last executing test programs: 5m12.192805584s ago: executing program 4 (id=871): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1) 5m11.339619457s ago: executing program 4 (id=900): socket$netlink(0x10, 0x3, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x4207, r0) ptrace$setregs(0x11, r0, 0x2, 0xfffffffffffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r5}, 0x18) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 5m11.307833919s ago: executing program 4 (id=901): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000390415539f5e26b8a6604ce4a351", @ANYRES32=0x0, @ANYBLOB="83000400000000002000128008000100736974001400028008000c000000008008000300e0000001"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 5m11.178871779s ago: executing program 4 (id=906): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) prctl$PR_SET_ENDIAN(0x47, 0x1) fcntl$setsig(r4, 0xa, 0x12) poll(0x0, 0x0, 0x81) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f00000003c0)={[0x8001a0fffbfffc]}, 0x8) dup2(r4, r5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) syz_emit_ethernet(0x2a, &(0x7f0000001f40)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x650, [0x0, 0x4000000017c0, 0x4000000018a6, 0x4000000019ac], 0x0, &(0x7f00000001c0), &(0x7f00000017c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x49, 0x0, 'team_slave_1\x00', 'bond_slave_1\x00', 'dvmrp0\x00', 'pimreg\x00', @local, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, [0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"a5331613bf1963b2e643f90a1852c9521a71ba74fe0f93584e12f6b1af5d"}}}]}, {0x0, '\x00', 0x1, 0xa4f20e03e56afa4d, 0x1, [{0x5, 0x0, 0x8848, 'nicvf0\x00', 'veth1_to_batadv\x00', 'veth1_to_bridge\x00', 'wg1\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x0, 0x88f7, 'veth0_to_bridge\x00', 'dvmrp1\x00', 'wg1\x00', 'pimreg1\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @multicast, [0x0, 0xff, 0x0, 0x0, 0xff, 0x101], 0xde, 0x20e, 0x25e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'virt_wifi0\x00', 'sit0\x00', 0x6, 0x2, 0x2, 0x7, 0x3ff, 0x5, {0x80000000}, {0x613}}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x5, 'system_u:object_r:usb_device_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x6, {0xfffffffffffffff2}}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x11, 0x8, 0x88be, 'veth1_vlan\x00', 'netdevsim0\x00', 'pim6reg\x00', 'team0\x00', @remote, [0x0, 0x0, 0xff], @empty, [0x0, 0xff], 0xae, 0x156, 0x1a6, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x0, 0x5, 0xa, 0x4, {0x2}}}}], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0xfff7, 0x9, 0x0, 0x0, "5bf93507a53ef132b5e6346f649375e61a5fc4b3a00184d1ca9abe316fcd142a9a5ba0c0967254bf36f2abea8978badbb0df6d3ba536e36d1b54b289a779fa95"}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00', {0x1}}}}}]}]}, 0x6c8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x200000000000001}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r9, r9, 0x0, 0xfffe80) syz_clone3(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x53) 5m10.981066814s ago: executing program 4 (id=910): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 5m10.729163882s ago: executing program 4 (id=914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff8001}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b95, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 5m10.728931702s ago: executing program 32 (id=914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff8001}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b95, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 4m0.763500327s ago: executing program 0 (id=2087): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 4m0.507225656s ago: executing program 0 (id=2090): gettid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kfree\x00'}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x5, 0x0, 0x1, 0x40, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@lazytime}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@auto_da_alloc}, {@resgid={'resgid', 0x3d, r7}}, {@jqfmt_vfsold}, {@resuid={'resuid', 0x3d, r6}}, {@barrier_val}, {@max_batch_time={'max_batch_time', 0x3d, 0x16db}}, {@auto_da_alloc}, {@noload}]}, 0x0, 0x0, 0xfffffffffffffffd) fchown(r3, r4, r7) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x810c, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=ANY=[], 0x348}, 0x0, 0x800, 0x1}) io_uring_enter(r8, 0x8aa, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0) connect$inet6(r12, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 4m0.141866113s ago: executing program 0 (id=2097): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffef5) socket$tipc(0x1e, 0xc5bd1b2a1b130c02, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r4, r5}, 0x16) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x10, r6, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3m59.705549756s ago: executing program 0 (id=2101): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 3m59.392631539s ago: executing program 0 (id=2103): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) syz_clone3(&(0x7f0000000580)={0x28884500, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m58.681931201s ago: executing program 0 (id=2109): clock_nanosleep(0x7, 0x1, &(0x7f0000000000)={0x77359400}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x105840) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r5, 0x9, 0x1000000) 3m43.618509527s ago: executing program 33 (id=2109): clock_nanosleep(0x7, 0x1, &(0x7f0000000000)={0x77359400}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x105840) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r5, 0x9, 0x1000000) 3m22.158653018s ago: executing program 2 (id=2397): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffef5) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x10, r3, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3m21.938184414s ago: executing program 2 (id=2401): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3m21.820263633s ago: executing program 2 (id=2404): sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x200040c, &(0x7f0000000500)=ANY=[@ANYRES64=0x0], 0x11, 0x1236, &(0x7f0000001200)="$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") rename(0x0, &(0x7f0000000080)='./file2\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x206c1c0, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xdc2d, 0x4, 0x2, 0x50000, 0xffffffffffffffff, 0x8b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x1, @void, @value, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x5, 0x8000, 0x6, @mcast1, @empty, 0x700, 0x8000, 0x6, 0x2}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 3m21.658083235s ago: executing program 2 (id=2409): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r4, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x8e8c, 0x18, 0x2}) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3m21.391030054s ago: executing program 2 (id=2415): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0) 3m21.328399279s ago: executing program 2 (id=2417): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpgid(0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x146b1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) syz_io_uring_setup(0xe3f, &(0x7f0000000140)={0x0, 0x211c, 0x400}, &(0x7f0000000240), &(0x7f00000001c0)) 3m17.907039203s ago: executing program 3 (id=2472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x2cb4, &(0x7f00000002c0)={0x0, 0x656, 0x40, 0x1, 0x328}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000400), 0x61) 3m17.784881192s ago: executing program 3 (id=2473): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3m17.627712684s ago: executing program 3 (id=2475): sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x200040c, &(0x7f0000000500)=ANY=[@ANYRES64=0x0], 0x11, 0x1236, &(0x7f0000001200)="$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") rename(0x0, &(0x7f0000000080)='./file2\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x206c1c0, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xdc2d, 0x4, 0x2, 0x50000, 0xffffffffffffffff, 0x8b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x1, @void, @value, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x5, 0x8000, 0x6, @mcast1, @empty, 0x700, 0x8000, 0x6, 0x2}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 3m17.448062477s ago: executing program 3 (id=2479): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1ba7f32}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f0000000480)={{0x80}, 'port0\x00', 0x29, 0x16002c, 0xffd, 0x4, 0x40002, 0xfffffffd, 0x7, 0x0, 0x0, 0x3}) close(r0) 3m17.366566253s ago: executing program 3 (id=2480): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 3m17.298225908s ago: executing program 3 (id=2482): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = semget(0x0, 0x3, 0x8a1) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000300)=[0x7, 0x6]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) close(r4) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000bc0)={[{@orlov}]}, 0x1, 0x52d, &(0x7f0000000640)="$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") r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') 3m6.284779484s ago: executing program 34 (id=2417): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpgid(0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x146b1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) syz_io_uring_setup(0xe3f, &(0x7f0000000140)={0x0, 0x211c, 0x400}, &(0x7f0000000240), &(0x7f00000001c0)) 3m2.175928719s ago: executing program 35 (id=2482): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = semget(0x0, 0x3, 0x8a1) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000300)=[0x7, 0x6]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) close(r4) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000bc0)={[{@orlov}]}, 0x1, 0x52d, &(0x7f0000000640)="$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") r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') 1.432334331s ago: executing program 5 (id=7152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x8, 0x0, 0x69) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000947b64e00010073797a300000000078000000030a010300000000000000000073797a320000000008000a40000000032800048008000240000000120800014000000001140003007600"/126], 0xc0}}, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x1}, 0x805) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2) 1.319218068s ago: executing program 5 (id=7161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtfilter={0x58, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_SEL={0x14, 0x5, {0xb, 0x1, 0x1, 0x2, 0xa00, 0xf289, 0x5, 0x4}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.261478461s ago: executing program 8 (id=7166): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) unshare(0x24040000) unshare(0x2c020400) 1.240230733s ago: executing program 8 (id=7168): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.154747388s ago: executing program 8 (id=7173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000ba0000050000000900010073797a300000000078000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240187e00120800014000000000140003006e657464657673696d30"], 0xc0}}, 0x0) 1.152798388s ago: executing program 5 (id=7174): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='9p_protocol_dump\x00', r0}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x5, 0x6, 0x0, 0x2, 0x0, 0x70bd2d, 0x25dfdbfb}, 0x10}}, 0x20000000) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0xee01, 0xee00) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x5) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4810) 1.035910275s ago: executing program 5 (id=7181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000804, &(0x7f0000000d80)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c696f636861727365743d69736f383835392d312c666d61736b3d74aa5aa4ffb487c8c8e2cdbc1230303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d303030303030303030303030303030", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYRESOCT=r0, @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sync() (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x7fff, 0x59, 0x9, 0x6}, {0x6, 0x38, 0x7f, 0x4}, {0xc, 0xb, 0x4, 0x7}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x60100) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x12) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r5, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) (async) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 1.035296285s ago: executing program 8 (id=7182): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000007c0)=""/55, 0x37, 0x40, 0x3, 0x10000}}, 0x120) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0xb510, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 930.673732ms ago: executing program 5 (id=7184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtfilter={0x58, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_SEL={0x14, 0x5, {0xb, 0x1, 0x1, 0x2, 0xa00, 0xf289, 0x5, 0x4}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x800) 579.697454ms ago: executing program 7 (id=7185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@const={0x1}, @struct={0x7, 0x3, 0x0, 0x4, 0x0, 0x5, [{0x1, 0x1, 0xfffffff9}, {0x6, 0x5, 0x7d}, {0x3, 0x3, 0x9}]}]}, {0x0, [0x61, 0x30, 0x30, 0x30, 0xfa5d2222cf65594a]}}, 0x0, 0x5b, 0x0, 0x1, 0x1adc, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x20, &(0x7f0000000240)={&(0x7f0000000b00)=""/4096, 0x1000, 0x0, &(0x7f0000000540)=""/99, 0x63}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'pim6reg1\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6, @multicast}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 532.393267ms ago: executing program 1 (id=7188): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x4000000000000008, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x101, 0x1ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6bae, 0x400, 0x2, 0x10, 0x1, 0x8, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0xb, @void, @value, @void, @value}, 0x50) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x1, 0x0, [@dev]}, 0x18) 501.641589ms ago: executing program 7 (id=7190): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @auto=[0x39, 0x34, 0x37, 0x63, 0x66, 0x65, 0x57, 0x37, 0x31, 0x63, 0x39, 0x39, 0x32, 0x0, 0x69, 0x66]}, &(0x7f0000000340)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x4, r4, r2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r5, 0x0, 0x4}, 0x18) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r6, r6, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x20000023896) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYRES64=r8, @ANYRESHEX=r10, @ANYRESDEC=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) r12 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8, 0x147bc0) fsetxattr$security_capability(r12, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x82}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x1000c3, 0x27ffc, 0xe21c, 0x19214, 0x19, "2b561a3c34fd0000001c00"}) 480.45647ms ago: executing program 7 (id=7191): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffff0d850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2, 0x1, 0x2066, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x15, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0xb}, @exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x52}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xdc, &(0x7f0000000240)=""/220, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x1, 0x6, 0xa}, {0x4, 0x4, 0x6, 0x2}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex=r3, r0, 0x15, 0x8, r1, @void, @value=r4, @void, @void, r2}, 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x187680, 0x0) 480.04579ms ago: executing program 5 (id=7192): socket$kcm(0x23, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x1ff, 0x0, "5f330000a90100f9"}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000000009"], 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20231e5ce77bdd4c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000280)=0x13) poll(&(0x7f0000000180)=[{r4, 0xc140}], 0x1, 0xe7f1) socket$packet(0x11, 0x2, 0x300) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0xa) 455.508242ms ago: executing program 7 (id=7193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000ba0000050000000900010073797a300000000078000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240187e00120800014000000000140003006e657464657673696d30"], 0xc0}}, 0x0) 435.307973ms ago: executing program 7 (id=7194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 414.468294ms ago: executing program 7 (id=7195): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009b32dd6a43e9acf1b265fe562e48cabb2c1a8a4001c821931fc805de3ff78e46773abe22cae23481cb8e0926ac6be37a4a1c1a806d00"/89], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0x200}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) pause() 414.199404ms ago: executing program 1 (id=7196): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) unshare(0x24040000) unshare(0x2c020400) 374.383846ms ago: executing program 1 (id=7199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="17000000000000"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2) 289.707802ms ago: executing program 1 (id=7203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtfilter={0x318, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2ec, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_SEL={0x2d4, 0x5, {0xb, 0x1, 0x1, 0x2, 0xa00, 0xf289, 0x5, 0x4, [{0x2, 0x2, 0x7fffffff, 0x7d4}, {0xa, 0x80000000, 0x4, 0x7}, {0x8, 0x1, 0x6, 0x6}, {0x9, 0xff, 0xfff, 0xffffffff}, {0x6, 0x5, 0xfffffff5, 0x1}, {0x101, 0x6, 0x3, 0x5}, {0x3b, 0x4, 0x258, 0x5}, {0x0, 0x4, 0x80000000, 0x8}, {0xf3, 0x0, 0x1, 0x6}, {0x8, 0x1f64ec3f, 0x473e630b, 0x9}, {0xc0, 0x3, 0x7, 0x5}, {0x7, 0xc, 0x6, 0x3}, {0x2, 0x3, 0x91, 0x6}, {0x7, 0x50, 0x9c13, 0x100}, {0x3, 0x0, 0x46b4, 0xffffff81}, {0x7fffffff, 0x0, 0xd7e2, 0xa659}, {0x1, 0xfffffff3, 0x7, 0x7}, {0x3ff, 0x9, 0xffffffff, 0x9}, {0x8, 0xfffffffe, 0x7fff, 0x5}, {0x5d, 0x7f, 0xffff, 0xa14a}, {0x4, 0x4, 0x7, 0x5fcbf1dc}, {0x4, 0xa5d95ea7, 0x9ff3, 0x1b3}, {0x6, 0x7, 0xff, 0x3}, {0x4, 0x100, 0x0, 0x9}, {0x5, 0xffffff00, 0x3ff, 0x6e2}, {0x0, 0x6, 0x79341835, 0x5}, {0x4, 0x4, 0x7, 0x9}, {0x2, 0x400, 0x3, 0x7}, {0x60, 0x1, 0x6, 0x2}, {0x7, 0x2, 0x6}, {0xe39, 0x7, 0x4763, 0x7a}, {0xffffff5c, 0x7, 0x1, 0xc}, {0x7f, 0x70, 0x6, 0xffffffff}, {0x0, 0x3, 0x4, 0x8000}, {0x3ff, 0x8, 0x9, 0x80000001}, {0xfffffffe, 0x1, 0x8, 0x63}, {0x3, 0x3c, 0x4, 0x8}, {0x3, 0x4, 0x0, 0x2}, {0x7fff, 0xffffff01, 0x1, 0x7}, {0x3, 0x2, 0x7fffffff, 0x7}, {0x6, 0x9, 0xffff, 0xe}, {0x14, 0x2176, 0x3, 0x9}, {0x1, 0x9, 0x1}, {0x10000, 0x8, 0x2, 0x10001}]}}]}}]}, 0x318}, 0x1, 0x0, 0x0, 0x80}, 0x800) 268.162713ms ago: executing program 6 (id=7204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000ba0000050000000900010073797a300000000078000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240187e00120800014000000000140003006e657464657673696d30"], 0xc0}}, 0x0) 267.613793ms ago: executing program 6 (id=7205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 250.252594ms ago: executing program 6 (id=7206): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffff0d850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2, 0x1, 0x2066, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x15, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0xb}, @exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x52}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xdc, &(0x7f0000000240)=""/220, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x1, 0x6, 0xa}, {0x4, 0x4, 0x6, 0x2}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex=r3, r0, 0x15, 0x8, r1, @void, @value=r4, @void, @void, r2}, 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x187680, 0x0) 236.716915ms ago: executing program 6 (id=7207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) (fail_nth: 1) 216.062987ms ago: executing program 1 (id=7208): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x600, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}}], 0x2, 0x0) 148.807931ms ago: executing program 1 (id=7209): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x400000000000}, 0x18) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = fsopen(&(0x7f0000000040)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000180)='ro\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 36.521748ms ago: executing program 8 (id=7210): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) unshare(0x24040000) unshare(0x2c020400) 26.299248ms ago: executing program 6 (id=7211): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e98263b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x20000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x9, 0x0, 0xc0000000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 3.15435ms ago: executing program 6 (id=7212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@const={0x1}, @struct={0x7, 0x3, 0x0, 0x4, 0x0, 0x5, [{0x1, 0x1, 0xfffffff9}, {0x6, 0x5, 0x7d}, {0x3, 0x3, 0x9}]}]}, {0x0, [0x61, 0x30, 0x30, 0x30, 0xfa5d2222cf65594a]}}, 0x0, 0x5b, 0x0, 0x1, 0x1adc, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x20, &(0x7f0000000240)={&(0x7f0000000b00)=""/4096, 0x1000, 0x0, &(0x7f0000000540)=""/99, 0x63}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'pim6reg1\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x11, 0x2, @broadcast}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 0s ago: executing program 8 (id=7213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="17000000000000"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2) kernel console output (not intermixed with test programs): 7][T19660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 340.214778][T19660] Call Trace: [ 340.214784][T19660] [ 340.214791][T19660] dump_stack_lvl+0xf2/0x150 [ 340.214816][T19660] dump_stack+0x15/0x1a [ 340.214834][T19660] should_fail_ex+0x24a/0x260 [ 340.214859][T19660] should_failslab+0x8f/0xb0 [ 340.214879][T19660] kmem_cache_alloc_noprof+0x52/0x320 [ 340.214902][T19660] ? mas_alloc_nodes+0x1e3/0x490 [ 340.214924][T19660] mas_alloc_nodes+0x1e3/0x490 [ 340.214945][T19660] mas_preallocate+0x44a/0x650 [ 340.215032][T19660] mmap_region+0x96d/0x1620 [ 340.215075][T19660] do_mmap+0x98a/0xc30 [ 340.215097][T19660] vm_mmap_pgoff+0x16d/0x2d0 [ 340.215119][T19660] ksys_mmap_pgoff+0xd0/0x330 [ 340.215137][T19660] ? fpregs_assert_state_consistent+0x83/0xa0 [ 340.215166][T19660] x64_sys_call+0x1940/0x2dc0 [ 340.215188][T19660] do_syscall_64+0xc9/0x1c0 [ 340.215207][T19660] ? clear_bhb_loop+0x55/0xb0 [ 340.215228][T19660] ? clear_bhb_loop+0x55/0xb0 [ 340.215250][T19660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.215274][T19660] RIP: 0033:0x7f851ce0ce23 [ 340.215288][T19660] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 340.215303][T19660] RSP: 002b:00007f851b476e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 340.215320][T19660] RAX: ffffffffffffffda RBX: 0000000000000588 RCX: 00007f851ce0ce23 [ 340.215331][T19660] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 340.215343][T19660] RBP: 0000400000000b42 R08: 00000000ffffffff R09: 0000000000000000 [ 340.215354][T19660] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 340.215365][T19660] R13: 00007f851b476ef0 R14: 00007f851b476eb0 R15: 0000400000000200 [ 340.215381][T19660] [ 340.410228][ T6043] tipc: Node number set to 4269801488 [ 340.443442][T19667] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6115'. [ 340.454573][T19667] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (183) [ 340.907714][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6124'. [ 340.916931][T19691] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 340.938812][T19691] lo speed is unknown, defaulting to 1000 [ 340.987002][T19692] vlan0: entered allmulticast mode [ 340.992231][T19692] bridge_slave_0: entered allmulticast mode [ 340.999710][T19692] bridge_slave_0: left allmulticast mode [ 341.140846][T19705] pimreg: entered allmulticast mode [ 341.150672][T19705] pimreg: left allmulticast mode [ 341.343075][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 341.343086][ T29] audit: type=1326 audit(4294968134.787:31683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19718 comm="syz.7.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda702cde9 code=0x7ffc0000 [ 341.373064][ T29] audit: type=1326 audit(4294968134.787:31684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19718 comm="syz.7.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbda702cde9 code=0x7ffc0000 [ 341.396868][ T29] audit: type=1326 audit(4294968134.787:31685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19718 comm="syz.7.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda702cde9 code=0x7ffc0000 [ 341.420465][ T29] audit: type=1326 audit(4294968134.787:31686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19718 comm="syz.7.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda702cde9 code=0x7ffc0000 [ 341.444117][ T29] audit: type=1326 audit(4294968134.787:31687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19718 comm="syz.7.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbda702cde9 code=0x7ffc0000 [ 341.467859][ T29] audit: type=1326 audit(4294968134.787:31688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19718 comm="syz.7.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda702cde9 code=0x7ffc0000 [ 341.484736][T19721] netlink: 300 bytes leftover after parsing attributes in process `syz.1.6137'. [ 341.491521][ T29] audit: type=1326 audit(4294968134.787:31689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19718 comm="syz.7.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbda702cde9 code=0x7ffc0000 [ 341.524282][ T29] audit: type=1326 audit(4294968134.787:31690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19718 comm="syz.7.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda702cde9 code=0x7ffc0000 [ 341.547859][ T29] audit: type=1326 audit(4294968134.787:31691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19718 comm="syz.7.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda702cde9 code=0x7ffc0000 [ 341.571429][ T29] audit: type=1326 audit(4294968134.787:31692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19718 comm="syz.7.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbda702cde9 code=0x7ffc0000 [ 341.631128][T19729] netlink: 'syz.1.6140': attribute type 1 has an invalid length. [ 341.639716][T19729] xt_hashlimit: max too large, truncated to 1048576 [ 341.648937][T19729] netlink: 'syz.1.6140': attribute type 21 has an invalid length. [ 341.656953][T19729] netlink: 'syz.1.6140': attribute type 1 has an invalid length. [ 341.792919][T19736] lo speed is unknown, defaulting to 1000 [ 341.859066][T19736] chnl_net:caif_netlink_parms(): no params data found [ 341.892355][T19736] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.899440][T19736] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.906722][T19736] bridge_slave_0: entered allmulticast mode [ 341.913293][T19736] bridge_slave_0: entered promiscuous mode [ 341.919960][T19736] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.927029][T19736] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.934214][T19736] bridge_slave_1: entered allmulticast mode [ 341.940552][T19736] bridge_slave_1: entered promiscuous mode [ 341.956798][T19736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.967543][T19736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.985387][T19736] team0: Port device team_slave_0 added [ 341.992353][T19736] team0: Port device team_slave_1 added [ 342.007425][T19736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.014465][T19736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.040355][T19736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.051594][T19736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.058549][T19736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.084607][T19736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.117560][T19736] hsr_slave_0: entered promiscuous mode [ 342.125293][T19736] hsr_slave_1: entered promiscuous mode [ 342.132950][T19736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.140922][T19736] Cannot create hsr debugfs directory [ 342.274602][T19736] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.290854][T19760] __nla_validate_parse: 3 callbacks suppressed [ 342.290878][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6148'. [ 342.339191][T19736] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.430041][T19736] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.472636][T19736] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.547441][T19736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.557284][T19736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.566138][T19736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.573271][T19802] FAULT_INJECTION: forcing a failure. [ 342.573271][T19802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.575230][T19736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.586356][T19802] CPU: 1 UID: 0 PID: 19802 Comm: syz.5.6161 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 342.586379][T19802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 342.586425][T19802] Call Trace: [ 342.586431][T19802] [ 342.586437][T19802] dump_stack_lvl+0xf2/0x150 [ 342.586463][T19802] dump_stack+0x15/0x1a [ 342.586481][T19802] should_fail_ex+0x24a/0x260 [ 342.586583][T19802] should_fail+0xb/0x10 [ 342.586608][T19802] should_fail_usercopy+0x1a/0x20 [ 342.586704][T19802] strncpy_from_user+0x25/0x210 [ 342.586726][T19802] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 342.586816][T19802] ? getname_flags+0x81/0x3b0 [ 342.586841][T19802] getname_flags+0xb0/0x3b0 [ 342.586925][T19802] __x64_sys_renameat2+0x6e/0xa0 [ 342.586949][T19802] x64_sys_call+0x1bf1/0x2dc0 [ 342.587004][T19802] do_syscall_64+0xc9/0x1c0 [ 342.587025][T19802] ? clear_bhb_loop+0x55/0xb0 [ 342.587048][T19802] ? clear_bhb_loop+0x55/0xb0 [ 342.587071][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.587117][T19802] RIP: 0033:0x7f5ca947cde9 [ 342.587132][T19802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.587148][T19802] RSP: 002b:00007f5ca7ae1038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 342.587165][T19802] RAX: ffffffffffffffda RBX: 00007f5ca9695fa0 RCX: 00007f5ca947cde9 [ 342.587176][T19802] RDX: 0000000000000003 RSI: 0000400000000380 RDI: 0000000000000003 [ 342.587264][T19802] RBP: 00007f5ca7ae1090 R08: 0000000000000000 R09: 0000000000000000 [ 342.587343][T19802] R10: 0000400000000200 R11: 0000000000000246 R12: 0000000000000001 [ 342.587427][T19802] R13: 0000000000000000 R14: 00007f5ca9695fa0 R15: 00007fff31c3cc08 [ 342.587443][T19802] [ 342.802167][T19736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.816175][T19736] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.827615][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.834753][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.859580][T19736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 342.870058][T19736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.885613][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.892779][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.945790][T19736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.004454][T19736] veth0_vlan: entered promiscuous mode [ 343.024953][T19736] veth1_vlan: entered promiscuous mode [ 343.046103][T19736] veth0_macvtap: entered promiscuous mode [ 343.057031][T19736] veth1_macvtap: entered promiscuous mode [ 343.074901][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.085440][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.095307][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.105882][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.115748][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.126336][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.136407][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.147142][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.157161][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.167811][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.177780][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.188217][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.198069][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.208526][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.219833][T19736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.228308][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.238849][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.248797][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.259291][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.269221][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.279668][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.289516][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.299967][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.309806][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.320256][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.330359][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.340840][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.351005][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.361462][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.377866][T19736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.391457][T19831] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 343.392317][T19736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.399643][T19831] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 343.408360][T19736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.408390][T19736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.434372][T19736] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.450039][T19837] tipc: Enabling of bearer rejected, already enabled [ 343.461647][T19837] 9pnet_fd: Insufficient options for proto=fd [ 343.576943][T19846] veth0: entered promiscuous mode [ 343.582352][T19846] macvtap1: entered promiscuous mode [ 343.593727][T19846] veth0: left promiscuous mode [ 343.618459][T19852] netlink: 88 bytes leftover after parsing attributes in process `+}[@'. [ 343.672604][T19858] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 343.912967][T19852] bond0: (slave bond1): Error -95 calling ndo_bpf [ 343.925352][T19877] tipc: Started in network mode [ 343.930302][T19877] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 343.939262][T19877] tipc: Enabling of bearer rejected, failed to enable media [ 343.950747][T19877] 9pnet_fd: Insufficient options for proto=fd [ 344.227279][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6189'. [ 344.468191][T19900] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6194'. [ 344.501586][T19900] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6194'. [ 344.538541][T19902] tipc: Enabling of bearer rejected, already enabled [ 344.554506][T19902] 9pnet_fd: Insufficient options for proto=fd [ 344.675816][T19926] IPv6: Can't replace route, no match found [ 344.682899][T19926] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 344.744412][T19936] tipc: Enabling of bearer rejected, already enabled [ 344.752326][T19936] 9pnet_fd: Insufficient options for proto=fd [ 344.782588][T19940] syz.6.6212 (19940): attempted to duplicate a private mapping with mremap. This is not supported. [ 345.168244][T19953] lo speed is unknown, defaulting to 1000 [ 345.174982][T19953] lo speed is unknown, defaulting to 1000 [ 345.181179][T19953] lo speed is unknown, defaulting to 1000 [ 345.228298][T19953] infiniband sz1: set down [ 345.232854][T19953] infiniband sz1: added lo [ 345.239989][ T6038] lo speed is unknown, defaulting to 1000 [ 345.605554][T19964] FAULT_INJECTION: forcing a failure. [ 345.605554][T19964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.618651][T19964] CPU: 0 UID: 0 PID: 19964 Comm: syz.5.6219 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 345.618675][T19964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 345.618749][T19964] Call Trace: [ 345.618755][T19964] [ 345.618763][T19964] dump_stack_lvl+0xf2/0x150 [ 345.618808][T19964] dump_stack+0x15/0x1a [ 345.618827][T19964] should_fail_ex+0x24a/0x260 [ 345.618868][T19964] should_fail+0xb/0x10 [ 345.618891][T19964] should_fail_usercopy+0x1a/0x20 [ 345.618909][T19964] _copy_from_iter+0xd5/0xd00 [ 345.618924][T19964] ? kmalloc_reserve+0x16e/0x190 [ 345.618961][T19964] ? __build_skb_around+0x196/0x1f0 [ 345.618980][T19964] ? __alloc_skb+0x21f/0x310 [ 345.619001][T19964] ? __virt_addr_valid+0x1ed/0x250 [ 345.619024][T19964] ? __check_object_size+0x364/0x520 [ 345.619062][T19964] netlink_sendmsg+0x460/0x6e0 [ 345.619124][T19964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.619219][T19964] __sock_sendmsg+0x140/0x180 [ 345.619236][T19964] ____sys_sendmsg+0x312/0x410 [ 345.619260][T19964] __sys_sendmsg+0x19d/0x230 [ 345.619293][T19964] __x64_sys_sendmsg+0x46/0x50 [ 345.619372][T19964] x64_sys_call+0x2734/0x2dc0 [ 345.619395][T19964] do_syscall_64+0xc9/0x1c0 [ 345.619418][T19964] ? clear_bhb_loop+0x55/0xb0 [ 345.619443][T19964] ? clear_bhb_loop+0x55/0xb0 [ 345.619511][T19964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.619534][T19964] RIP: 0033:0x7f5ca947cde9 [ 345.619549][T19964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.619620][T19964] RSP: 002b:00007f5ca7ae1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.619635][T19964] RAX: ffffffffffffffda RBX: 00007f5ca9695fa0 RCX: 00007f5ca947cde9 [ 345.619646][T19964] RDX: 0000000000000000 RSI: 00004000000037c0 RDI: 0000000000000006 [ 345.619656][T19964] RBP: 00007f5ca7ae1090 R08: 0000000000000000 R09: 0000000000000000 [ 345.619666][T19964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.619676][T19964] R13: 0000000000000000 R14: 00007f5ca9695fa0 R15: 00007fff31c3cc08 [ 345.619766][T19964] [ 345.973067][T19953] RDS/IB: sz1: added [ 345.977099][T19953] smc: adding ib device sz1 with port count 1 [ 345.983362][T19953] smc: ib device sz1 port 1 has pnetid [ 345.989490][T19953] lo speed is unknown, defaulting to 1000 [ 346.020720][T19953] lo speed is unknown, defaulting to 1000 [ 346.052213][T19953] lo speed is unknown, defaulting to 1000 [ 346.083836][T19953] lo speed is unknown, defaulting to 1000 [ 346.115025][T19953] lo speed is unknown, defaulting to 1000 [ 346.146020][T19953] lo speed is unknown, defaulting to 1000 [ 346.177420][T19953] lo speed is unknown, defaulting to 1000 [ 346.210114][T19953] lo speed is unknown, defaulting to 1000 [ 346.240600][T19953] lo speed is unknown, defaulting to 1000 [ 346.272500][T19953] lo speed is unknown, defaulting to 1000 [ 346.303918][T19953] lo speed is unknown, defaulting to 1000 [ 346.336124][T19953] lo speed is unknown, defaulting to 1000 [ 346.368764][T19953] lo speed is unknown, defaulting to 1000 [ 346.399854][T19953] lo speed is unknown, defaulting to 1000 [ 346.431921][ T6038] lo speed is unknown, defaulting to 1000 [ 346.458233][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 346.458250][ T29] audit: type=1326 audit(4294968139.397:32105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19966 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5ca947b89f code=0x7ffc0000 [ 346.487888][ T29] audit: type=1326 audit(4294968139.407:32106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19966 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5ca947ce77 code=0x7ffc0000 [ 346.511367][ T29] audit: type=1326 audit(4294968139.407:32107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19966 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ca947b750 code=0x7ffc0000 [ 346.535184][ T29] audit: type=1326 audit(4294968139.407:32108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19966 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5ca947ba4a code=0x7ffc0000 [ 346.558711][ T29] audit: type=1326 audit(4294968139.407:32109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19966 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca947cde9 code=0x7ffc0000 [ 346.582321][ T29] audit: type=1326 audit(4294968139.407:32110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19966 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca947cde9 code=0x7ffc0000 [ 346.605915][ T29] audit: type=1326 audit(4294968139.877:32111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19966 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ca947cde9 code=0x7ffc0000 [ 346.629562][ T29] audit: type=1326 audit(4294968139.877:32112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19966 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca947cde9 code=0x7ffc0000 [ 346.653236][ T29] audit: type=1326 audit(4294968139.877:32113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19966 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca947cde9 code=0x7ffc0000 [ 346.676840][ T29] audit: type=1326 audit(4294968139.877:32114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19966 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ca947cde9 code=0x7ffc0000 [ 346.716759][T19980] FAULT_INJECTION: forcing a failure. [ 346.716759][T19980] name failslab, interval 1, probability 0, space 0, times 0 [ 346.729447][T19980] CPU: 1 UID: 0 PID: 19980 Comm: syz.1.6226 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 346.729471][T19980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 346.729482][T19980] Call Trace: [ 346.729488][T19980] [ 346.729496][T19980] dump_stack_lvl+0xf2/0x150 [ 346.729519][T19980] dump_stack+0x15/0x1a [ 346.729536][T19980] should_fail_ex+0x24a/0x260 [ 346.729561][T19980] should_failslab+0x8f/0xb0 [ 346.729580][T19980] kmem_cache_alloc_noprof+0x52/0x320 [ 346.729606][T19980] ? mas_alloc_nodes+0x1e3/0x490 [ 346.729629][T19980] mas_alloc_nodes+0x1e3/0x490 [ 346.729650][T19980] mas_preallocate+0x44a/0x650 [ 346.729671][T19980] mmap_region+0x96d/0x1620 [ 346.729710][T19980] do_mmap+0x98a/0xc30 [ 346.729731][T19980] vm_mmap_pgoff+0x16d/0x2d0 [ 346.729755][T19980] ksys_mmap_pgoff+0xd0/0x330 [ 346.729776][T19980] ? fpregs_assert_state_consistent+0x83/0xa0 [ 346.729807][T19980] x64_sys_call+0x1940/0x2dc0 [ 346.729828][T19980] do_syscall_64+0xc9/0x1c0 [ 346.729846][T19980] ? clear_bhb_loop+0x55/0xb0 [ 346.729869][T19980] ? clear_bhb_loop+0x55/0xb0 [ 346.729892][T19980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.729912][T19980] RIP: 0033:0x7f717ad0ce23 [ 346.729924][T19980] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 346.729937][T19980] RSP: 002b:00007f7179370e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 346.729955][T19980] RAX: ffffffffffffffda RBX: 0000000000000448 RCX: 00007f717ad0ce23 [ 346.729965][T19980] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 346.729974][T19980] RBP: 0000400000001582 R08: 00000000ffffffff R09: 0000000000000000 [ 346.729984][T19980] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 346.729993][T19980] R13: 00007f7179370ef0 R14: 00007f7179370eb0 R15: 0000400000000880 [ 346.730006][T19980] [ 346.996965][T19987] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6228'. [ 347.197585][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6245'. [ 347.768790][T20056] syz_tun: entered allmulticast mode [ 347.776286][T20056] syz_tun: left allmulticast mode [ 347.781833][T20056] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6257'. [ 347.902811][T20068] netlink: 88 bytes leftover after parsing attributes in process `+}[@'. [ 348.169197][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6260'. [ 348.204779][T20088] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6270'. [ 348.462382][T20105] FAULT_INJECTION: forcing a failure. [ 348.462382][T20105] name failslab, interval 1, probability 0, space 0, times 0 [ 348.475049][T20105] CPU: 0 UID: 0 PID: 20105 Comm: syz.7.6279 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 348.475073][T20105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 348.475084][T20105] Call Trace: [ 348.475091][T20105] [ 348.475099][T20105] dump_stack_lvl+0xf2/0x150 [ 348.475172][T20105] dump_stack+0x15/0x1a [ 348.475248][T20105] should_fail_ex+0x24a/0x260 [ 348.475277][T20105] should_failslab+0x8f/0xb0 [ 348.475297][T20105] kmem_cache_alloc_noprof+0x52/0x320 [ 348.475322][T20105] ? getname_flags+0x81/0x3b0 [ 348.475401][T20105] getname_flags+0x81/0x3b0 [ 348.475424][T20105] getname+0x17/0x20 [ 348.475443][T20105] __se_sys_quotactl+0x15b/0x660 [ 348.475510][T20105] __x64_sys_quotactl+0x55/0x70 [ 348.475539][T20105] x64_sys_call+0x826/0x2dc0 [ 348.475559][T20105] do_syscall_64+0xc9/0x1c0 [ 348.475645][T20105] ? clear_bhb_loop+0x55/0xb0 [ 348.475670][T20105] ? clear_bhb_loop+0x55/0xb0 [ 348.475692][T20105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.475713][T20105] RIP: 0033:0x7fbda702cde9 [ 348.475725][T20105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.475787][T20105] RSP: 002b:00007fbda5697038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 348.475802][T20105] RAX: ffffffffffffffda RBX: 00007fbda7245fa0 RCX: 00007fbda702cde9 [ 348.475812][T20105] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: ffffffff80000801 [ 348.475821][T20105] RBP: 00007fbda5697090 R08: 0000000000000000 R09: 0000000000000000 [ 348.475831][T20105] R10: 0000400000000100 R11: 0000000000000246 R12: 0000000000000001 [ 348.475842][T20105] R13: 0000000000000000 R14: 00007fbda7245fa0 R15: 00007fff05027318 [ 348.475859][T20105] [ 348.698033][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6281'. [ 348.724241][T20112] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6282'. [ 348.790193][T20126] lo speed is unknown, defaulting to 1000 [ 348.821645][T20126] lo speed is unknown, defaulting to 1000 [ 349.435040][T20155] bond_slave_1: entered promiscuous mode [ 349.442172][T20155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6295'. [ 349.455222][T20155] bond0: (slave bond_slave_1): Releasing backup interface [ 349.464341][T20155] bond_slave_1 (unregistering): left promiscuous mode [ 349.507580][T20165] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 349.525000][T20165] program syz.5.6301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.904747][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6315'. [ 349.975538][T20223] FAULT_INJECTION: forcing a failure. [ 349.975538][T20223] name failslab, interval 1, probability 0, space 0, times 0 [ 349.988225][T20223] CPU: 1 UID: 0 PID: 20223 Comm: syz.6.6323 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 349.988288][T20223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 349.988297][T20223] Call Trace: [ 349.988315][T20223] [ 349.988339][T20223] dump_stack_lvl+0xf2/0x150 [ 349.988362][T20223] dump_stack+0x15/0x1a [ 349.988378][T20223] should_fail_ex+0x24a/0x260 [ 349.988403][T20223] ? v9fs_mount+0x53/0x570 [ 349.988423][T20223] should_failslab+0x8f/0xb0 [ 349.988502][T20223] __kmalloc_cache_noprof+0x4e/0x320 [ 349.988595][T20223] v9fs_mount+0x53/0x570 [ 349.988617][T20223] ? __pfx_v9fs_mount+0x10/0x10 [ 349.988690][T20223] legacy_get_tree+0x77/0xd0 [ 349.988713][T20223] vfs_get_tree+0x56/0x1e0 [ 349.988731][T20223] do_new_mount+0x227/0x690 [ 349.988810][T20223] path_mount+0x49b/0xb30 [ 349.988829][T20223] __se_sys_mount+0x27f/0x2d0 [ 349.988920][T20223] __x64_sys_mount+0x67/0x80 [ 349.988941][T20223] x64_sys_call+0x2c84/0x2dc0 [ 349.988961][T20223] do_syscall_64+0xc9/0x1c0 [ 349.988981][T20223] ? clear_bhb_loop+0x55/0xb0 [ 349.989001][T20223] ? clear_bhb_loop+0x55/0xb0 [ 349.989067][T20223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.989175][T20223] RIP: 0033:0x7f62c9d0cde9 [ 349.989189][T20223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.989258][T20223] RSP: 002b:00007f62c8377038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 349.989282][T20223] RAX: ffffffffffffffda RBX: 00007f62c9f25fa0 RCX: 00007f62c9d0cde9 [ 349.989293][T20223] RDX: 00004000000002c0 RSI: 0000400000000080 RDI: 0000000000000000 [ 349.989303][T20223] RBP: 00007f62c8377090 R08: 0000400000000400 R09: 0000000000000000 [ 349.989315][T20223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.989326][T20223] R13: 0000000000000000 R14: 00007f62c9f25fa0 R15: 00007ffe7c45e508 [ 349.989344][T20223] [ 349.993952][T20225] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 350.033090][T20230] atomic_op ffff8881311b4528 conn xmit_atomic 0000000000000000 [ 350.080535][T20231] block device autoloading is deprecated and will be removed. [ 350.102405][T20230] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6326'. [ 350.152791][T20226] block device autoloading is deprecated and will be removed. [ 350.265761][T20240] syz_tun: entered allmulticast mode [ 350.290867][T20240] syz_tun: left allmulticast mode [ 350.306978][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6331'. [ 350.568436][T20286] syz_tun: entered allmulticast mode [ 350.726302][T20316] tipc: Enabling of bearer rejected, already enabled [ 350.734687][T20316] 9pnet_fd: Insufficient options for proto=fd [ 350.741129][T20304] Falling back ldisc for ttyS3. [ 350.845971][T20328] pim6reg1: entered promiscuous mode [ 350.851396][T20328] pim6reg1: entered allmulticast mode [ 350.860877][T20321] Falling back ldisc for ttyS3. [ 351.205541][T20384] tipc: Enabling of bearer rejected, already enabled [ 351.221118][T20384] 9pnet_fd: Insufficient options for proto=fd [ 351.257530][T20394] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 351.265850][T20394] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 351.413096][T20422] tipc: Enabling of bearer rejected, already enabled [ 351.423466][T20422] 9pnet_fd: Insufficient options for proto=fd [ 351.464123][T20431] tipc: Enabling of bearer rejected, already enabled [ 351.472320][T20431] 9pnet_fd: Insufficient options for proto=fd [ 351.479539][ T29] kauditd_printk_skb: 894 callbacks suppressed [ 351.479553][ T29] audit: type=1326 audit(4294968144.917:33009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.8.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263281cde9 code=0x7ffc0000 [ 351.524261][ T29] audit: type=1326 audit(4294968144.917:33010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.8.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f263281cde9 code=0x7ffc0000 [ 351.547987][ T29] audit: type=1326 audit(4294968144.917:33011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.8.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263281cde9 code=0x7ffc0000 [ 351.571632][ T29] audit: type=1326 audit(4294968144.917:33012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.8.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f263281cde9 code=0x7ffc0000 [ 351.595411][ T29] audit: type=1326 audit(4294968144.917:33013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.8.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263281cde9 code=0x7ffc0000 [ 351.619203][ T29] audit: type=1326 audit(4294968144.917:33014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.8.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f263281cde9 code=0x7ffc0000 [ 351.642832][ T29] audit: type=1326 audit(4294968144.927:33015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.8.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263281cde9 code=0x7ffc0000 [ 351.666718][ T29] audit: type=1326 audit(4294968144.927:33016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.8.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f263281cde9 code=0x7ffc0000 [ 351.690256][ T29] audit: type=1326 audit(4294968144.927:33017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.8.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263281cde9 code=0x7ffc0000 [ 351.713846][ T29] audit: type=1326 audit(4294968144.927:33018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.8.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f263281cde9 code=0x7ffc0000 [ 351.784671][T20454] tipc: Enabling of bearer rejected, already enabled [ 351.827290][T20454] 9pnet_fd: Insufficient options for proto=fd [ 351.844819][T20461] SELinux: security_context_str_to_sid () failed with errno=-22 [ 352.263866][T20485] tipc: Enabling of bearer rejected, already enabled [ 352.266671][T20486] SELinux: security_context_str_to_sid () failed with errno=-22 [ 352.273868][T20485] 9pnet_fd: Insufficient options for proto=fd [ 352.359370][T20490] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 352.367597][T20490] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 352.388751][T20492] lo speed is unknown, defaulting to 1000 [ 352.445264][T20492] lo speed is unknown, defaulting to 1000 [ 352.880540][T20518] SELinux: security_context_str_to_sid () failed with errno=-22 [ 353.008559][T20522] tipc: Enabling of bearer rejected, already enabled [ 353.041082][T20522] 9pnet_fd: Insufficient options for proto=fd [ 353.409036][T20546] __nla_validate_parse: 10 callbacks suppressed [ 353.409051][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6452'. [ 353.443967][T20554] tipc: Enabled bearer , priority 10 [ 353.450600][T20554] 9pnet_fd: Insufficient options for proto=fd [ 353.459067][T20556] tipc: Enabling of bearer rejected, already enabled [ 353.467501][T20556] 9pnet_fd: Insufficient options for proto=fd [ 353.633549][T20574] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6463'. [ 353.679375][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6464'. [ 353.706396][T20586] tipc: Enabling of bearer rejected, already enabled [ 353.714329][T20586] 9pnet_fd: Insufficient options for proto=fd [ 353.857825][T20610] SELinux: security_context_str_to_sid () failed with errno=-22 [ 353.884833][T20614] tipc: Enabling of bearer rejected, already enabled [ 353.892984][T20614] 9pnet_fd: Insufficient options for proto=fd [ 353.987888][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6488'. [ 353.997118][T20630] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 354.022841][T20630] lo speed is unknown, defaulting to 1000 [ 354.055374][T20637] SELinux: security_context_str_to_sid () failed with errno=-22 [ 354.063523][T20630] lo speed is unknown, defaulting to 1000 [ 354.082568][T20638] vlan2: entered allmulticast mode [ 354.122584][T20644] tipc: Enabling of bearer rejected, already enabled [ 354.143794][T20644] 9pnet_fd: Insufficient options for proto=fd [ 354.425941][T20670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6503'. [ 354.440700][ T6031] tipc: Node number set to 4269801488 [ 354.595714][T20678] tipc: Enabling of bearer rejected, already enabled [ 354.603710][T20678] 9pnet_fd: Insufficient options for proto=fd [ 354.682167][T20686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6511'. [ 355.022940][T20680] block device autoloading is deprecated and will be removed. [ 355.098961][T20695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6522'. [ 355.152737][T20705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6517'. [ 355.318025][T20713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6521'. [ 355.392684][T20728] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 355.395681][T20729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6525'. [ 355.774926][T20768] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 355.814676][T20772] tipc: Enabling of bearer rejected, already enabled [ 355.832612][T20772] 9pnet_fd: Insufficient options for proto=fd [ 355.891399][T20779] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (183) [ 356.100089][T20797] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 356.144258][T20799] tipc: Enabling of bearer rejected, already enabled [ 356.152161][T20799] 9pnet_fd: Insufficient options for proto=fd [ 356.355703][T20824] tipc: Enabling of bearer rejected, already enabled [ 356.364054][T20824] 9pnet_fd: Insufficient options for proto=fd [ 356.411502][T20832] vlan2: entered allmulticast mode [ 356.489493][ T29] kauditd_printk_skb: 959 callbacks suppressed [ 356.489508][ T29] audit: type=1326 audit(4294968149.927:33978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.1.6576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717ad0cde9 code=0x7ffc0000 [ 356.519346][ T29] audit: type=1326 audit(4294968149.927:33979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.1.6576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717ad0cde9 code=0x7ffc0000 [ 356.557150][T20844] FAULT_INJECTION: forcing a failure. [ 356.557150][T20844] name failslab, interval 1, probability 0, space 0, times 0 [ 356.569857][T20844] CPU: 0 UID: 0 PID: 20844 Comm: syz.7.6577 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 356.569880][T20844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 356.569890][T20844] Call Trace: [ 356.569894][T20844] [ 356.569900][T20844] dump_stack_lvl+0xf2/0x150 [ 356.569924][T20844] dump_stack+0x15/0x1a [ 356.569942][T20844] should_fail_ex+0x24a/0x260 [ 356.569968][T20844] should_failslab+0x8f/0xb0 [ 356.569987][T20844] kmem_cache_alloc_noprof+0x52/0x320 [ 356.570010][T20844] ? vm_area_alloc+0xac/0x130 [ 356.570028][T20844] vm_area_alloc+0xac/0x130 [ 356.570047][T20844] mmap_region+0x819/0x1620 [ 356.570087][T20844] do_mmap+0x98a/0xc30 [ 356.570111][T20844] vm_mmap_pgoff+0x16d/0x2d0 [ 356.570134][T20844] ksys_mmap_pgoff+0xd0/0x330 [ 356.570153][T20844] ? fpregs_assert_state_consistent+0x83/0xa0 [ 356.570183][T20844] x64_sys_call+0x1940/0x2dc0 [ 356.570205][T20844] do_syscall_64+0xc9/0x1c0 [ 356.570225][T20844] ? clear_bhb_loop+0x55/0xb0 [ 356.570246][T20844] ? clear_bhb_loop+0x55/0xb0 [ 356.570266][T20844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.570285][T20844] RIP: 0033:0x7fbda702ce23 [ 356.570298][T20844] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 356.570313][T20844] RSP: 002b:00007fbda5696e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 356.570329][T20844] RAX: ffffffffffffffda RBX: 0000000000000561 RCX: 00007fbda702ce23 [ 356.570340][T20844] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 356.570350][T20844] RBP: 0000400000000f82 R08: 00000000ffffffff R09: 0000000000000000 [ 356.570361][T20844] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 356.570371][T20844] R13: 00007fbda5696ef0 R14: 00007fbda5696eb0 R15: 0000400000000140 [ 356.570386][T20844] [ 356.760852][ T29] audit: type=1326 audit(4294968149.967:33980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.1.6576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f717ad0cde9 code=0x7ffc0000 [ 356.784486][ T29] audit: type=1326 audit(4294968149.967:33981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.1.6576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717ad0cde9 code=0x7ffc0000 [ 356.786132][T20847] Process accounting resumed [ 356.808119][ T29] audit: type=1326 audit(4294968149.967:33982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.1.6576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717ad0cde9 code=0x7ffc0000 [ 356.819366][T20847] Process accounting resumed [ 356.836326][ T29] audit: type=1326 audit(4294968149.967:33983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.1.6576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f717ad0cde9 code=0x7ffc0000 [ 356.864500][ T29] audit: type=1326 audit(4294968149.967:33984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.1.6576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717ad0cde9 code=0x7ffc0000 [ 356.888179][ T29] audit: type=1326 audit(4294968149.967:33985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.1.6576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717ad0cde9 code=0x7ffc0000 [ 356.911949][ T29] audit: type=1326 audit(4294968149.967:33986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.1.6576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f717ad0cde9 code=0x7ffc0000 [ 356.935729][ T29] audit: type=1326 audit(4294968149.967:33987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20837 comm="syz.1.6576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f717ad0ce23 code=0x7ffc0000 [ 356.943004][T20845] FAULT_INJECTION: forcing a failure. [ 356.943004][T20845] name failslab, interval 1, probability 0, space 0, times 0 [ 356.971767][T20845] CPU: 0 UID: 0 PID: 20845 Comm: syz.6.6578 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 356.971862][T20845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 356.971872][T20845] Call Trace: [ 356.971879][T20845] [ 356.971887][T20845] dump_stack_lvl+0xf2/0x150 [ 356.971913][T20845] dump_stack+0x15/0x1a [ 356.971931][T20845] should_fail_ex+0x24a/0x260 [ 356.971990][T20845] should_failslab+0x8f/0xb0 [ 356.972013][T20845] __kmalloc_noprof+0xab/0x3f0 [ 356.972040][T20845] ? security_prepare_creds+0x53/0x120 [ 356.972058][T20845] security_prepare_creds+0x53/0x120 [ 356.972075][T20845] prepare_kernel_cred+0x2c0/0x650 [ 356.972171][T20845] _request_firmware+0x2c7/0xa00 [ 356.972267][T20845] ? avc_has_perm_noaudit+0x1cc/0x210 [ 356.972290][T20845] ? rpm_resume+0x655/0xd00 [ 356.972363][T20845] ? __rcu_read_unlock+0x4e/0x70 [ 356.972389][T20845] request_firmware+0x36/0x50 [ 356.972410][T20845] devlink_compat_flash_update+0xaf/0x1b0 [ 356.972457][T20845] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 356.972487][T20845] dev_ethtool+0x138b/0x14c0 [ 356.972506][T20845] ? __rcu_read_unlock+0x4e/0x70 [ 356.972524][T20845] dev_ioctl+0x854/0xab0 [ 356.972674][T20845] sock_do_ioctl+0x11c/0x260 [ 356.972730][T20845] sock_ioctl+0x40f/0x600 [ 356.972756][T20845] ? __pfx_sock_ioctl+0x10/0x10 [ 356.972798][T20845] __se_sys_ioctl+0xc9/0x140 [ 356.972815][T20845] __x64_sys_ioctl+0x43/0x50 [ 356.972888][T20845] x64_sys_call+0x1690/0x2dc0 [ 356.972909][T20845] do_syscall_64+0xc9/0x1c0 [ 356.972928][T20845] ? clear_bhb_loop+0x55/0xb0 [ 356.972999][T20845] ? clear_bhb_loop+0x55/0xb0 [ 356.973022][T20845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.973067][T20845] RIP: 0033:0x7f62c9d0cde9 [ 356.973141][T20845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.973156][T20845] RSP: 002b:00007f62c8377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.973174][T20845] RAX: ffffffffffffffda RBX: 00007f62c9f25fa0 RCX: 00007f62c9d0cde9 [ 356.973274][T20845] RDX: 0000400000000280 RSI: 0000000000008946 RDI: 0000000000000005 [ 356.973286][T20845] RBP: 00007f62c8377090 R08: 0000000000000000 R09: 0000000000000000 [ 356.973297][T20845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.973308][T20845] R13: 0000000000000000 R14: 00007f62c9f25fa0 R15: 00007ffe7c45e508 [ 356.973323][T20845] [ 357.286227][T20860] tipc: Enabling of bearer rejected, already enabled [ 357.315519][T20860] 9pnet_fd: Insufficient options for proto=fd [ 357.396586][T20874] SELinux: security_context_str_to_sid () failed with errno=-22 [ 357.550606][T20900] tipc: Enabling of bearer rejected, already enabled [ 357.563423][T20900] 9pnet_fd: Insufficient options for proto=fd [ 357.901990][T20929] tipc: Enabling of bearer rejected, already enabled [ 357.909852][T20929] 9pnet_fd: Insufficient options for proto=fd [ 358.363318][T20952] tipc: Enabling of bearer rejected, already enabled [ 358.372075][T20952] 9pnet_fd: Insufficient options for proto=fd [ 358.393901][T20957] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 358.402243][T20957] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 358.435297][T20964] __nla_validate_parse: 15 callbacks suppressed [ 358.435309][T20964] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6632'. [ 358.454141][T20965] pim6reg1: entered promiscuous mode [ 358.459562][T20965] pim6reg1: entered allmulticast mode [ 358.604829][T20977] tipc: Enabling of bearer rejected, already enabled [ 358.615204][T20977] syzkaller1: entered promiscuous mode [ 358.620781][T20977] syzkaller1: entered allmulticast mode [ 358.737162][T20985] tipc: Enabling of bearer rejected, already enabled [ 358.744979][T20985] 9pnet_fd: Insufficient options for proto=fd [ 358.777552][T20988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6643'. [ 358.787301][T20989] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6642'. [ 358.856536][T21001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6648'. [ 358.866010][T21001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6648'. [ 358.869171][T21003] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6649'. [ 358.875286][T21001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6648'. [ 358.923633][T21009] netlink: 'syz.6.6651': attribute type 10 has an invalid length. [ 358.929347][T21011] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 358.931549][T21009] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6651'. [ 358.939714][T21011] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 358.960854][T21003] Falling back ldisc for ttyS3. [ 359.003384][T21019] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6656'. [ 359.047209][T21028] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6660'. [ 359.160832][T21055] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 359.169070][T21055] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 359.355581][T21092] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 359.363897][T21092] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 359.426231][ T168] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.495058][ T168] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.517465][T21094] lo speed is unknown, defaulting to 1000 [ 359.521511][T21117] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 359.531423][T21117] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 359.563843][ T168] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.575526][T21126] block device autoloading is deprecated and will be removed. [ 359.581876][T21125] SELinux: Context is not valid (left unmapped). [ 359.602245][T21094] lo speed is unknown, defaulting to 1000 [ 359.624279][ T168] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.646199][T21134] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 359.654521][T21134] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 359.783497][ T168] bond0 (unregistering): Released all slaves [ 359.832745][T21094] chnl_net:caif_netlink_parms(): no params data found [ 359.846088][ T168] tipc: Disabling bearer [ 359.851114][ T168] tipc: Left network mode [ 359.906699][T21163] SELinux: security_context_str_to_sid () failed with errno=-22 [ 359.916598][T21094] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.923815][T21094] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.937218][T21094] bridge_slave_0: entered allmulticast mode [ 359.943977][T21094] bridge_slave_0: entered promiscuous mode [ 359.951075][T21094] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.958157][T21094] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.965526][T21094] bridge_slave_1: entered allmulticast mode [ 359.972444][T21094] bridge_slave_1: entered promiscuous mode [ 359.998030][ T168] hsr_slave_0: left promiscuous mode [ 360.006314][ T168] hsr_slave_1: left promiscuous mode [ 360.023804][T21168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.032422][T21168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.040876][T21168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.049466][T21168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.062836][ T168] veth1_macvtap: left promiscuous mode [ 360.068437][ T168] veth0_macvtap: left promiscuous mode [ 360.074391][ T168] veth1_vlan: left promiscuous mode [ 360.079775][ T168] veth0_vlan: left promiscuous mode [ 360.227872][T21094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.240441][T21094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.269300][T21094] team0: Port device team_slave_0 added [ 360.277552][T21172] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 360.285788][T21172] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 360.295472][T21094] team0: Port device team_slave_1 added [ 360.320973][T21094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.327939][T21094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.353942][T21094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.369263][T21094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.376343][T21094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.402666][T21094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.460487][T21094] hsr_slave_0: entered promiscuous mode [ 360.466750][T21094] hsr_slave_1: entered promiscuous mode [ 360.478967][T21094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.487119][T21094] Cannot create hsr debugfs directory [ 360.537405][T21195] SELinux: security_context_str_to_sid () failed with errno=-22 [ 360.585156][T21204] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 360.593389][T21204] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 360.807083][T21094] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 360.816956][T21094] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.827383][T21094] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 360.839217][T21094] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.895339][T21094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.912449][T21094] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.925531][T15451] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.932626][T15451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.952460][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.959548][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.064463][T21094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.079708][T21237] SELinux: security_context_str_to_sid () failed with errno=-22 [ 361.238649][T21094] veth0_vlan: entered promiscuous mode [ 361.252359][T21094] veth1_vlan: entered promiscuous mode [ 361.260875][T21263] Falling back ldisc for ttyS3. [ 361.284454][T21094] veth0_macvtap: entered promiscuous mode [ 361.293455][T21094] veth1_macvtap: entered promiscuous mode [ 361.313701][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.324218][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.334095][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.344706][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.354562][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.365074][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.375039][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.385501][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.395342][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.406005][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.416037][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.426567][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.436494][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.447056][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.456885][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.467321][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.479060][T21094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.502542][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.513021][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.522866][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.533365][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.543282][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.553809][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.563797][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.574288][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.584205][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.594658][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.604498][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.614975][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.620713][ T29] kauditd_printk_skb: 663 callbacks suppressed [ 361.620771][ T29] audit: type=1326 audit(4294968155.007:34651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.6.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 361.624790][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.630961][ T29] audit: type=1326 audit(4294968155.007:34652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.6.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 361.654489][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.654504][T21094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.665066][ T29] audit: type=1326 audit(4294968155.007:34653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.6.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 361.688461][T21094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.690605][T21094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.698391][ T29] audit: type=1326 audit(4294968155.007:34654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.6.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 361.710365][T21094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.732272][ T29] audit: type=1326 audit(4294968155.007:34655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.6.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 361.742103][T21094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.750902][T21296] 9pnet_fd: Insufficient options for proto=fd [ 361.772835][T21094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.814406][T21287] SELinux: security_context_str_to_sid () failed with errno=-22 [ 361.819817][T21094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.855937][ T29] audit: type=1326 audit(4294968155.227:34656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.6.6738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 361.872828][T21295] tipc: Enabling of bearer rejected, already enabled [ 361.879686][ T29] audit: type=1326 audit(4294968155.227:34657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.6.6738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 361.910804][ T29] audit: type=1326 audit(4294968155.227:34658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.6.6738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 361.934421][ T29] audit: type=1326 audit(4294968155.227:34659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.6.6738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 361.958067][ T29] audit: type=1326 audit(4294968155.227:34660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.6.6738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 362.081125][T21306] Falling back ldisc for ttyS3. [ 362.082349][T21319] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 362.094251][T21319] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 362.112634][T21314] block device autoloading is deprecated and will be removed. [ 362.144016][T21324] SELinux: security_context_str_to_sid () failed with errno=-22 [ 362.154073][T21327] FAULT_INJECTION: forcing a failure. [ 362.154073][T21327] name failslab, interval 1, probability 0, space 0, times 0 [ 362.166832][T21327] CPU: 1 UID: 0 PID: 21327 Comm: syz.7.6750 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 362.166856][T21327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 362.166867][T21327] Call Trace: [ 362.166872][T21327] [ 362.166877][T21327] dump_stack_lvl+0xf2/0x150 [ 362.166905][T21327] dump_stack+0x15/0x1a [ 362.166925][T21327] should_fail_ex+0x24a/0x260 [ 362.166979][T21327] should_failslab+0x8f/0xb0 [ 362.167003][T21327] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 362.167029][T21327] ? __d_alloc+0x3d/0x340 [ 362.167083][T21327] ? selinux_inode_permission+0x341/0x410 [ 362.167110][T21327] __d_alloc+0x3d/0x340 [ 362.167188][T21327] d_alloc_parallel+0x54/0xc80 [ 362.167204][T21327] ? __rcu_read_unlock+0x4e/0x70 [ 362.167221][T21327] ? __d_lookup+0x342/0x370 [ 362.167235][T21327] ? try_to_unlazy+0x264/0x390 [ 362.167290][T21327] path_openat+0x6c8/0x1fc0 [ 362.167308][T21327] ? _parse_integer_limit+0x167/0x180 [ 362.167411][T21327] do_filp_open+0x107/0x230 [ 362.167434][T21327] do_sys_openat2+0xab/0x120 [ 362.167461][T21327] __x64_sys_openat+0xf3/0x120 [ 362.167513][T21327] x64_sys_call+0x2b30/0x2dc0 [ 362.167536][T21327] do_syscall_64+0xc9/0x1c0 [ 362.167593][T21327] ? clear_bhb_loop+0x55/0xb0 [ 362.167615][T21327] ? clear_bhb_loop+0x55/0xb0 [ 362.167676][T21327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.167698][T21327] RIP: 0033:0x7fbda702cde9 [ 362.167713][T21327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.167728][T21327] RSP: 002b:00007fbda5697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 362.167745][T21327] RAX: ffffffffffffffda RBX: 00007fbda7245fa0 RCX: 00007fbda702cde9 [ 362.167771][T21327] RDX: 000000000000275a RSI: 0000400000000140 RDI: ffffffffffffff9c [ 362.167781][T21327] RBP: 00007fbda5697090 R08: 0000000000000000 R09: 0000000000000000 [ 362.167791][T21327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.167800][T21327] R13: 0000000000000000 R14: 00007fbda7245fa0 R15: 00007fff05027318 [ 362.167854][T21327] [ 362.408431][T21328] lo speed is unknown, defaulting to 1000 [ 362.450358][T21339] netlink: 'syz.5.6753': attribute type 13 has an invalid length. [ 362.495145][T21339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.510949][T21328] lo speed is unknown, defaulting to 1000 [ 362.611599][T21353] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 362.619806][T21353] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 362.650523][T21358] FAULT_INJECTION: forcing a failure. [ 362.650523][T21358] name failslab, interval 1, probability 0, space 0, times 0 [ 362.663250][T21358] CPU: 0 UID: 0 PID: 21358 Comm: syz.7.6760 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 362.663272][T21358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 362.663281][T21358] Call Trace: [ 362.663287][T21358] [ 362.663294][T21358] dump_stack_lvl+0xf2/0x150 [ 362.663317][T21358] dump_stack+0x15/0x1a [ 362.663334][T21358] should_fail_ex+0x24a/0x260 [ 362.663361][T21358] should_failslab+0x8f/0xb0 [ 362.663382][T21358] kmem_cache_alloc_noprof+0x52/0x320 [ 362.663409][T21358] ? vm_area_alloc+0xac/0x130 [ 362.663428][T21358] vm_area_alloc+0xac/0x130 [ 362.663446][T21358] mmap_region+0x819/0x1620 [ 362.663482][T21358] do_mmap+0x98a/0xc30 [ 362.663502][T21358] vm_mmap_pgoff+0x16d/0x2d0 [ 362.663525][T21358] ksys_mmap_pgoff+0xd0/0x330 [ 362.663546][T21358] ? fpregs_assert_state_consistent+0x83/0xa0 [ 362.663575][T21358] x64_sys_call+0x1940/0x2dc0 [ 362.663596][T21358] do_syscall_64+0xc9/0x1c0 [ 362.663616][T21358] ? clear_bhb_loop+0x55/0xb0 [ 362.663637][T21358] ? clear_bhb_loop+0x55/0xb0 [ 362.663656][T21358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.663677][T21358] RIP: 0033:0x7fbda702ce23 [ 362.663690][T21358] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 362.663705][T21358] RSP: 002b:00007fbda5696e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 362.663722][T21358] RAX: ffffffffffffffda RBX: 0000000000000561 RCX: 00007fbda702ce23 [ 362.663732][T21358] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 362.663742][T21358] RBP: 0000400000000f82 R08: 00000000ffffffff R09: 0000000000000000 [ 362.663752][T21358] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 362.663762][T21358] R13: 00007fbda5696ef0 R14: 00007fbda5696eb0 R15: 0000400000000140 [ 362.663776][T21358] [ 362.880884][T21355] Falling back ldisc for ttyS3. [ 363.030223][T21364] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 363.097321][T21384] tipc: Enabling of bearer rejected, already enabled [ 363.121985][T21386] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 363.130211][T21386] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 363.149127][T21384] 9pnet_fd: Insufficient options for proto=fd [ 363.166617][T21389] tipc: Enabling of bearer rejected, already enabled [ 363.201405][T21391] program syz.1.6772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.211124][T21389] 9pnet_fd: Insufficient options for proto=fd [ 363.218459][T21392] program syz.1.6772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.307239][T21404] FAULT_INJECTION: forcing a failure. [ 363.307239][T21404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.320394][T21404] CPU: 0 UID: 0 PID: 21404 Comm: syz.1.6776 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 363.320416][T21404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 363.320426][T21404] Call Trace: [ 363.320432][T21404] [ 363.320439][T21404] dump_stack_lvl+0xf2/0x150 [ 363.320463][T21404] dump_stack+0x15/0x1a [ 363.320529][T21397] Falling back ldisc for ttyS3. [ 363.320524][T21404] should_fail_ex+0x24a/0x260 [ 363.320553][T21404] should_fail+0xb/0x10 [ 363.320607][T21404] should_fail_usercopy+0x1a/0x20 [ 363.320626][T21404] _copy_to_user+0x20/0xa0 [ 363.320651][T21404] simple_read_from_buffer+0xa0/0x110 [ 363.320672][T21404] proc_fail_nth_read+0xf9/0x140 [ 363.320695][T21404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.320732][T21404] vfs_read+0x19b/0x6f0 [ 363.320758][T21404] ? __rcu_read_unlock+0x4e/0x70 [ 363.320777][T21404] ? __fget_files+0x17c/0x1c0 [ 363.320803][T21404] ksys_read+0xe8/0x1b0 [ 363.320823][T21404] __x64_sys_read+0x42/0x50 [ 363.320875][T21404] x64_sys_call+0x2874/0x2dc0 [ 363.320897][T21404] do_syscall_64+0xc9/0x1c0 [ 363.320920][T21404] ? clear_bhb_loop+0x55/0xb0 [ 363.320943][T21404] ? clear_bhb_loop+0x55/0xb0 [ 363.321004][T21404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.321028][T21404] RIP: 0033:0x7f717ad0b7fc [ 363.321042][T21404] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 363.321059][T21404] RSP: 002b:00007f7179371030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.321075][T21404] RAX: ffffffffffffffda RBX: 00007f717af25fa0 RCX: 00007f717ad0b7fc [ 363.321086][T21404] RDX: 000000000000000f RSI: 00007f71793710a0 RDI: 0000000000000003 [ 363.321098][T21404] RBP: 00007f7179371090 R08: 0000000000000000 R09: 0000000000000000 [ 363.321162][T21404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.321172][T21404] R13: 0000000000000000 R14: 00007f717af25fa0 R15: 00007fffe31ac5f8 [ 363.321189][T21404] [ 363.516926][T21410] __nla_validate_parse: 30 callbacks suppressed [ 363.516941][T21410] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6780'. [ 363.578339][T21419] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 363.586633][T21419] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 363.604781][T21423] tipc: Enabling of bearer rejected, already enabled [ 363.629280][T21423] 9pnet_fd: Insufficient options for proto=fd [ 363.782813][T21428] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6786'. [ 364.073863][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6793'. [ 364.102864][T21451] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 364.111128][T21451] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 364.171338][T21459] SELinux: security_context_str_to_sid () failed with errno=-22 [ 364.229011][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.236652][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.244178][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.251668][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.259139][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.266633][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.274140][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.281720][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.289193][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.296706][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.304217][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.311728][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.319199][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.326708][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.334304][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.341811][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.349285][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.356848][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.364384][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.371948][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.379442][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.386963][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.394468][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.402033][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.409618][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.417145][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.424726][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.432262][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.439736][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.447266][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.454767][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.462288][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.469763][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.477270][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.484758][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.492253][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.499775][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.507318][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.514817][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.522440][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.529953][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.537518][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.545094][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.552629][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.560103][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.567619][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.575113][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.582619][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.590104][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.597606][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.605117][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.612683][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.620229][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.627734][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.635247][ T6038] hid-generic 0040:0003:10000.000C: unknown main item tag 0x0 [ 364.643621][ T6038] hid-generic 0040:0003:10000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 364.653956][T21468] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6802'. [ 364.717222][T21472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6805'. [ 364.750913][T21468] Falling back ldisc for ttyS3. [ 364.803341][T21476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6807'. [ 364.824072][T21478] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 364.832411][T21478] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 364.913354][T21485] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6810'. [ 364.965460][T21495] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6815'. [ 365.114344][T21504] 9pnet_fd: Insufficient options for proto=fd [ 365.251482][T21519] SELinux: security_context_str_to_sid () failed with errno=-22 [ 365.273857][T21515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6822'. [ 365.328754][T21525] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 365.361150][T21527] vlan2: entered allmulticast mode [ 365.418134][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6832'. [ 365.443022][T21537] 9pnet_fd: Insufficient options for proto=fd [ 365.492603][T21539] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 365.500947][T21539] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 365.530429][T21543] SELinux: security_context_str_to_sid () failed with errno=-22 [ 365.550803][T21541] Falling back ldisc for ttyS3. [ 365.810110][T21575] vlan2: entered allmulticast mode [ 365.824799][T21577] SELinux: security_context_str_to_sid () failed with errno=-22 [ 365.841310][T21574] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 365.849600][T21574] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 365.868590][T21580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.877126][T21580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.894108][T21580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.906240][T21580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.935584][T21585] bond_slave_1: entered promiscuous mode [ 365.946795][T21585] bond0: (slave bond_slave_1): Releasing backup interface [ 365.957170][T21585] bond_slave_1 (unregistering): left promiscuous mode [ 366.182816][T21597] Falling back ldisc for ttyS3. [ 366.225126][T21607] FAULT_INJECTION: forcing a failure. [ 366.225126][T21607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.238275][T21607] CPU: 1 UID: 0 PID: 21607 Comm: syz.5.6862 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 366.238316][T21607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 366.238325][T21607] Call Trace: [ 366.238331][T21607] [ 366.238336][T21607] dump_stack_lvl+0xf2/0x150 [ 366.238360][T21607] dump_stack+0x15/0x1a [ 366.238377][T21607] should_fail_ex+0x24a/0x260 [ 366.238406][T21607] should_fail+0xb/0x10 [ 366.238440][T21607] should_fail_usercopy+0x1a/0x20 [ 366.238455][T21607] _copy_to_user+0x20/0xa0 [ 366.238545][T21607] simple_read_from_buffer+0xa0/0x110 [ 366.238631][T21607] proc_fail_nth_read+0xf9/0x140 [ 366.238653][T21607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 366.238707][T21607] vfs_read+0x19b/0x6f0 [ 366.238723][T21607] ? __rcu_read_unlock+0x4e/0x70 [ 366.238741][T21607] ? __fget_files+0x17c/0x1c0 [ 366.238763][T21607] ksys_read+0xe8/0x1b0 [ 366.238779][T21607] __x64_sys_read+0x42/0x50 [ 366.238796][T21607] x64_sys_call+0x2874/0x2dc0 [ 366.238856][T21607] do_syscall_64+0xc9/0x1c0 [ 366.238875][T21607] ? clear_bhb_loop+0x55/0xb0 [ 366.238909][T21607] ? clear_bhb_loop+0x55/0xb0 [ 366.238931][T21607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.239005][T21607] RIP: 0033:0x7f2dbdf1b7fc [ 366.239017][T21607] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 366.239029][T21607] RSP: 002b:00007f2dbc587030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 366.239042][T21607] RAX: ffffffffffffffda RBX: 00007f2dbe135fa0 RCX: 00007f2dbdf1b7fc [ 366.239051][T21607] RDX: 000000000000000f RSI: 00007f2dbc5870a0 RDI: 0000000000000003 [ 366.239102][T21607] RBP: 00007f2dbc587090 R08: 0000000000000000 R09: 0000000000000000 [ 366.239112][T21607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.239124][T21607] R13: 0000000000000000 R14: 00007f2dbe135fa0 R15: 00007ffd7f71d1f8 [ 366.239141][T21607] [ 366.519409][T21625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21625 comm=syz.5.6869 [ 366.542706][T21625] 9pnet_fd: Insufficient options for proto=fd [ 366.620868][ T29] kauditd_printk_skb: 541 callbacks suppressed [ 366.620881][ T29] audit: type=1326 audit(4294968160.067:35202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.5.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbdf1cde9 code=0x7ffc0000 [ 366.653716][T21632] Falling back ldisc for ttyS3. [ 366.658761][ T29] audit: type=1326 audit(4294968160.067:35203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.5.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbdf1cde9 code=0x7ffc0000 [ 366.682474][ T29] audit: type=1326 audit(4294968160.067:35204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.5.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f2dbdf1cde9 code=0x7ffc0000 [ 366.706017][ T29] audit: type=1326 audit(4294968160.067:35205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.5.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbdf1cde9 code=0x7ffc0000 [ 366.729590][ T29] audit: type=1326 audit(4294968160.067:35206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.5.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbdf1cde9 code=0x7ffc0000 [ 366.735726][T21636] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 366.753218][ T29] audit: type=1326 audit(4294968160.067:35207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.5.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dbdf1cde9 code=0x7ffc0000 [ 366.784267][ T29] audit: type=1326 audit(4294968160.067:35208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.5.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbdf1cde9 code=0x7ffc0000 [ 366.807882][ T29] audit: type=1326 audit(4294968160.067:35209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.5.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbdf1cde9 code=0x7ffc0000 [ 366.831585][ T29] audit: type=1326 audit(4294968160.067:35210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.5.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2dbdf1cde9 code=0x7ffc0000 [ 366.855360][ T29] audit: type=1326 audit(4294968160.097:35211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.5.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbdf1cde9 code=0x7ffc0000 [ 366.893027][T21645] FAULT_INJECTION: forcing a failure. [ 366.893027][T21645] name failslab, interval 1, probability 0, space 0, times 0 [ 366.905712][T21645] CPU: 0 UID: 0 PID: 21645 Comm: syz.1.6877 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 366.905734][T21645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 366.905782][T21645] Call Trace: [ 366.905788][T21645] [ 366.905795][T21645] dump_stack_lvl+0xf2/0x150 [ 366.905817][T21645] dump_stack+0x15/0x1a [ 366.905864][T21645] should_fail_ex+0x24a/0x260 [ 366.905939][T21645] ? inet6_rtm_newroute+0x647/0x1260 [ 366.905956][T21645] should_failslab+0x8f/0xb0 [ 366.905976][T21645] __kmalloc_cache_noprof+0x4e/0x320 [ 366.906003][T21645] inet6_rtm_newroute+0x647/0x1260 [ 366.906061][T21645] ? __rcu_read_unlock+0x34/0x70 [ 366.906079][T21645] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 366.906196][T21645] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 366.906217][T21645] rtnetlink_rcv_msg+0x6aa/0x710 [ 366.906246][T21645] ? ref_tracker_free+0x3a5/0x410 [ 366.906272][T21645] ? __dev_queue_xmit+0x186/0x2090 [ 366.906299][T21645] netlink_rcv_skb+0x12c/0x230 [ 366.906350][T21645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.906379][T21645] rtnetlink_rcv+0x1c/0x30 [ 366.906399][T21645] netlink_unicast+0x599/0x670 [ 366.906440][T21645] netlink_sendmsg+0x5cc/0x6e0 [ 366.906541][T21645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.906569][T21645] __sock_sendmsg+0x140/0x180 [ 366.906588][T21645] ____sys_sendmsg+0x312/0x410 [ 366.906617][T21645] __sys_sendmsg+0x19d/0x230 [ 366.906689][T21645] __x64_sys_sendmsg+0x46/0x50 [ 366.906715][T21645] x64_sys_call+0x2734/0x2dc0 [ 366.906736][T21645] do_syscall_64+0xc9/0x1c0 [ 366.906775][T21645] ? clear_bhb_loop+0x55/0xb0 [ 366.906798][T21645] ? clear_bhb_loop+0x55/0xb0 [ 366.906821][T21645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.906917][T21645] RIP: 0033:0x7f717ad0cde9 [ 366.906933][T21645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.906951][T21645] RSP: 002b:00007f7179371038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.906998][T21645] RAX: ffffffffffffffda RBX: 00007f717af25fa0 RCX: 00007f717ad0cde9 [ 366.907008][T21645] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000006 [ 366.907017][T21645] RBP: 00007f7179371090 R08: 0000000000000000 R09: 0000000000000000 [ 366.907027][T21645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.907038][T21645] R13: 0000000000000000 R14: 00007f717af25fa0 R15: 00007fffe31ac5f8 [ 366.907052][T21645] [ 367.414087][T21668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.423295][T21668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.434068][T21668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.442644][T21668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.770815][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.778404][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.785941][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.793446][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.800954][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.808482][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.815991][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.823506][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.831078][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.838557][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.846134][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.853726][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.861284][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.868855][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.876381][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.883964][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.891466][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.898986][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.906560][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.914068][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.921574][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.929055][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.936561][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.944055][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.951555][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.959059][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.966578][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.974139][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.981644][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.989154][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 367.996665][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.004166][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.011663][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.019210][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.026719][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.034245][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.041864][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.049320][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.057024][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.064537][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.072033][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.079850][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.087363][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.094871][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.102408][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.110018][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.117620][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.125202][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.132858][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.140318][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.147816][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.155310][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.162904][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.170360][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.177898][ T6045] hid-generic 0040:0003:10000.000D: unknown main item tag 0x0 [ 368.186341][ T6045] hid-generic 0040:0003:10000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 368.282041][T21712] block device autoloading is deprecated and will be removed. [ 368.379228][T21723] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 368.493360][T21738] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 368.549146][T21752] 9pnet_fd: Insufficient options for proto=fd [ 368.658508][T21770] __nla_validate_parse: 18 callbacks suppressed [ 368.658587][T21770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6920'. [ 368.733035][T21785] 9pnet_fd: Insufficient options for proto=fd [ 368.742446][T21782] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 368.786635][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.794315][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.801958][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.809463][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.817142][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.824798][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.832353][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.839927][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.847590][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.855261][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.862846][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.870315][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.877838][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.885384][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.892990][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.900522][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.908091][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.915583][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.923088][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.930630][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.938149][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.945716][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.953305][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.960870][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.968337][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.975890][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.983386][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.990866][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 368.998328][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.005824][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.013306][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.020783][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.028263][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.035809][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.043395][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.050889][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.058404][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.065983][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.073537][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.081031][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.088574][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.096060][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.103549][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.111023][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.118506][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.126008][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.133472][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.141062][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.148556][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.156028][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.163570][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.171060][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.178536][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.186016][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.193530][ T6038] hid-generic 0040:0003:10000.000E: unknown main item tag 0x0 [ 369.201701][ T6038] hid-generic 0040:0003:10000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 369.241422][T21791] Falling back ldisc for ttyS3. [ 369.271285][T21810] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6934'. [ 369.271464][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6932'. [ 369.399973][T21832] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6945'. [ 369.447910][T21838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6948'. [ 369.471065][T21834] Falling back ldisc for ttyS3. [ 369.491377][T21842] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6950'. [ 369.549604][T21850] 9pnet_fd: Insufficient options for proto=fd [ 369.586046][T21858] SELinux: security_context_str_to_sid () failed with errno=-22 [ 369.611282][T21857] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 369.657949][T21865] vlan2: entered allmulticast mode [ 369.709863][T21878] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6968'. [ 369.721665][T21867] Falling back ldisc for ttyS3. [ 369.742371][T21877] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6966'. [ 369.748629][T21875] lo speed is unknown, defaulting to 1000 [ 369.779970][T21882] SELinux: security_context_str_to_sid () failed with errno=-22 [ 369.809600][T21875] lo speed is unknown, defaulting to 1000 [ 369.835387][T21888] 9pnet_fd: Insufficient options for proto=fd [ 369.906170][T21898] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6978'. [ 370.037021][T21915] SELinux: security_context_str_to_sid () failed with errno=-22 [ 370.099033][T21925] 9pnet_fd: Insufficient options for proto=fd [ 370.139063][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6993'. [ 370.231451][T21944] Falling back ldisc for ttyS3. [ 370.248727][T21951] SELinux: security_context_str_to_sid () failed with errno=-22 [ 370.368735][T21964] 9pnet_fd: Insufficient options for proto=fd [ 370.442505][T21974] SELinux: security_context_str_to_sid () failed with errno=-22 [ 370.670057][T21997] 9pnet_fd: Insufficient options for proto=fd [ 370.730731][T21995] Falling back ldisc for ttyS3. [ 370.857396][T22017] SELinux: security_context_str_to_sid () failed with errno=-22 [ 371.000812][T22028] Falling back ldisc for ttyS3. [ 371.023407][T22040] 9pnet_fd: Insufficient options for proto=fd [ 371.191049][T22057] block device autoloading is deprecated and will be removed. [ 371.340900][T22072] Falling back ldisc for ttyS3. [ 371.439371][T22094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.447881][T22094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.456482][T22094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.464989][T22094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.499830][T22102] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 371.680868][T22115] Falling back ldisc for ttyS3. [ 371.731702][T22127] block device autoloading is deprecated and will be removed. [ 371.773272][ T29] kauditd_printk_skb: 1145 callbacks suppressed [ 371.773287][ T29] audit: type=1326 audit(4294968165.217:36357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22103 comm="syz.8.7068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263281cde9 code=0x7ffc0000 [ 371.829973][T22131] tipc: Started in network mode [ 371.834932][T22131] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 371.857633][T22131] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 371.866043][T22131] tipc: Enabled bearer , priority 10 [ 371.960463][ T29] audit: type=1400 audit(4294968165.397:36358): avc: denied { create } for pid=22134 comm="syz.8.7081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 371.998622][T22137] FAULT_INJECTION: forcing a failure. [ 371.998622][T22137] name failslab, interval 1, probability 0, space 0, times 0 [ 372.011313][T22137] CPU: 1 UID: 0 PID: 22137 Comm: syz.5.7082 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 372.011334][T22137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 372.011343][T22137] Call Trace: [ 372.011349][T22137] [ 372.011355][T22137] dump_stack_lvl+0xf2/0x150 [ 372.011380][T22137] dump_stack+0x15/0x1a [ 372.011397][T22137] should_fail_ex+0x24a/0x260 [ 372.011425][T22137] should_failslab+0x8f/0xb0 [ 372.011446][T22137] kmem_cache_alloc_noprof+0x52/0x320 [ 372.011470][T22137] ? vm_area_dup+0x98/0x130 [ 372.011489][T22137] vm_area_dup+0x98/0x130 [ 372.011507][T22137] __split_vma+0xf7/0x6a0 [ 372.011537][T22137] vma_modify+0x17d/0x1e0 [ 372.011560][T22137] vma_modify_flags_name+0xf6/0x120 [ 372.011585][T22137] do_madvise+0x18dc/0x2ad0 [ 372.011613][T22137] ? bpf_trace_run2+0x123/0x1d0 [ 372.011634][T22137] ? __bpf_trace_sys_enter+0x10/0x30 [ 372.011653][T22137] ? trace_sys_enter+0xcd/0x110 [ 372.011673][T22137] __x64_sys_madvise+0x61/0x70 [ 372.011696][T22137] x64_sys_call+0x23ab/0x2dc0 [ 372.011718][T22137] do_syscall_64+0xc9/0x1c0 [ 372.011739][T22137] ? clear_bhb_loop+0x55/0xb0 [ 372.011761][T22137] ? clear_bhb_loop+0x55/0xb0 [ 372.011783][T22137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.011804][T22137] RIP: 0033:0x7f2dbdf1cde9 [ 372.011817][T22137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.011833][T22137] RSP: 002b:00007f2dbc587038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 372.011849][T22137] RAX: ffffffffffffffda RBX: 00007f2dbe135fa0 RCX: 00007f2dbdf1cde9 [ 372.011861][T22137] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000400000ff9000 [ 372.011872][T22137] RBP: 00007f2dbc587090 R08: 0000000000000000 R09: 0000000000000000 [ 372.011883][T22137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.011893][T22137] R13: 0000000000000000 R14: 00007f2dbe135fa0 R15: 00007ffd7f71d1f8 [ 372.011907][T22137] [ 372.258425][T22141] 9pnet_fd: Insufficient options for proto=fd [ 372.279345][ T29] audit: type=1326 audit(4294968165.707:36359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.6.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 372.303085][ T29] audit: type=1326 audit(4294968165.707:36360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.6.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 372.326781][ T29] audit: type=1326 audit(4294968165.707:36361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.6.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 372.350417][ T29] audit: type=1326 audit(4294968165.707:36362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.6.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 372.374218][ T29] audit: type=1326 audit(4294968165.707:36363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.6.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 372.397804][ T29] audit: type=1326 audit(4294968165.707:36364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.6.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 372.421399][ T29] audit: type=1326 audit(4294968165.707:36365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.6.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 372.445079][ T29] audit: type=1326 audit(4294968165.707:36366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.6.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f62c9d0cde9 code=0x7ffc0000 [ 372.560945][T22151] Falling back ldisc for ttyS3. [ 372.723148][T22168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.731886][T22168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.740488][T22168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.749309][T22168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.837576][ T6036] IPVS: starting estimator thread 0... [ 372.860857][ T6036] tipc: Node number set to 1 [ 372.930952][T22172] IPVS: using max 2880 ests per chain, 144000 per kthread [ 372.934600][T22180] 9pnet_fd: Insufficient options for proto=fd [ 373.030909][T22186] Falling back ldisc for ttyS3. [ 373.059780][T22138] delete_channel: no stack [ 373.401625][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.409152][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.416719][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.424227][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.431771][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.439310][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.446827][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.454412][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.461920][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.469486][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.476999][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.484579][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.492186][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.499685][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.507200][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.514726][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.522263][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.529768][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.537286][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.544886][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.552393][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.559886][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.567393][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.574899][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.582414][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.589902][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.597407][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.604927][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.612459][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.619990][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.627531][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.635039][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.642562][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.650044][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.657617][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.665136][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.672638][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.680104][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.687646][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.695142][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.702694][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.710221][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.717798][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.725292][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.732798][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.740248][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.747826][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.755369][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.762918][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.770398][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.777993][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.785479][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.793048][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.800500][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.808127][ T6038] hid-generic 0040:0003:10000.000F: unknown main item tag 0x0 [ 373.816450][ T6038] hid-generic 0040:0003:10000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 374.043701][T22241] __nla_validate_parse: 19 callbacks suppressed [ 374.043719][T22241] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7128'. [ 374.178082][T22253] FAULT_INJECTION: forcing a failure. [ 374.178082][T22253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.191250][T22253] CPU: 0 UID: 0 PID: 22253 Comm: syz.8.7133 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 374.191313][T22253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 374.191323][T22253] Call Trace: [ 374.191329][T22253] [ 374.191337][T22253] dump_stack_lvl+0xf2/0x150 [ 374.191381][T22253] dump_stack+0x15/0x1a [ 374.191400][T22253] should_fail_ex+0x24a/0x260 [ 374.191430][T22253] should_fail+0xb/0x10 [ 374.191513][T22253] should_fail_usercopy+0x1a/0x20 [ 374.191561][T22253] _copy_from_user+0x1c/0xa0 [ 374.191579][T22253] copy_msghdr_from_user+0x54/0x2a0 [ 374.191596][T22253] ? __fget_files+0x17c/0x1c0 [ 374.191620][T22253] __sys_sendmsg+0x13e/0x230 [ 374.191695][T22253] __x64_sys_sendmsg+0x46/0x50 [ 374.191750][T22253] x64_sys_call+0x2734/0x2dc0 [ 374.191840][T22253] do_syscall_64+0xc9/0x1c0 [ 374.191863][T22253] ? clear_bhb_loop+0x55/0xb0 [ 374.191975][T22253] ? clear_bhb_loop+0x55/0xb0 [ 374.192006][T22253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.192030][T22253] RIP: 0033:0x7f263281cde9 [ 374.192045][T22253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.192062][T22253] RSP: 002b:00007f2630e81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.192133][T22253] RAX: ffffffffffffffda RBX: 00007f2632a35fa0 RCX: 00007f263281cde9 [ 374.192145][T22253] RDX: 0000000004004881 RSI: 0000400000000600 RDI: 0000000000000004 [ 374.192157][T22253] RBP: 00007f2630e81090 R08: 0000000000000000 R09: 0000000000000000 [ 374.192169][T22253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.192181][T22253] R13: 0000000000000000 R14: 00007f2632a35fa0 R15: 00007ffe32798cf8 [ 374.192197][T22253] [ 374.534949][T22270] block device autoloading is deprecated and will be removed. [ 374.591357][T22274] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7142'. [ 374.602417][T22274] 9pnet_fd: Insufficient options for proto=fd [ 374.658597][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.666177][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.673741][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.681483][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.688954][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.696462][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.704051][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.711552][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.719036][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.726510][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.734049][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.741631][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.749104][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.756594][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.764067][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.771612][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.779133][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.786688][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.794198][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.801687][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.809146][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.816720][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.824193][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.831684][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.839149][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.846794][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.854276][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.861800][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.869315][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.876855][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.884340][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.891885][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.899505][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.906988][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.914495][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.922028][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.929543][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.937104][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.944592][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.952073][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.959598][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.967074][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.974573][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.982146][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.989656][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 374.997172][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 375.004688][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 375.012183][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 375.012522][T22283] lo speed is unknown, defaulting to 1000 [ 375.019735][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 375.032987][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 375.040529][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 375.048039][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 375.055531][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 375.063176][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 375.070761][ T6038] hid-generic 0040:0003:10000.0010: unknown main item tag 0x0 [ 375.073791][T22283] lo speed is unknown, defaulting to 1000 [ 375.079064][ T6038] hid-generic 0040:0003:10000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 375.129710][T22288] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7148'. [ 375.183849][T22283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7146'. [ 375.253250][T22298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7152'. [ 375.391070][T22318] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 375.445999][T22329] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7168'. [ 375.455108][T22329] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7168'. [ 375.475007][T22333] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7167'. [ 375.516859][T22337] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 375.537422][T22342] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7173'. [ 375.548355][T22345] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 375.572335][T22340] SELinux: syz.6.7172 (22340) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 375.629131][T22356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7180'. [ 375.630055][T22357] netlink: 'syz.6.7178': attribute type 10 has an invalid length. [ 375.653257][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.660887][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.668533][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.669813][T22357] team0: Device hsr_slave_0 failed to register rx_handler [ 375.676195][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.690950][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.698475][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.706064][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.713564][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.721110][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.728587][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.736110][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.745077][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.752624][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.760109][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.767655][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.775251][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.782756][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.790229][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.797695][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.805189][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.812690][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.820143][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.827683][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.835193][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.842708][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.850204][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.857693][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.865159][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.872642][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.880108][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.887924][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.895430][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.902985][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.910466][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.917952][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.925472][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.932938][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.940393][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.947959][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.955421][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.962966][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.970483][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.978037][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.985564][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 375.993053][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 376.000500][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 376.007997][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 376.015478][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 376.022944][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 376.030433][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 376.037990][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 376.045477][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 376.052976][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 376.060453][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 376.067963][ T6038] hid-generic 0040:0003:10000.0011: unknown main item tag 0x0 [ 376.075938][ T6038] hid-generic 0040:0003:10000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 376.124914][T22382] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 376.139445][T22381] netlink: 'syz.6.7186': attribute type 21 has an invalid length. [ 376.148677][T22381] cgroup: subsys name conflicts with all [ 376.209569][T22398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.218246][T22398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.228491][T22398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.237068][T22398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.281764][T22410] SELinux: security_context_str_to_sid () failed with errno=-22 [ 376.308492][T22415] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 376.451133][T22438] FAULT_INJECTION: forcing a failure. [ 376.451133][T22438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.464265][T22438] CPU: 0 UID: 0 PID: 22438 Comm: syz.6.7207 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 376.464289][T22438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 376.464300][T22438] Call Trace: [ 376.464306][T22438] [ 376.464353][T22438] dump_stack_lvl+0xf2/0x150 [ 376.464378][T22438] dump_stack+0x15/0x1a [ 376.464458][T22438] should_fail_ex+0x24a/0x260 [ 376.464489][T22438] should_fail+0xb/0x10 [ 376.464514][T22438] should_fail_usercopy+0x1a/0x20 [ 376.464569][T22438] _copy_from_user+0x1c/0xa0 [ 376.464591][T22438] __sys_bpf+0x14e/0x7a0 [ 376.464625][T22438] __x64_sys_bpf+0x43/0x50 [ 376.464643][T22438] x64_sys_call+0x2914/0x2dc0 [ 376.464663][T22438] do_syscall_64+0xc9/0x1c0 [ 376.464708][T22438] ? clear_bhb_loop+0x55/0xb0 [ 376.464728][T22438] ? clear_bhb_loop+0x55/0xb0 [ 376.464751][T22438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.464775][T22438] RIP: 0033:0x7f62c9d0cde9 [ 376.464868][T22438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.464883][T22438] RSP: 002b:00007f62c8377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.464898][T22438] RAX: ffffffffffffffda RBX: 00007f62c9f25fa0 RCX: 00007f62c9d0cde9 [ 376.464909][T22438] RDX: 0000000000000028 RSI: 0000400000000080 RDI: 000000000000000a [ 376.464919][T22438] RBP: 00007f62c8377090 R08: 0000000000000000 R09: 0000000000000000 [ 376.464928][T22438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.464943][T22438] R13: 0000000000000000 R14: 00007f62c9f25fa0 R15: 00007ffe7c45e508 [ 376.465017][T22438] [ 376.661675][T22446] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 376.689953][ C0] ================================================================== [ 376.698038][ C0] BUG: KCSAN: data-race in serial8250_do_startup / serial8250_handle_irq [ 376.706453][ C0] [ 376.708755][ C0] write to 0xffffffff88c405c6 of 1 bytes by task 22450 on cpu 1: [ 376.716448][ C0] serial8250_do_startup+0x165c/0x1ea0 [ 376.721888][ C0] serial8250_startup+0x40/0x50 [ 376.726728][ C0] uart_startup+0x481/0x9b0 [ 376.731218][ C0] uart_port_activate+0x66/0xb0 [ 376.736052][ C0] tty_port_open+0x160/0x1f0 [ 376.740622][ C0] uart_open+0x30/0x40 [ 376.744690][ C0] tty_open+0x3d4/0xb00 [ 376.748829][ C0] chrdev_open+0x2f9/0x370 [ 376.753222][ C0] do_dentry_open+0x621/0xa20 [ 376.757880][ C0] vfs_open+0x38/0x1e0 [ 376.761923][ C0] path_openat+0x1ae0/0x1fc0 [ 376.766487][ C0] do_filp_open+0x107/0x230 [ 376.770962][ C0] do_sys_openat2+0xab/0x120 [ 376.775533][ C0] __x64_sys_openat+0xf3/0x120 [ 376.780277][ C0] x64_sys_call+0x2b30/0x2dc0 [ 376.784933][ C0] do_syscall_64+0xc9/0x1c0 [ 376.789412][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.795281][ C0] [ 376.797580][ C0] read to 0xffffffff88c405c6 of 1 bytes by interrupt on cpu 0: [ 376.805095][ C0] serial8250_handle_irq+0x3c9/0x620 [ 376.810361][ C0] serial8250_default_handle_irq+0x94/0x130 [ 376.816227][ C0] serial8250_interrupt+0x5d/0x120 [ 376.821315][ C0] __handle_irq_event_percpu+0x95/0x490 [ 376.826837][ C0] handle_irq_event+0x64/0xf0 [ 376.831488][ C0] handle_edge_irq+0x16d/0x5b0 [ 376.836233][ C0] __common_interrupt+0x58/0xe0 [ 376.841058][ C0] common_interrupt+0x7c/0x90 [ 376.845711][ C0] asm_common_interrupt+0x26/0x40 [ 376.850710][ C0] __sanitizer_cov_trace_const_cmp4+0x11/0x90 [ 376.856754][ C0] atime_needs_update+0x41/0x3e0 [ 376.861671][ C0] pick_link+0x2f9/0x7e0 [ 376.865891][ C0] step_into+0x748/0x820 [ 376.870109][ C0] link_path_walk+0x50e/0x830 [ 376.874785][ C0] path_lookupat+0x72/0x2b0 [ 376.879268][ C0] filename_lookup+0x150/0x340 [ 376.884012][ C0] vfs_statx+0x9a/0x170 [ 376.888145][ C0] __se_sys_newfstatat+0xdc/0x300 [ 376.893146][ C0] __x64_sys_newfstatat+0x55/0x70 [ 376.898148][ C0] x64_sys_call+0x236d/0x2dc0 [ 376.902802][ C0] do_syscall_64+0xc9/0x1c0 [ 376.907284][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.913154][ C0] [ 376.915471][ C0] value changed: 0x00 -> 0x05 [ 376.920118][ C0] [ 376.922414][ C0] Reported by Kernel Concurrency Sanitizer on: [ 376.928537][ C0] CPU: 0 UID: 0 PID: 22451 Comm: modprobe Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 376.939096][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 376.949126][ C0] ================================================================== [ 376.965491][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 376.965550][ T29] audit: type=1400 audit(4294968170.407:36778): avc: denied { create } for pid=22452 comm="syz.1.7214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 376.991768][ T29] audit: type=1400 audit(4294968170.407:36779): avc: denied { connect } for pid=22452 comm="syz.1.7214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 377.012035][ T29] audit: type=1400 audit(4294968170.407:36780): avc: denied { name_bind } for pid=22452 comm="syz.1.7214" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 377.033903][ T29] audit: type=1400 audit(4294968170.407:36781): avc: denied { node_bind } for pid=22452 comm="syz.1.7214" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 377.108536][ T29] audit: type=1400 audit(4294968170.547:36782): avc: denied { read write } for pid=22452 comm="syz.1.7214" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 377.132022][ T29] audit: type=1400 audit(4294968170.547:36783): avc: denied { open } for pid=22452 comm="syz.1.7214" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 377.173912][ T29] audit: type=1400 audit(4294968170.617:36784): avc: denied { ioctl } for pid=22452 comm="syz.1.7214" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 377.201881][ T29] audit: type=1400 audit(4294968170.647:36785): avc: denied { bind } for pid=22452 comm="syz.1.7214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 377.221586][ T29] audit: type=1400 audit(4294968170.647:36786): avc: denied { listen } for pid=22452 comm="syz.1.7214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 377.241557][ T29] audit: type=1400 audit(4294968170.647:36787): avc: denied { connect } for pid=22452 comm="syz.1.7214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1