 added [ 467.754083][T23129] team0: Port device team_slave_1 added [ 467.769970][T23129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.777056][T23129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.803129][T23129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.814393][T23129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.821530][T23129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.847608][T23129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.874409][T23129] hsr_slave_0: entered promiscuous mode [ 467.880611][T23129] hsr_slave_1: entered promiscuous mode [ 467.886998][T23129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.894769][T23129] Cannot create hsr debugfs directory [ 467.948550][T23129] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.019635][T23129] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.084885][T23129] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.137584][T23129] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.167704][T23165] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 468.288372][ T3284] bridge_slave_1: left allmulticast mode [ 468.294172][ T3284] bridge_slave_1: left promiscuous mode [ 468.299872][ T3284] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.307837][ T3284] bridge_slave_0: left allmulticast mode [ 468.313614][ T3284] bridge_slave_0: left promiscuous mode [ 468.319247][ T3284] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.375890][T23173] FAULT_INJECTION: forcing a failure. [ 468.375890][T23173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 468.389505][T23173] CPU: 1 UID: 0 PID: 23173 Comm: syz.4.7051 Not tainted 6.12.0-rc1-syzkaller #0 [ 468.398539][T23173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 468.408589][T23173] Call Trace: [ 468.412025][T23173] [ 468.414988][T23173] dump_stack_lvl+0xf2/0x150 [ 468.419662][T23173] dump_stack+0x15/0x20 [ 468.423860][T23173] should_fail_ex+0x223/0x230 [ 468.428595][T23173] should_fail_alloc_page+0xfd/0x110 [ 468.433890][T23173] __alloc_pages_noprof+0x109/0x360 [ 468.439265][T23173] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 468.444669][T23173] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 468.450331][T23173] handle_mm_fault+0xdbe/0x2a80 [ 468.455297][T23173] exc_page_fault+0x296/0x650 [ 468.460120][T23173] asm_exc_page_fault+0x26/0x30 [ 468.464981][T23173] RIP: 0010:rep_movs_alternative+0x15/0x70 [ 468.470831][T23173] Code: cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 [ 468.490617][T23173] RSP: 0018:ffffc900097cbd08 EFLAGS: 00050202 [ 468.496679][T23173] RAX: ffff88811556ed32 RBX: 0000000020001300 RCX: 0000000000000002 [ 468.504677][T23173] RDX: 0000000000000000 RSI: ffffc900097cbd73 RDI: 0000000020001300 [ 468.513067][T23173] RBP: 00000000000000fc R08: 0000000080000000 R09: 0000000000000000 [ 468.521169][T23173] R10: 0001c900097cbd73 R11: 0001c900097cbd74 R12: 0000000020001302 [ 468.529410][T23173] R13: 0000000020001300 R14: 0000000000000002 R15: ffffc900097cbd73 [ 468.537557][T23173] _copy_to_user+0x77/0xa0 [ 468.542314][T23173] simple_read_from_buffer+0xa0/0x110 [ 468.548138][T23173] proc_fail_nth_read+0xf9/0x140 [ 468.553091][T23173] vfs_readv+0x3e2/0x660 [ 468.557638][T23173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.563299][T23173] __x64_sys_preadv+0x100/0x1c0 [ 468.568295][T23173] x64_sys_call+0x1d5c/0x2d60 [ 468.573098][T23173] do_syscall_64+0xc9/0x1c0 [ 468.577613][T23173] ? clear_bhb_loop+0x55/0xb0 [ 468.582384][T23173] ? clear_bhb_loop+0x55/0xb0 [ 468.587137][T23173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.593047][T23173] RIP: 0033:0x7fd222efdff9 [ 468.597450][T23173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.616215][T23180] loop1: detected capacity change from 0 to 512 [ 468.617247][T23173] RSP: 002b:00007fd221b50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 468.632003][T23173] RAX: ffffffffffffffda RBX: 00007fd2230b6058 RCX: 00007fd222efdff9 [ 468.639986][T23173] RDX: 0000000000000001 RSI: 0000000020000400 RDI: 0000000000000005 [ 468.647963][T23173] RBP: 00007fd221b50090 R08: 000000000000000c R09: 0000000000000000 [ 468.655935][T23173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.664091][T23173] R13: 0000000000000001 R14: 00007fd2230b6058 R15: 00007fff61c63ad8 [ 468.672072][T23173] [ 468.679909][ T3284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.680411][T23180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.701960][T23180] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.715853][ T3284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.726767][ T3284] bond0 (unregistering): Released all slaves [ 468.737443][T23129] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 468.753844][T23129] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 468.762566][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.763277][T23129] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 468.781229][T23129] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.794944][ T3284] hsr_slave_0: left promiscuous mode [ 468.803275][ T3284] hsr_slave_1: left promiscuous mode [ 468.809908][ T3284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.817407][ T3284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.827142][ T3284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.835340][ T3284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.844990][ T3284] veth1_macvtap: left promiscuous mode [ 468.850473][ T3284] veth0_macvtap: left promiscuous mode [ 468.856013][ T3284] veth1_vlan: left promiscuous mode [ 468.861461][ T3284] veth0_vlan: left promiscuous mode [ 468.893107][T23195] loop1: detected capacity change from 0 to 2048 [ 468.912635][T23195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.967868][ T3284] team0 (unregistering): Port device team_slave_1 removed [ 468.977880][ T3284] team0 (unregistering): Port device team_slave_0 removed [ 469.049938][T23129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.061655][T23129] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.071508][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.078666][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.093069][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.100171][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.180416][T23129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.242946][T23129] veth0_vlan: entered promiscuous mode [ 469.253742][T23129] veth1_vlan: entered promiscuous mode [ 469.269415][T23129] veth0_macvtap: entered promiscuous mode [ 469.277181][T23129] veth1_macvtap: entered promiscuous mode [ 469.289037][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.299626][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.309599][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.320503][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.330418][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.340944][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.350806][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.361668][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.371653][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.382363][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.392370][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.402787][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.412616][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.423097][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.432956][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.443437][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.454160][T23129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.467972][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.478657][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.488780][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.499285][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.509315][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.520174][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.530195][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.541150][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.551134][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.561776][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.571598][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.582136][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.592035][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.602494][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.612310][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.622790][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.633568][T23129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.643555][T23129] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.652345][T23129] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.661218][T23129] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.669962][T23129] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.738851][T23220] loop3: detected capacity change from 0 to 4096 [ 469.747725][T23220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.772147][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.790649][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.890278][T23229] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 470.052804][T23243] siw: device registration error -23 [ 470.096046][T23247] __nla_validate_parse: 8 callbacks suppressed [ 470.096064][T23247] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 470.113222][T23247] netlink: '+}[@': attribute type 39 has an invalid length. [ 470.120727][T23247] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 470.129655][T23247] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.136875][T23247] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.306502][T23269] loop3: detected capacity change from 0 to 128 [ 471.091304][T23291] FAULT_INJECTION: forcing a failure. [ 471.091304][T23291] name failslab, interval 1, probability 0, space 0, times 0 [ 471.104017][T23291] CPU: 0 UID: 0 PID: 23291 Comm: syz.3.7087 Not tainted 6.12.0-rc1-syzkaller #0 [ 471.109051][T23289] loop1: detected capacity change from 0 to 4096 [ 471.113127][T23291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 471.113143][T23291] Call Trace: [ 471.113150][T23291] [ 471.113158][T23291] dump_stack_lvl+0xf2/0x150 [ 471.140665][T23291] dump_stack+0x15/0x20 [ 471.144830][T23291] should_fail_ex+0x223/0x230 [ 471.149577][T23291] ? audit_log_start+0x34c/0x6b0 [ 471.154593][T23291] should_failslab+0x8f/0xb0 [ 471.159448][T23291] kmem_cache_alloc_noprof+0x4c/0x290 [ 471.165003][T23291] audit_log_start+0x34c/0x6b0 [ 471.169768][T23291] audit_seccomp+0x4b/0x130 [ 471.174283][T23291] __seccomp_filter+0x6fa/0x1180 [ 471.179414][T23291] ? proc_fail_nth_write+0x12a/0x150 [ 471.184762][T23291] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 471.190495][T23291] ? vfs_write+0x580/0x910 [ 471.195011][T23291] ? __fget_files+0x1d4/0x210 [ 471.199768][T23291] __secure_computing+0x9f/0x1c0 [ 471.204720][T23291] syscall_trace_enter+0xd1/0x1f0 [ 471.209825][T23291] ? fpregs_assert_state_consistent+0x83/0xa0 [ 471.216049][T23291] do_syscall_64+0xaa/0x1c0 [ 471.220596][T23291] ? clear_bhb_loop+0x55/0xb0 [ 471.225326][T23291] ? clear_bhb_loop+0x55/0xb0 [ 471.230142][T23291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.236224][T23291] RIP: 0033:0x7fb171ecdff9 [ 471.240672][T23291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.261046][T23291] RSP: 002b:00007fb170b41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 471.269569][T23291] RAX: ffffffffffffffda RBX: 00007fb172085f80 RCX: 00007fb171ecdff9 [ 471.277534][T23291] RDX: 0000000000000008 RSI: 0000000000000005 RDI: 0000000000000006 [ 471.285602][T23291] RBP: 00007fb170b41090 R08: 0000000000000000 R09: 0000000000000000 [ 471.293573][T23291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.301629][T23291] R13: 0000000000000000 R14: 00007fb172085f80 R15: 00007ffe3b913c78 [ 471.309658][T23291] [ 471.330191][T23289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.355572][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.391549][T23296] loop1: detected capacity change from 0 to 1024 [ 471.398495][T23296] EXT4-fs: Ignoring removed nobh option [ 471.404122][T23296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 471.431927][T23296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.453016][T23296] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ' [ 471.465422][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.619241][T23309] FAULT_INJECTION: forcing a failure. [ 471.619241][T23309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.632388][T23309] CPU: 1 UID: 0 PID: 23309 Comm: syz.1.7094 Not tainted 6.12.0-rc1-syzkaller #0 [ 471.641639][T23309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 471.651962][T23309] Call Trace: [ 471.655232][T23309] [ 471.658155][T23309] dump_stack_lvl+0xf2/0x150 [ 471.662921][T23309] dump_stack+0x15/0x20 [ 471.667199][T23309] should_fail_ex+0x223/0x230 [ 471.671905][T23309] should_fail+0xb/0x10 [ 471.676065][T23309] should_fail_usercopy+0x1a/0x20 [ 471.681212][T23309] _copy_to_user+0x1e/0xa0 [ 471.685731][T23309] simple_read_from_buffer+0xa0/0x110 [ 471.691189][T23309] proc_fail_nth_read+0xf9/0x140 [ 471.696142][T23309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 471.701832][T23309] vfs_read+0x195/0x720 [ 471.706001][T23309] ? __rcu_read_unlock+0x4e/0x70 [ 471.710969][T23309] ? __fget_files+0x1d4/0x210 [ 471.715756][T23309] ksys_read+0xeb/0x1b0 [ 471.719907][T23309] __x64_sys_read+0x42/0x50 [ 471.724491][T23309] x64_sys_call+0x27d3/0x2d60 [ 471.729219][T23309] do_syscall_64+0xc9/0x1c0 [ 471.733782][T23309] ? clear_bhb_loop+0x55/0xb0 [ 471.738469][T23309] ? clear_bhb_loop+0x55/0xb0 [ 471.743382][T23309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.749509][T23309] RIP: 0033:0x7fe3f7eeca3c [ 471.754026][T23309] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 471.774060][T23309] RSP: 002b:00007fe3f6b46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 471.782548][T23309] RAX: ffffffffffffffda RBX: 00007fe3f80a6058 RCX: 00007fe3f7eeca3c [ 471.790618][T23309] RDX: 000000000000000f RSI: 00007fe3f6b460a0 RDI: 0000000000000005 [ 471.798586][T23309] RBP: 00007fe3f6b46090 R08: 0000000000000000 R09: 0000000000000000 [ 471.806670][T23309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.814673][T23309] R13: 0000000000000001 R14: 00007fe3f80a6058 R15: 00007ffc6626e358 [ 471.822678][T23309] [ 471.843680][T23312] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 471.935794][ T29] kauditd_printk_skb: 779 callbacks suppressed [ 471.935809][ T29] audit: type=1326 audit(1727696312.863:31416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23290 comm="syz.3.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb171ec4fa7 code=0x7ffc0000 [ 471.966700][ T29] audit: type=1326 audit(1727696312.881:31417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23290 comm="syz.3.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb171e69959 code=0x7ffc0000 [ 471.990545][ T29] audit: type=1326 audit(1727696312.881:31418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23290 comm="syz.3.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb171ecdff9 code=0x7ffc0000 [ 472.014205][ T29] audit: type=1326 audit(1727696312.891:31419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23290 comm="syz.3.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb171ec4fa7 code=0x7ffc0000 [ 472.037823][ T29] audit: type=1326 audit(1727696312.891:31420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23290 comm="syz.3.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb171e69959 code=0x7ffc0000 [ 472.061467][ T29] audit: type=1326 audit(1727696312.891:31421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23290 comm="syz.3.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb171ecdff9 code=0x7ffc0000 [ 472.086408][ T29] audit: type=1326 audit(1727696312.891:31422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23290 comm="syz.3.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb171ec4fa7 code=0x7ffc0000 [ 472.110190][ T29] audit: type=1326 audit(1727696312.891:31423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23290 comm="syz.3.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb171e69959 code=0x7ffc0000 [ 472.133903][ T29] audit: type=1326 audit(1727696312.891:31424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23290 comm="syz.3.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb171ecdff9 code=0x7ffc0000 [ 472.157825][ T29] audit: type=1326 audit(1727696312.900:31425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23290 comm="syz.3.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb171ec4fa7 code=0x7ffc0000 [ 472.275318][T23337] loop3: detected capacity change from 0 to 2048 [ 472.290880][T23337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.304689][T23337] FAULT_INJECTION: forcing a failure. [ 472.304689][T23337] name failslab, interval 1, probability 0, space 0, times 0 [ 472.317814][T23337] CPU: 0 UID: 0 PID: 23337 Comm: syz.3.7105 Not tainted 6.12.0-rc1-syzkaller #0 [ 472.327274][T23337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 472.337418][T23337] Call Trace: [ 472.340882][T23337] [ 472.343806][T23337] dump_stack_lvl+0xf2/0x150 [ 472.348488][T23337] dump_stack+0x15/0x20 [ 472.352653][T23337] should_fail_ex+0x223/0x230 [ 472.357410][T23337] ? ext4_read_inline_dir+0x121/0x780 [ 472.362785][T23337] should_failslab+0x8f/0xb0 [ 472.367456][T23337] __kmalloc_noprof+0xa5/0x370 [ 472.372216][T23337] ext4_read_inline_dir+0x121/0x780 [ 472.377544][T23337] ? _parse_integer+0x27/0x30 [ 472.382218][T23337] ext4_readdir+0x1f0/0x1ba0 [ 472.386858][T23337] ? 0xffffffff81000000 [ 472.391134][T23337] ? __rcu_read_unlock+0x4e/0x70 [ 472.396153][T23337] ? get_pid_task+0x8e/0xc0 [ 472.400742][T23337] ? proc_fail_nth_write+0x12a/0x150 [ 472.406091][T23337] ? down_read_killable+0x172/0x6b0 [ 472.411435][T23337] ? avc_policy_seqno+0x15/0x20 [ 472.416289][T23337] ? selinux_file_permission+0x22a/0x360 [ 472.421944][T23337] iterate_dir+0x11d/0x310 [ 472.426397][T23337] ? 0xffffffff81000000 [ 472.430585][T23337] __se_sys_getdents+0x88/0x1a0 [ 472.435451][T23337] ? __pfx_filldir+0x10/0x10 [ 472.440097][T23337] ? 0xffffffff81000000 [ 472.444581][T23337] ? 0xffffffff81000000 [ 472.448727][T23337] __x64_sys_getdents+0x43/0x50 [ 472.453663][T23337] x64_sys_call+0x2bbb/0x2d60 [ 472.458342][T23337] do_syscall_64+0xc9/0x1c0 [ 472.462842][T23337] ? clear_bhb_loop+0x55/0xb0 [ 472.467518][T23337] ? clear_bhb_loop+0x55/0xb0 [ 472.472219][T23337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.478155][T23337] RIP: 0033:0x7fb171ecdff9 [ 472.482566][T23337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.502236][T23337] RSP: 002b:00007fb170b41038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 472.510647][T23337] RAX: ffffffffffffffda RBX: 00007fb172085f80 RCX: 00007fb171ecdff9 [ 472.518624][T23337] RDX: 0000000000000058 RSI: ffffffff81000000 RDI: 0000000000000007 [ 472.526592][T23337] RBP: 00007fb170b41090 R08: 0000000000000000 R09: 0000000000000000 [ 472.534823][T23337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.542879][T23337] R13: 0000000000000000 R14: 00007fb172085f80 R15: 00007ffe3b913c78 [ 472.551557][T23337] ? 0xffffffff81000000 [ 472.555710][T23337] [ 472.568338][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.646173][T23352] loop3: detected capacity change from 0 to 512 [ 472.665897][T23352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.679273][T23352] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.691608][T23349] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 472.777694][T23358] FAULT_INJECTION: forcing a failure. [ 472.777694][T23358] name failslab, interval 1, probability 0, space 0, times 0 [ 472.790396][T23358] CPU: 0 UID: 0 PID: 23358 Comm: syz.1.7111 Not tainted 6.12.0-rc1-syzkaller #0 [ 472.799621][T23358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 472.809670][T23358] Call Trace: [ 472.812935][T23358] [ 472.816122][T23358] dump_stack_lvl+0xf2/0x150 [ 472.820725][T23358] dump_stack+0x15/0x20 [ 472.824873][T23358] should_fail_ex+0x223/0x230 [ 472.830039][T23358] ? __get_vm_area_node+0xf7/0x1b0 [ 472.835212][T23358] should_failslab+0x8f/0xb0 [ 472.839797][T23358] __kmalloc_cache_node_noprof+0x50/0x2b0 [ 472.845562][T23358] __get_vm_area_node+0xf7/0x1b0 [ 472.850828][T23358] __vmalloc_node_range_noprof+0x2c3/0xec0 [ 472.856767][T23358] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 472.862323][T23358] ? mntput_no_expire+0x70/0x3c0 [ 472.867393][T23358] ? avc_has_perm_noaudit+0x1cc/0x210 [ 472.872903][T23358] ? selinux_capable+0x1f2/0x260 [ 472.878007][T23358] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 472.883559][T23358] __vmalloc_noprof+0x5e/0x70 [ 472.888246][T23358] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 472.893877][T23358] bpf_prog_alloc_no_stats+0x49/0x360 [ 472.899321][T23358] ? bpf_prog_alloc+0x28/0x150 [ 472.904218][T23358] bpf_prog_alloc+0x3a/0x150 [ 472.908805][T23358] bpf_prog_load+0x4d1/0x1070 [ 472.913616][T23358] ? __rcu_read_unlock+0x4e/0x70 [ 472.918566][T23358] __sys_bpf+0x463/0x7a0 [ 472.922849][T23358] __x64_sys_bpf+0x43/0x50 [ 472.927269][T23358] x64_sys_call+0x2625/0x2d60 [ 472.931970][T23358] do_syscall_64+0xc9/0x1c0 [ 472.936470][T23358] ? clear_bhb_loop+0x55/0xb0 [ 472.941251][T23358] ? clear_bhb_loop+0x55/0xb0 [ 472.946017][T23358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.951962][T23358] RIP: 0033:0x7fe3f7eedff9 [ 472.956375][T23358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.976219][T23358] RSP: 002b:00007fe3f6b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 472.984954][T23358] RAX: ffffffffffffffda RBX: 00007fe3f80a5f80 RCX: 00007fe3f7eedff9 [ 472.992931][T23358] RDX: 0000000000000094 RSI: 00000000200000c0 RDI: 0000000000000005 [ 473.000920][T23358] RBP: 00007fe3f6b67090 R08: 0000000000000000 R09: 0000000000000000 [ 473.008896][T23358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.016859][T23358] R13: 0000000000000000 R14: 00007fe3f80a5f80 R15: 00007ffc6626e358 [ 473.024825][T23358] [ 473.028195][T23358] syz.1.7111: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 473.045097][T23358] CPU: 0 UID: 0 PID: 23358 Comm: syz.1.7111 Not tainted 6.12.0-rc1-syzkaller #0 [ 473.054135][T23358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 473.064237][T23358] Call Trace: [ 473.067502][T23358] [ 473.070475][T23358] dump_stack_lvl+0xf2/0x150 [ 473.075062][T23358] dump_stack+0x15/0x20 [ 473.079219][T23358] warn_alloc+0x145/0x1b0 [ 473.084353][T23358] __vmalloc_node_range_noprof+0x2e8/0xec0 [ 473.090189][T23358] ? mntput_no_expire+0x70/0x3c0 [ 473.095208][T23358] ? avc_has_perm_noaudit+0x1cc/0x210 [ 473.100640][T23358] ? selinux_capable+0x1f2/0x260 [ 473.105661][T23358] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 473.111232][T23358] __vmalloc_noprof+0x5e/0x70 [ 473.116332][T23358] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 473.121870][T23358] bpf_prog_alloc_no_stats+0x49/0x360 [ 473.127232][T23358] ? bpf_prog_alloc+0x28/0x150 [ 473.132091][T23358] bpf_prog_alloc+0x3a/0x150 [ 473.136797][T23358] bpf_prog_load+0x4d1/0x1070 [ 473.141542][T23358] ? __rcu_read_unlock+0x4e/0x70 [ 473.146484][T23358] __sys_bpf+0x463/0x7a0 [ 473.150798][T23358] __x64_sys_bpf+0x43/0x50 [ 473.155258][T23358] x64_sys_call+0x2625/0x2d60 [ 473.160100][T23358] do_syscall_64+0xc9/0x1c0 [ 473.165085][T23358] ? clear_bhb_loop+0x55/0xb0 [ 473.169840][T23358] ? clear_bhb_loop+0x55/0xb0 [ 473.174645][T23358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.180550][T23358] RIP: 0033:0x7fe3f7eedff9 [ 473.184950][T23358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.204723][T23358] RSP: 002b:00007fe3f6b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.213144][T23358] RAX: ffffffffffffffda RBX: 00007fe3f80a5f80 RCX: 00007fe3f7eedff9 [ 473.221198][T23358] RDX: 0000000000000094 RSI: 00000000200000c0 RDI: 0000000000000005 [ 473.229194][T23358] RBP: 00007fe3f6b67090 R08: 0000000000000000 R09: 0000000000000000 [ 473.237157][T23358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.245126][T23358] R13: 0000000000000000 R14: 00007fe3f80a5f80 R15: 00007ffc6626e358 [ 473.253114][T23358] [ 473.256200][T23358] Mem-Info: [ 473.259681][T23358] active_anon:5875 inactive_anon:24 isolated_anon:0 [ 473.259681][T23358] active_file:9180 inactive_file:12948 isolated_file:0 [ 473.259681][T23358] unevictable:0 dirty:421 writeback:0 [ 473.259681][T23358] slab_reclaimable:2839 slab_unreclaimable:19411 [ 473.259681][T23358] mapped:35604 shmem:2376 pagetables:706 [ 473.259681][T23358] sec_pagetables:0 bounce:0 [ 473.259681][T23358] kernel_misc_reclaimable:0 [ 473.259681][T23358] free:1868263 free_pcp:2279 free_cma:0 [ 473.305192][T23358] Node 0 active_anon:23500kB inactive_anon:96kB active_file:36720kB inactive_file:51792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142416kB dirty:1684kB writeback:0kB shmem:9504kB writeback_tmp:0kB kernel_stack:3168kB pagetables:2824kB sec_pagetables:0kB all_unreclaimable? no [ 473.333720][T23358] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 473.361028][T23358] lowmem_reserve[]: 0 2866 7844 0 [ 473.366566][T23358] Node 0 DMA32 free:2950376kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953908kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 473.396019][T23358] lowmem_reserve[]: 0 0 4978 0 [ 473.401127][T23358] Node 0 Normal free:4507316kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:23548kB inactive_anon:96kB active_file:36720kB inactive_file:51792kB unevictable:0kB writepending:1688kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:5536kB local_pcp:4692kB free_cma:0kB [ 473.431890][T23358] lowmem_reserve[]: 0 0 0 0 [ 473.436681][T23358] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 473.449513][T23358] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 5*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950376kB [ 473.465622][T23358] Node 0 Normal: 165*4kB (UME) 309*8kB (UME) 307*16kB (UME) 346*32kB (UME) 262*64kB (UME) 37*128kB (UME) 38*256kB (UME) 19*512kB (UME) 39*1024kB (UME) 34*2048kB (UME) 1059*4096kB (UM) = 4507308kB [ 473.485178][T23358] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 473.494956][T23358] 24516 total pagecache pages [ 473.499682][T23358] 24 pages in swap cache [ 473.504021][T23358] Free swap = 124396kB [ 473.508576][T23358] Total swap = 124996kB [ 473.512832][T23358] 2097051 pages RAM [ 473.516681][T23358] 0 pages HighMem/MovableOnly [ 473.521402][T23358] 80182 pages reserved [ 473.527379][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.536482][T23370] TCP: TCP_TX_DELAY enabled [ 473.610284][T23384] loop1: detected capacity change from 0 to 512 [ 473.619373][T23384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.632120][T23384] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.647595][T23385] Process accounting resumed [ 473.654150][T23385] Process accounting resumed [ 473.660068][T23385] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 473.678775][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.705576][T23391] loop3: detected capacity change from 0 to 2048 [ 473.716806][T23391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.755180][T23397] loop1: detected capacity change from 0 to 4096 [ 473.764958][T23397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.790866][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.809820][T23401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7128'. [ 473.947176][T23407] loop1: detected capacity change from 0 to 512 [ 474.530153][T23438] loop1: detected capacity change from 0 to 512 [ 474.540272][T23440] batadv0: entered promiscuous mode [ 474.546657][T23440] batadv_slave_0: entered promiscuous mode [ 474.552712][T23440] batadv_slave_0: left promiscuous mode [ 474.558708][T23440] batadv0: left promiscuous mode [ 474.601510][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.641950][T23444] loop3: detected capacity change from 0 to 2048 [ 474.670142][T23444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.713512][T23449] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 475.326511][T23455] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 475.541883][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.958952][T23480] loop3: detected capacity change from 0 to 512 [ 476.121752][T23482] loop1: detected capacity change from 0 to 128 [ 476.130458][T23482] FAULT_INJECTION: forcing a failure. [ 476.130458][T23482] name failslab, interval 1, probability 0, space 0, times 0 [ 476.143115][T23482] CPU: 0 UID: 0 PID: 23482 Comm: syz.1.7158 Not tainted 6.12.0-rc1-syzkaller #0 [ 476.152325][T23482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.162410][T23482] Call Trace: [ 476.165683][T23482] [ 476.168630][T23482] dump_stack_lvl+0xf2/0x150 [ 476.173597][T23482] dump_stack+0x15/0x20 [ 476.177783][T23482] should_fail_ex+0x223/0x230 [ 476.182455][T23482] ? security_file_alloc+0x32/0x100 [ 476.187658][T23482] should_failslab+0x8f/0xb0 [ 476.192233][T23482] kmem_cache_alloc_noprof+0x4c/0x290 [ 476.197677][T23482] security_file_alloc+0x32/0x100 [ 476.202769][T23482] alloc_empty_file+0x121/0x2f0 [ 476.208125][T23482] path_openat+0x6a/0x1fa0 [ 476.212584][T23482] ? arch_irq_work_raise+0x27/0x50 [ 476.217681][T23482] ? _parse_integer+0x27/0x30 [ 476.222392][T23482] ? kstrtoull+0x110/0x140 [ 476.226839][T23482] ? kstrtouint+0x77/0xc0 [ 476.231209][T23482] do_filp_open+0xf7/0x200 [ 476.235687][T23482] do_sys_openat2+0xab/0x120 [ 476.240270][T23482] __x64_sys_openat+0xf3/0x120 [ 476.245044][T23482] x64_sys_call+0x1025/0x2d60 [ 476.249725][T23482] do_syscall_64+0xc9/0x1c0 [ 476.254384][T23482] ? clear_bhb_loop+0x55/0xb0 [ 476.259100][T23482] ? clear_bhb_loop+0x55/0xb0 [ 476.263881][T23482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.269852][T23482] RIP: 0033:0x7fe3f7eedff9 [ 476.274270][T23482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.294051][T23482] RSP: 002b:00007fe3f6b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 476.302569][T23482] RAX: ffffffffffffffda RBX: 00007fe3f80a5f80 RCX: 00007fe3f7eedff9 [ 476.310620][T23482] RDX: 000000000000275a RSI: 0000000020000180 RDI: ffffffffffffff9c [ 476.318664][T23482] RBP: 00007fe3f6b67090 R08: 0000000000000000 R09: 0000000000000000 [ 476.326889][T23482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.335070][T23482] R13: 0000000000000000 R14: 00007fe3f80a5f80 R15: 00007ffc6626e358 [ 476.343057][T23482] [ 476.360431][T23485] loop1: detected capacity change from 0 to 128 [ 476.596566][T23504] IPVS: You probably need to specify IP address on multicast interface. [ 476.605354][T23504] IPVS: Error connecting to the multicast addr [ 476.785812][T23526] loop3: detected capacity change from 0 to 512 [ 476.806243][T23526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.819205][T23526] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.855984][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.886238][T23542] FAULT_INJECTION: forcing a failure. [ 476.886238][T23542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.899485][T23542] CPU: 0 UID: 0 PID: 23542 Comm: syz.3.7182 Not tainted 6.12.0-rc1-syzkaller #0 [ 476.908620][T23542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.918751][T23542] Call Trace: [ 476.922018][T23542] [ 476.924942][T23542] dump_stack_lvl+0xf2/0x150 [ 476.929767][T23542] dump_stack+0x15/0x20 [ 476.933957][T23542] should_fail_ex+0x223/0x230 [ 476.938825][T23542] should_fail+0xb/0x10 [ 476.943005][T23542] should_fail_usercopy+0x1a/0x20 [ 476.948122][T23542] _copy_from_user+0x1e/0xd0 [ 476.952721][T23542] get_timespec64+0x49/0x140 [ 476.957494][T23542] __se_sys_clock_nanosleep+0xfd/0x240 [ 476.963309][T23542] __x64_sys_clock_nanosleep+0x55/0x70 [ 476.969237][T23542] x64_sys_call+0x253f/0x2d60 [ 476.973942][T23542] do_syscall_64+0xc9/0x1c0 [ 476.978713][T23542] ? clear_bhb_loop+0x55/0xb0 [ 476.980556][T23540] loop1: detected capacity change from 0 to 2048 [ 476.983399][T23542] ? clear_bhb_loop+0x55/0xb0 [ 476.983431][T23542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.000459][T23542] RIP: 0033:0x7fb171ecdff9 [ 477.005101][T23542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.024883][T23542] RSP: 002b:00007fb170b41038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 477.033297][T23542] RAX: ffffffffffffffda RBX: 00007fb172085f80 RCX: 00007fb171ecdff9 [ 477.041316][T23542] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000009 [ 477.049335][T23542] RBP: 00007fb170b41090 R08: 0000000000000000 R09: 0000000000000000 [ 477.057533][T23542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.065592][T23542] R13: 0000000000000000 R14: 00007fb172085f80 R15: 00007ffe3b913c78 [ 477.073735][T23542] [ 477.086884][T23544] loop3: detected capacity change from 0 to 2048 [ 477.107719][T23540] Alternate GPT is invalid, using primary GPT. [ 477.114065][T23540] loop1: p1 p2 p3 [ 477.119173][T23544] Alternate GPT is invalid, using primary GPT. [ 477.122954][T23540] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 477.122954][T23540] program syz.1.7181 not setting count and/or reply_len properly [ 477.125505][T23544] loop3: p1 p2 p3 [ 477.150093][T23542] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 477.150093][T23542] program syz.3.7182 not setting count and/or reply_len properly [ 477.209102][T23548] loop3: detected capacity change from 0 to 4096 [ 477.217681][T23548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.239884][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.379703][T23560] loop3: detected capacity change from 0 to 512 [ 477.387980][T23557] loop1: detected capacity change from 0 to 2048 [ 477.445202][T23557] Alternate GPT is invalid, using primary GPT. [ 477.451900][T23557] loop1: p1 p2 p3 [ 477.457978][T23557] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 477.457978][T23557] program syz.1.7187 not setting count and/or reply_len properly [ 477.496757][T23562] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 477.507391][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 477.507403][ T29] audit: type=1400 audit(1727696318.013:31594): avc: denied { append } for pid=23561 comm="syz.1.7188" name="vcsu4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 477.534366][ T29] audit: type=1400 audit(1727696318.032:31595): avc: denied { node_bind } for pid=23563 comm="syz.0.7189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 477.580339][T23566] loop1: detected capacity change from 0 to 512 [ 477.590939][T23566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.604128][T23566] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.634996][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.797964][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.871822][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.888592][ T29] audit: type=1400 audit(1727696318.364:31596): avc: denied { sqpoll } for pid=23585 comm="syz.1.7196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 477.927795][ T29] audit: type=1400 audit(1727696318.383:31597): avc: denied { read } for pid=23585 comm="syz.1.7196" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 477.950650][ T29] audit: type=1400 audit(1727696318.383:31598): avc: denied { open } for pid=23585 comm="syz.1.7196" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 478.055094][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.133066][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.220311][T23580] chnl_net:caif_netlink_parms(): no params data found [ 478.315293][ T57] bridge_slave_1: left allmulticast mode [ 478.321040][ T57] bridge_slave_1: left promiscuous mode [ 478.326692][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.337742][ T57] bridge_slave_0: left allmulticast mode [ 478.343622][ T57] bridge_slave_0: left promiscuous mode [ 478.349395][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.425596][T23603] loop3: detected capacity change from 0 to 2048 [ 478.444400][T23603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.529484][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.542996][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.554401][ T57] bond0 (unregistering): Released all slaves [ 478.567496][T23580] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.574808][T23580] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.584488][T23580] bridge_slave_0: entered allmulticast mode [ 478.591187][T23580] bridge_slave_0: entered promiscuous mode [ 478.599598][T23580] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.603380][T23608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.606720][T23580] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.622278][T23608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.622366][T23580] bridge_slave_1: entered allmulticast mode [ 478.636851][T23580] bridge_slave_1: entered promiscuous mode [ 478.649278][T23608] loop1: detected capacity change from 0 to 512 [ 478.659522][ T29] audit: type=1400 audit(1727696319.075:31599): avc: denied { mounton } for pid=23607 comm="syz.1.7199" path="/349/file0" dev="tmpfs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 478.685985][ T57] hsr_slave_0: left promiscuous mode [ 478.692265][ T57] hsr_slave_1: left promiscuous mode [ 478.695052][T23608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.710773][T23608] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.721519][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.721964][T23608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.729032][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.746162][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.753678][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.763673][ T57] veth1_macvtap: left promiscuous mode [ 478.769247][ T57] veth0_macvtap: left promiscuous mode [ 478.775118][ T57] veth1_vlan: left promiscuous mode [ 478.780426][ T57] veth0_vlan: left promiscuous mode [ 478.791223][T23608] loop1: detected capacity change from 0 to 8192 [ 478.866810][ T57] team0 (unregistering): Port device team_slave_1 removed [ 478.876945][ T57] team0 (unregistering): Port device team_slave_0 removed [ 478.913194][T23580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.924220][T23580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.944369][T23580] team0: Port device team_slave_0 added [ 478.952458][T23580] team0: Port device team_slave_1 added [ 478.967092][T23580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.974138][T23580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.000166][T23580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.011771][T23580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.018831][T23580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.045041][T23580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.069875][T23580] hsr_slave_0: entered promiscuous mode [ 479.076027][T23580] hsr_slave_1: entered promiscuous mode [ 479.082167][T23580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.090215][T23580] Cannot create hsr debugfs directory [ 479.311802][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.333678][T23623] bpf_get_probe_write_proto: 2 callbacks suppressed [ 479.333692][T23623] syz.3.7201[23623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.345886][T23623] syz.3.7201[23623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.357769][T23623] syz.3.7201[23623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.366896][T23613] chnl_net:caif_netlink_parms(): no params data found [ 479.427946][ T29] audit: type=1400 audit(1727696319.786:31600): avc: denied { create } for pid=23631 comm="syz.3.7202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 479.447836][ T29] audit: type=1400 audit(1727696319.786:31601): avc: denied { bind } for pid=23631 comm="syz.3.7202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 479.472704][T23632] loop3: detected capacity change from 0 to 512 [ 479.474686][ T29] audit: type=1400 audit(1727696319.822:31602): avc: denied { write } for pid=23631 comm="syz.3.7202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 479.479930][T23632] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 479.511314][T23632] EXT4-fs (loop3): 1 truncate cleaned up [ 479.518414][ T29] audit: type=1326 audit(1727696319.869:31603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23634 comm="syz.1.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f7eedff9 code=0x7ffc0000 [ 479.519737][T23635] loop1: detected capacity change from 0 to 128 [ 479.545104][T23632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.561732][T23613] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.568945][T23613] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.576270][T23613] bridge_slave_0: entered allmulticast mode [ 479.582651][T23613] bridge_slave_0: entered promiscuous mode [ 479.589690][T23613] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.596830][T23613] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.604102][T23613] bridge_slave_1: entered allmulticast mode [ 479.604593][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.611014][T23613] bridge_slave_1: entered promiscuous mode [ 479.629714][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.655747][T23613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.658419][T23637] loop3: detected capacity change from 0 to 4096 [ 479.667887][T23613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.683708][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.693745][T23637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.729404][T23580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 479.738272][T23613] team0: Port device team_slave_0 added [ 479.744171][T23580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 479.755240][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.767189][T23613] team0: Port device team_slave_1 added [ 479.773186][T23580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 479.786034][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.804636][T23580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 479.813815][T23613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.820928][T23613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.847052][T23613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.860408][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.874008][T23613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.881031][T23613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.907743][T23613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.936111][T23613] hsr_slave_0: entered promiscuous mode [ 479.942194][T23613] hsr_slave_1: entered promiscuous mode [ 479.948361][T23613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.956465][T23613] Cannot create hsr debugfs directory [ 480.015276][T23646] loop3: detected capacity change from 0 to 512 [ 480.021141][ T57] bridge_slave_1: left allmulticast mode [ 480.027339][ T57] bridge_slave_1: left promiscuous mode [ 480.033314][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.042334][ T57] bridge_slave_0: left allmulticast mode [ 480.044165][T23646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.048347][ T57] bridge_slave_0: left promiscuous mode [ 480.064297][T23646] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.066352][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.163734][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.174334][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.185069][ T57] bond0 (unregistering): Released all slaves [ 480.229985][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.239116][ T57] hsr_slave_0: left promiscuous mode [ 480.244921][ T57] hsr_slave_1: left promiscuous mode [ 480.251123][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.258521][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.266367][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.273935][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.283059][ T57] veth1_macvtap: left promiscuous mode [ 480.288606][ T57] veth0_macvtap: left promiscuous mode [ 480.294207][ T57] veth1_vlan: left promiscuous mode [ 480.299446][ T57] veth0_vlan: left promiscuous mode [ 480.377823][T23658] loop1: detected capacity change from 0 to 2048 [ 480.391498][ T57] team0 (unregistering): Port device team_slave_1 removed [ 480.392147][T23658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.411222][ T57] team0 (unregistering): Port device team_slave_0 removed [ 480.450656][T23580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.464310][T23580] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.473241][ T4936] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.480544][ T4936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.492001][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.499072][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.561192][T23580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.635556][T23580] veth0_vlan: entered promiscuous mode [ 480.644093][T23580] veth1_vlan: entered promiscuous mode [ 480.662021][T23580] veth0_macvtap: entered promiscuous mode [ 480.669803][T23580] veth1_macvtap: entered promiscuous mode [ 480.683000][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.693854][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.703908][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.714472][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.714689][T23678] loop3: detected capacity change from 0 to 4096 [ 480.724423][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.741176][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.751021][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.755966][T23678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.761465][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.761482][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.794227][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.804120][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.814670][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.824874][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.835390][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.846209][T23580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.858474][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.869015][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.879200][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.889693][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.899604][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.910225][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.920050][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.930489][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.940505][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.950912][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.960727][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.971154][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.981017][T23580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.991507][T23580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.002180][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.003199][T23580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.019988][T23580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.028821][T23580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.037781][T23580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.046668][T23580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.130092][T23613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 481.140638][T23613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 481.149925][T23613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 481.160366][T23613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 481.209935][T23613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.223275][T23613] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.233284][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.240348][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.251644][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.258700][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.297913][T19579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.299646][T23613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.363458][T23699] team0 (unregistering): Port device team_slave_0 removed [ 481.374089][T23699] team0 (unregistering): Port device team_slave_1 removed [ 481.404061][T23613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.577316][T23613] veth0_vlan: entered promiscuous mode [ 481.591289][T23613] veth1_vlan: entered promiscuous mode [ 481.638954][T23613] veth0_macvtap: entered promiscuous mode [ 481.652093][ T265] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.664241][T23613] veth1_macvtap: entered promiscuous mode [ 481.695351][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.705905][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.715961][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.726779][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.736702][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.747207][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.757059][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.767624][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.777494][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.788114][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.798245][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.808846][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.818757][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.829207][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.839366][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.849796][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.861413][T23613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.878797][ T265] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.892732][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.903240][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.913283][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.923851][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.933675][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.944347][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.954271][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.964745][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.974578][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.985039][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.994882][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.005338][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.015271][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.025732][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.035678][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.046145][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.060901][T23613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.075514][ T265] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.107379][T23613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.116200][T23613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.125049][T23613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.133768][T23613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.153989][ T265] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.168210][T23715] chnl_net:caif_netlink_parms(): no params data found [ 482.216164][T23771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7230'. [ 482.250304][T23771] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 482.260212][T23771] SELinux: failed to load policy [ 482.265963][T23715] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.273193][T23715] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.280951][T23715] bridge_slave_0: entered allmulticast mode [ 482.287775][T23715] bridge_slave_0: entered promiscuous mode [ 482.297259][T23715] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.304409][T23715] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.312720][T23715] bridge_slave_1: entered allmulticast mode [ 482.319458][T23715] bridge_slave_1: entered promiscuous mode [ 482.341197][T23715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.361580][T23715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.376154][T23783] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 482.394607][ T265] bridge_slave_1: left allmulticast mode [ 482.400472][ T265] bridge_slave_1: left promiscuous mode [ 482.406523][ T265] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.414933][ T265] bridge_slave_0: left allmulticast mode [ 482.420660][ T265] bridge_slave_0: left promiscuous mode [ 482.426426][ T265] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.515352][ T265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.526954][ T265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.537635][ T265] bond0 (unregistering): Released all slaves [ 482.550212][T23715] team0: Port device team_slave_0 added [ 482.564392][T23791] batadv0: entered promiscuous mode [ 482.571871][T23791] batadv_slave_0: entered promiscuous mode [ 482.577987][T23791] batadv_slave_0: left promiscuous mode [ 482.583738][T23791] batadv0: left promiscuous mode [ 482.600724][T23715] team0: Port device team_slave_1 added [ 482.616803][T23715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.623981][T23715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.649971][T23715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.661369][T23715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.668700][T23715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.694836][T23715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.707575][ T265] hsr_slave_0: left promiscuous mode [ 482.716169][ T265] hsr_slave_1: left promiscuous mode [ 482.722036][ T265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.729535][ T265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.737588][ T265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.745192][ T265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.754677][ T265] veth1_macvtap: left promiscuous mode [ 482.760142][ T265] veth0_macvtap: left promiscuous mode [ 482.765869][ T265] veth1_vlan: left promiscuous mode [ 482.771084][ T265] veth0_vlan: left promiscuous mode [ 482.863546][ T265] team0 (unregistering): Port device team_slave_1 removed [ 482.874384][ T265] team0 (unregistering): Port device team_slave_0 removed [ 482.932511][T23715] hsr_slave_0: entered promiscuous mode [ 482.935511][T23807] siw: device registration error -23 [ 482.943763][T23715] hsr_slave_1: entered promiscuous mode [ 482.950752][T23715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.958463][T23715] Cannot create hsr debugfs directory [ 483.192745][T23810] loop3: detected capacity change from 0 to 2048 [ 483.385083][T23715] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 483.392199][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 483.392210][ T29] audit: type=1400 audit(1727696323.431:31724): avc: denied { create } for pid=23819 comm="syz.4.7245" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 483.419484][ T29] audit: type=1400 audit(1727696323.431:31725): avc: denied { write } for pid=23819 comm="syz.4.7245" name="file0" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 483.442225][ T29] audit: type=1400 audit(1727696323.431:31726): avc: denied { open } for pid=23819 comm="syz.4.7245" path="/4/file0" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 483.471698][ T29] audit: type=1400 audit(1727696323.514:31727): avc: denied { ioctl } for pid=23819 comm="syz.4.7245" path="/4/file0" dev="tmpfs" ino=37 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 483.496242][T23715] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 483.518862][T23715] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 483.534055][T23715] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 483.606013][T23715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.641839][T23715] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.648821][T23834] netlink: 'syz.1.7250': attribute type 4 has an invalid length. [ 483.659613][T23834] loop1: detected capacity change from 0 to 128 [ 483.661843][T23838] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 483.670116][T23834] vfat: Unknown parameter 'netlink_extack' [ 483.681878][ T4936] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.688960][ T4936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.705922][ T29] audit: type=1400 audit(1727696323.736:31728): avc: denied { setattr } for pid=23833 comm="syz.1.7250" name="rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 483.729587][ T29] audit: type=1400 audit(1727696323.736:31729): avc: denied { mount } for pid=23833 comm="syz.1.7250" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 483.730075][ T4936] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.759262][ T4936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.768631][ T29] audit: type=1400 audit(1727696323.782:31730): avc: denied { unlink } for pid=23613 comm="syz-executor" name="file0" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 483.797320][ T29] audit: type=1326 audit(1727696323.810:31731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23843 comm="syz.4.7254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98f96edff9 code=0x0 [ 483.889413][T23715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.902809][T23846] loop1: detected capacity change from 0 to 512 [ 483.929863][T23846] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.7255: attempt to clear invalid blocks 1 len 1 [ 483.951116][T23846] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7255: bg 0: block 343: padding at end of block bitmap is not set [ 483.967669][T23846] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 483.979234][T23846] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.7255: invalid indirect mapped block 1819239214 (level 0) [ 484.002272][T23715] veth0_vlan: entered promiscuous mode [ 484.011983][T23846] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.7255: invalid indirect mapped block 1819239214 (level 1) [ 484.028301][T23846] EXT4-fs (loop1): 1 truncate cleaned up [ 484.031357][T23715] veth1_vlan: entered promiscuous mode [ 484.060020][T23715] veth0_macvtap: entered promiscuous mode [ 484.073325][T23715] veth1_macvtap: entered promiscuous mode [ 484.081645][T23869] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 484.084545][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.099491][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.109521][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.112159][ T29] audit: type=1400 audit(1727696324.096:31732): avc: denied { write } for pid=23845 comm="syz.1.7255" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 484.120184][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.152440][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.163018][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.172969][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.183413][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.193359][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.203921][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.213870][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.224506][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.234311][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.244810][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.254705][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.265203][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.277008][T23715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.298823][T23883] loop1: detected capacity change from 0 to 512 [ 484.306022][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.316565][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.326950][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.337559][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.348026][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.358671][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.361538][T23888] FAULT_INJECTION: forcing a failure. [ 484.361538][T23888] name failslab, interval 1, probability 0, space 0, times 0 [ 484.368478][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.368494][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.368525][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.381277][T23888] CPU: 1 UID: 0 PID: 23888 Comm: syz.0.7264 Not tainted 6.12.0-rc1-syzkaller #0 [ 484.381299][T23888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 484.391846][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.401612][T23888] Call Trace: [ 484.401624][T23888] [ 484.401632][T23888] dump_stack_lvl+0xf2/0x150 [ 484.412230][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.421196][T23888] dump_stack+0x15/0x20 [ 484.431603][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.441358][T23888] should_fail_ex+0x223/0x230 [ 484.441388][T23888] ? iovec_from_user+0x84/0x210 [ 484.441409][T23888] should_failslab+0x8f/0xb0 [ 484.444697][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.447605][T23888] __kmalloc_noprof+0xa5/0x370 [ 484.452179][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.462538][T23888] iovec_from_user+0x84/0x210 [ 484.466684][T23715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.476521][T23888] __import_iovec+0xd8/0x520 [ 484.481179][T23715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.483921][T23715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.486020][T23888] ? path_openat+0x1a5a/0x1fa0 [ 484.497971][T23715] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.501001][T23888] import_iovec+0xbc/0xd0 [ 484.505759][T23715] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.515517][T23888] copy_msghdr_from_user+0x24e/0x2a0 [ 484.515543][T23888] do_recvmmsg+0x282/0x740 [ 484.515622][T23888] __x64_sys_recvmmsg+0xf9/0x170 [ 484.520220][T23715] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.530587][T23888] x64_sys_call+0x26e3/0x2d60 [ 484.535179][T23715] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.545028][T23888] do_syscall_64+0xc9/0x1c0 [ 484.558107][T23883] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.565738][T23888] ? clear_bhb_loop+0x55/0xb0 [ 484.565773][T23888] ? clear_bhb_loop+0x55/0xb0 [ 484.640054][T23888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.645951][T23888] RIP: 0033:0x7f51fd4ddff9 [ 484.650526][T23888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.670297][T23888] RSP: 002b:00007f51fc151038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 484.678710][T23888] RAX: ffffffffffffffda RBX: 00007f51fd695f80 RCX: 00007f51fd4ddff9 [ 484.686711][T23888] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 484.694745][T23888] RBP: 00007f51fc151090 R08: 0000000020003700 R09: 0000000000000000 [ 484.702704][T23888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.710662][T23888] R13: 0000000000000000 R14: 00007f51fd695f80 R15: 00007ffee26cebf8 [ 484.718788][T23888] [ 484.772998][T23897] syz.0.7266[23897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.773047][T23897] syz.0.7266[23897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.784895][T23897] syz.0.7266[23897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.799191][T23902] FAULT_INJECTION: forcing a failure. [ 484.799191][T23902] name failslab, interval 1, probability 0, space 0, times 0 [ 484.823316][T23902] CPU: 1 UID: 0 PID: 23902 Comm: syz.1.7268 Not tainted 6.12.0-rc1-syzkaller #0 [ 484.832454][T23902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 484.842585][T23902] Call Trace: [ 484.845851][T23902] [ 484.848813][T23902] dump_stack_lvl+0xf2/0x150 [ 484.853519][T23902] dump_stack+0x15/0x20 [ 484.857694][T23902] should_fail_ex+0x223/0x230 [ 484.862505][T23902] ? alloc_mnt_ns+0x71/0x240 [ 484.867098][T23902] should_failslab+0x8f/0xb0 [ 484.871858][T23902] __kmalloc_cache_noprof+0x4b/0x2a0 [ 484.877208][T23902] alloc_mnt_ns+0x71/0x240 [ 484.881668][T23902] __se_sys_fsmount+0x383/0x6a0 [ 484.886608][T23902] __x64_sys_fsmount+0x43/0x50 [ 484.891454][T23902] x64_sys_call+0x2cfb/0x2d60 [ 484.896216][T23902] do_syscall_64+0xc9/0x1c0 [ 484.900812][T23902] ? clear_bhb_loop+0x55/0xb0 [ 484.905556][T23902] ? clear_bhb_loop+0x55/0xb0 [ 484.910348][T23902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.916402][T23902] RIP: 0033:0x7fe3f7eedff9 [ 484.920819][T23902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.940473][T23902] RSP: 002b:00007fe3f6b67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 484.948941][T23902] RAX: ffffffffffffffda RBX: 00007fe3f80a5f80 RCX: 00007fe3f7eedff9 [ 484.957008][T23902] RDX: 0000000000000085 RSI: 0000000000000000 RDI: 0000000000000005 [ 484.964970][T23902] RBP: 00007fe3f6b67090 R08: 0000000000000000 R09: 0000000000000000 [ 484.973017][T23902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.980981][T23902] R13: 0000000000000000 R14: 00007fe3f80a5f80 R15: 00007ffc6626e358 [ 484.989110][T23902] [ 485.036801][T23911] usb usb3: usbfs: process 23911 (syz.0.7272) did not claim interface 6 before use [ 485.056134][T23907] loop1: detected capacity change from 0 to 2048 [ 485.084052][T23917] syz.2.7274[23917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.084129][T23917] syz.2.7274[23917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.095786][T23917] syz.2.7274[23917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.138206][ T29] audit: type=1326 audit(1727696325.056:31733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23922 comm="syz.2.7276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f636f20dff9 code=0x0 [ 485.217322][T23928] loop3: detected capacity change from 0 to 2048 [ 485.309778][T23932] loop3: detected capacity change from 0 to 512 [ 485.332465][T23932] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.343772][T23932] FAULT_INJECTION: forcing a failure. [ 485.343772][T23932] name failslab, interval 1, probability 0, space 0, times 0 [ 485.356554][T23932] CPU: 1 UID: 0 PID: 23932 Comm: syz.3.7278 Not tainted 6.12.0-rc1-syzkaller #0 [ 485.365562][T23932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 485.375638][T23932] Call Trace: [ 485.378963][T23932] [ 485.381877][T23932] dump_stack_lvl+0xf2/0x150 [ 485.386490][T23932] dump_stack+0x15/0x20 [ 485.390965][T23932] should_fail_ex+0x223/0x230 [ 485.395631][T23932] ? iovec_from_user+0x84/0x210 [ 485.400502][T23932] should_failslab+0x8f/0xb0 [ 485.405086][T23932] __kmalloc_noprof+0xa5/0x370 [ 485.410062][T23932] iovec_from_user+0x84/0x210 [ 485.414736][T23932] __import_iovec+0xd8/0x520 [ 485.419439][T23932] ? path_openat+0x1a5a/0x1fa0 [ 485.424244][T23932] import_iovec+0xbc/0xd0 [ 485.428572][T23932] copy_msghdr_from_user+0x24e/0x2a0 [ 485.433931][T23932] do_recvmmsg+0x282/0x740 [ 485.438433][T23932] __x64_sys_recvmmsg+0xf9/0x170 [ 485.443445][T23932] x64_sys_call+0x26e3/0x2d60 [ 485.448132][T23932] do_syscall_64+0xc9/0x1c0 [ 485.452643][T23932] ? clear_bhb_loop+0x55/0xb0 [ 485.457388][T23932] ? clear_bhb_loop+0x55/0xb0 [ 485.462115][T23932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.468001][T23932] RIP: 0033:0x7fb171ecdff9 [ 485.472400][T23932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.492200][T23932] RSP: 002b:00007fb170b41038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 485.500717][T23932] RAX: ffffffffffffffda RBX: 00007fb172085f80 RCX: 00007fb171ecdff9 [ 485.508780][T23932] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000006 [ 485.516739][T23932] RBP: 00007fb170b41090 R08: 0000000020003700 R09: 0000000000000000 [ 485.524776][T23932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.532751][T23932] R13: 0000000000000000 R14: 00007fb172085f80 R15: 00007ffe3b913c78 [ 485.540732][T23932] [ 485.571662][T23936] team0 (unregistering): Port device team_slave_0 removed [ 485.581294][T23936] team0 (unregistering): Port device team_slave_1 removed [ 485.658546][T23942] loop3: detected capacity change from 0 to 128 [ 485.782984][T23950] syz.3.7285[23950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.783022][T23950] syz.3.7285[23950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.794676][T23950] syz.3.7285[23950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.959464][T23952] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7287'. [ 486.003507][T23960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7286'. [ 486.028158][T23960] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 486.038648][T23960] SELinux: failed to load policy [ 486.087608][T23972] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 486.171088][T23982] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7298'. [ 486.219044][T23987] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7300'. [ 486.262651][T23989] IPVS: You probably need to specify IP address on multicast interface. [ 486.271164][T23989] IPVS: Error connecting to the multicast addr [ 486.911280][T23999] loop1: detected capacity change from 0 to 2048 [ 486.925581][T23999] syz.1.7306[23999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 486.926315][T23999] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 486.952857][T23999] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 486.965439][T23999] EXT4-fs (loop1): This should not happen!! Data will be lost [ 486.965439][T23999] [ 486.975132][T23999] EXT4-fs (loop1): Total free blocks count 0 [ 486.981382][T23999] EXT4-fs (loop1): Free/Dirty block details [ 486.983525][T24006] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 486.987377][T23999] EXT4-fs (loop1): free_blocks=2415919104 [ 486.999779][T24006] EXT4-fs (loop1): This should not happen!! Data will be lost [ 486.999779][T24006] [ 487.005436][T23999] EXT4-fs (loop1): dirty_blocks=64 [ 487.005449][T23999] EXT4-fs (loop1): Block reservation details [ 487.015114][T24006] EXT4-fs (loop1): Total free blocks count 0 [ 487.088007][T24009] loop3: detected capacity change from 0 to 512 [ 487.097929][T24009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.119318][T24012] loop1: detected capacity change from 0 to 2048 [ 487.128525][T24019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7312'. [ 487.130344][T24009] EXT4-fs (loop3): orphan cleanup on readonly fs [ 487.153920][T24009] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7310: bg 0: block 248: padding at end of block bitmap is not set [ 487.178204][T24009] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.7310: Failed to acquire dquot type 1 [ 487.215186][T24009] EXT4-fs (loop3): 1 truncate cleaned up [ 487.291240][T24041] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 487.387728][T24053] loop3: detected capacity change from 0 to 2048 [ 487.388839][T24061] loop1: detected capacity change from 0 to 512 [ 487.401206][T24061] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 487.412571][T24061] EXT4-fs (loop1): 1 truncate cleaned up [ 487.440869][T24061] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7328'. [ 487.547910][T24076] loop1: detected capacity change from 0 to 512 [ 487.557928][T24076] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.7333: corrupted in-inode xattr: invalid ea_ino [ 487.571646][T24076] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.7333: couldn't read orphan inode 15 (err -117) [ 487.840484][T24095] siw: device registration error -23 [ 488.468245][T24118] loop1: detected capacity change from 0 to 512 [ 488.477990][T24118] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.522920][T24126] loop1: detected capacity change from 0 to 128 [ 488.545746][T24126] syz.1.7352: attempt to access beyond end of device [ 488.545746][T24126] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 488.559687][T24126] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 488.587611][T24130] loop1: detected capacity change from 0 to 512 [ 488.594420][T24130] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 488.605452][T24130] EXT4-fs (loop1): 1 truncate cleaned up [ 488.642384][T24135] loop1: detected capacity change from 0 to 512 [ 488.649108][T24135] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 488.659976][T24135] EXT4-fs (loop1): 1 truncate cleaned up [ 488.700031][T24138] loop1: detected capacity change from 0 to 128 [ 488.828363][T24153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.837078][T24153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.837557][T24150] loop3: detected capacity change from 0 to 2048 [ 488.895443][T24155] IPVS: You probably need to specify IP address on multicast interface. [ 488.904112][T24155] IPVS: Error connecting to the multicast addr [ 488.978894][T24159] IPVS: You probably need to specify IP address on multicast interface. [ 488.987378][T24159] IPVS: Error connecting to the multicast addr [ 489.021583][T24165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.035019][T24165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.048548][T24165] bond0 (unregistering): Released all slaves [ 489.054838][T24171] FAULT_INJECTION: forcing a failure. [ 489.054838][T24171] name failslab, interval 1, probability 0, space 0, times 0 [ 489.067585][T24171] CPU: 0 UID: 0 PID: 24171 Comm: syz.3.7372 Not tainted 6.12.0-rc1-syzkaller #0 [ 489.076630][T24171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 489.086722][T24171] Call Trace: [ 489.090072][T24171] [ 489.093110][T24171] dump_stack_lvl+0xf2/0x150 [ 489.097691][T24171] dump_stack+0x15/0x20 [ 489.101842][T24171] should_fail_ex+0x223/0x230 [ 489.106512][T24171] ? alloc_empty_file+0xd0/0x2f0 [ 489.111531][T24171] should_failslab+0x8f/0xb0 [ 489.116117][T24171] kmem_cache_alloc_noprof+0x4c/0x290 [ 489.121479][T24171] ? get_perf_callchain+0x430/0x520 [ 489.126679][T24171] alloc_empty_file+0xd0/0x2f0 [ 489.131431][T24171] path_openat+0x6a/0x1fa0 [ 489.135853][T24171] ? __bpf_get_stack+0x28c/0x5e0 [ 489.140773][T24171] ? __bpf_get_stack+0x5ac/0x5e0 [ 489.145746][T24171] ? _parse_integer+0x27/0x30 [ 489.150550][T24171] ? kstrtoull+0x110/0x140 [ 489.155168][T24171] ? kstrtouint+0x77/0xc0 [ 489.159523][T24171] do_filp_open+0xf7/0x200 [ 489.163949][T24171] do_sys_openat2+0xab/0x120 [ 489.168600][T24171] __x64_sys_openat+0xf3/0x120 [ 489.173580][T24171] x64_sys_call+0x1025/0x2d60 [ 489.178533][T24171] do_syscall_64+0xc9/0x1c0 [ 489.183074][T24171] ? clear_bhb_loop+0x55/0xb0 [ 489.187829][T24171] ? clear_bhb_loop+0x55/0xb0 [ 489.192519][T24171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.198489][T24171] RIP: 0033:0x7fb171ecc990 [ 489.203036][T24171] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 489.222636][T24171] RSP: 002b:00007fb170b40f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 489.231233][T24171] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb171ecc990 [ 489.239282][T24171] RDX: 0000000000000000 RSI: 00007fb171f403ae RDI: 00000000ffffff9c [ 489.247344][T24171] RBP: 00007fb171f403ae R08: 0000000000000000 R09: 0000000000000000 [ 489.255487][T24171] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 489.263455][T24171] R13: 0000000000000000 R14: 00007fb172085f80 R15: 00007ffe3b913c78 [ 489.271437][T24171] [ 489.292102][T24173] loop3: detected capacity change from 0 to 512 [ 489.296262][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 489.296275][ T29] audit: type=1400 audit(1727696328.886:32110): avc: denied { create } for pid=24174 comm="syz.0.7374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 489.306828][T24173] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 489.324819][ T29] audit: type=1400 audit(1727696328.886:32111): avc: denied { ioctl } for pid=24174 comm="syz.0.7374" path="socket:[94288]" dev="sockfs" ino=94288 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 489.334984][T24173] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: comm syz.3.7373: inode #67108864: comm syz.3.7373: iget: illegal inode # [ 489.373436][T24173] EXT4-fs (loop3): no journal found [ 489.384429][T24175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7374'. [ 489.396151][ T29] audit: type=1326 audit(1727696328.979:32112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24172 comm="syz.3.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb171ecdff9 code=0x7ffc0000 [ 489.420401][T24180] FAULT_INJECTION: forcing a failure. [ 489.420401][T24180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.432806][ T29] audit: type=1326 audit(1727696329.006:32113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24172 comm="syz.3.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fb171ecdff9 code=0x7ffc0000 [ 489.433728][T24180] CPU: 0 UID: 0 PID: 24180 Comm: syz.2.7375 Not tainted 6.12.0-rc1-syzkaller #0 [ 489.457521][ T29] audit: type=1326 audit(1727696329.006:32114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24172 comm="syz.3.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb171ecdff9 code=0x7ffc0000 [ 489.466445][T24180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 489.493201][ T29] audit: type=1326 audit(1727696329.006:32115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24172 comm="syz.3.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb171ecdff9 code=0x7ffc0000 [ 489.500378][T24180] Call Trace: [ 489.500391][T24180] [ 489.500399][T24180] dump_stack_lvl+0xf2/0x150 [ 489.500426][T24180] dump_stack+0x15/0x20 [ 489.500463][T24180] should_fail_ex+0x223/0x230 [ 489.500505][T24180] should_fail+0xb/0x10 [ 489.524580][ T29] audit: type=1326 audit(1727696329.006:32116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24172 comm="syz.3.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb171ecdff9 code=0x7ffc0000 [ 489.527805][T24180] should_fail_usercopy+0x1a/0x20 [ 489.530720][ T29] audit: type=1326 audit(1727696329.006:32117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24172 comm="syz.3.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb171ecdff9 code=0x7ffc0000 [ 489.535279][T24180] _copy_from_iter+0xd3/0xd20 [ 489.535312][T24180] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 489.539463][ T29] audit: type=1326 audit(1727696329.006:32118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24172 comm="syz.3.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb171ecdff9 code=0x7ffc0000 [ 489.544173][T24180] copy_page_from_iter+0x14f/0x280 [ 489.548423][ T29] audit: type=1326 audit(1727696329.006:32119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24172 comm="syz.3.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb171ecdff9 code=0x7ffc0000 [ 489.571914][T24180] tun_get_user+0x686/0x24e0 [ 489.571942][T24180] ? kstrtoull+0x110/0x140 [ 489.571965][T24180] ? ref_tracker_alloc+0x1f5/0x2f0 [ 489.677601][T24180] tun_chr_write_iter+0x188/0x240 [ 489.682681][T24180] vfs_write+0x76a/0x910 [ 489.686969][T24180] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 489.692688][T24180] ksys_write+0xeb/0x1b0 [ 489.697033][T24180] __x64_sys_write+0x42/0x50 [ 489.701692][T24180] x64_sys_call+0x27dd/0x2d60 [ 489.706365][T24180] do_syscall_64+0xc9/0x1c0 [ 489.710893][T24180] ? clear_bhb_loop+0x55/0xb0 [ 489.715682][T24180] ? clear_bhb_loop+0x55/0xb0 [ 489.720571][T24180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.726538][T24180] RIP: 0033:0x7f636f20cadf [ 489.731121][T24180] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 489.750770][T24180] RSP: 002b:00007f636de87000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 489.759183][T24180] RAX: ffffffffffffffda RBX: 00007f636f3c5f80 RCX: 00007f636f20cadf [ 489.767186][T24180] RDX: 0000000000000066 RSI: 0000000020000000 RDI: 00000000000000c8 [ 489.775245][T24180] RBP: 00007f636de87090 R08: 0000000000000000 R09: 0000000000000000 [ 489.783255][T24180] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 489.791311][T24180] R13: 0000000000000000 R14: 00007f636f3c5f80 R15: 00007ffcd1614f98 [ 489.799277][T24180] [ 489.807495][T24175] usb usb7: usbfs: process 24175 (syz.0.7374) did not claim interface 0 before use [ 489.831378][T24183] loop1: detected capacity change from 0 to 128 [ 489.900785][T24188] netlink: 'syz.2.7380': attribute type 5 has an invalid length. [ 489.912213][T24188] tipc: Enabling of bearer rejected, failed to enable media [ 490.015690][T24209] loop3: detected capacity change from 0 to 512 [ 490.055291][T24209] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.7389: corrupted in-inode xattr: invalid ea_ino [ 490.068912][T24209] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.7389: couldn't read orphan inode 15 (err -117) [ 490.104372][T24217] netlink: 'syz.4.7391': attribute type 39 has an invalid length. [ 490.112742][T24217] veth1_macvtap: left promiscuous mode [ 490.178618][T24229] loop3: detected capacity change from 0 to 4096 [ 490.229563][T23129] EXT4-fs unmount: 25 callbacks suppressed [ 490.229575][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.292798][T24239] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 490.414889][T24252] bpf_get_probe_write_proto: 8 callbacks suppressed [ 490.414900][T24252] syz.3.7399[24252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.421575][T24252] syz.3.7399[24252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.433540][T24252] syz.3.7399[24252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.480767][T24252] IPVS: You probably need to specify IP address on multicast interface. [ 490.500846][T24252] IPVS: Error connecting to the multicast addr [ 490.535847][T24254] loop3: detected capacity change from 0 to 512 [ 490.546412][T24254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.559414][T24254] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.592464][T23129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.643960][T24265] loop3: detected capacity change from 0 to 2048 [ 490.713950][T24276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.722698][T24276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.736993][T24276] loop3: detected capacity change from 0 to 512 [ 490.772034][T24276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.790071][T24276] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.805520][T24276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.822349][T24276] ================================================================== [ 490.830456][T24276] BUG: KCSAN: data-race in munlock_folio / need_mlock_drain [ 490.837785][T24276] [ 490.840111][T24276] read-write to 0xffff888237d2b590 of 1 bytes by task 24274 on cpu 1: [ 490.848356][T24276] munlock_folio+0x42/0x130 [ 490.852913][T24276] folio_remove_rmap_ptes+0x18f/0x1a0 [ 490.858306][T24276] unmap_page_range+0x10ad/0x22d0 [ 490.863424][T24276] unmap_single_vma+0x142/0x1d0 [ 490.868366][T24276] unmap_vmas+0x18d/0x2b0 [ 490.872734][T24276] exit_mmap+0x18a/0x690 [ 490.876978][T24276] __mmput+0x28/0x1b0 [ 490.880952][T24276] mmput+0x4c/0x60 [ 490.884702][T24276] exit_mm+0xe4/0x190 [ 490.888714][T24276] do_exit+0x55e/0x17f0 [ 490.892873][T24276] do_group_exit+0x102/0x150 [ 490.897465][T24276] get_signal+0xf2a/0x1070 [ 490.901884][T24276] arch_do_signal_or_restart+0x95/0x4b0 [ 490.907427][T24276] syscall_exit_to_user_mode+0x59/0x130 [ 490.912975][T24276] do_syscall_64+0xd6/0x1c0 [ 490.917475][T24276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.923372][T24276] [ 490.925686][T24276] read to 0xffff888237d2b590 of 1 bytes by task 24276 on cpu 0: [ 490.933415][T24276] need_mlock_drain+0x30/0x50 [ 490.938106][T24276] __lru_add_drain_all+0x22a/0x3f0 [ 490.943252][T24276] lru_add_drain_all+0x10/0x20 [ 490.948021][T24276] invalidate_bdev+0x47/0x70 [ 490.952608][T24276] ext4_put_super+0x571/0x840 [ 490.957382][T24276] generic_shutdown_super+0xe5/0x220 [ 490.962668][T24276] kill_block_super+0x2a/0x70 [ 490.967504][T24276] ext4_kill_sb+0x44/0x80 [ 490.971853][T24276] deactivate_locked_super+0x7d/0x1c0 [ 490.977312][T24276] deactivate_super+0x9f/0xb0 [ 490.981986][T24276] cleanup_mnt+0x268/0x2e0 [ 490.986406][T24276] __cleanup_mnt+0x19/0x20 [ 490.990849][T24276] task_work_run+0x13a/0x1a0 [ 490.995453][T24276] syscall_exit_to_user_mode+0xbe/0x130 [ 491.001036][T24276] do_syscall_64+0xd6/0x1c0 [ 491.005653][T24276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.011649][T24276] [ 491.013966][T24276] value changed: 0x00 -> 0x1f [ 491.018630][T24276] [ 491.020943][T24276] Reported by Kernel Concurrency Sanitizer on: [ 491.027084][T24276] CPU: 0 UID: 0 PID: 24276 Comm: syz.3.7405 Not tainted 6.12.0-rc1-syzkaller #0 [ 491.036101][T24276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 491.046152][T24276] ================================================================== [ 491.066802][T24285] siw: device registration error -23 [ 491.108688][T24276] loop3: detected capacity change from 0 to 8192