last executing test programs: 2m47.21275675s ago: executing program 0 (id=514): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0), &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x1d}, 0x18) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb", 0x96, r3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 2m46.267391915s ago: executing program 0 (id=536): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x5, 0x2, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) io_uring_setup(0x4074, &(0x7f00000002c0)={0x0, 0xb7ca, 0x10, 0x2, 0x5f}) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r2, 0x3) socket$kcm(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407ffc, 0xaea}, 0x14105, 0x2e, 0xed, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xe04a3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000240), 0x1}, 0x5018, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r3, 0x0}]) 2m45.688885485s ago: executing program 0 (id=549): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getpeername$packet(r0, 0x0, &(0x7f0000000040)) 2m45.675183005s ago: executing program 0 (id=550): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0xfe800000, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8, 0x0, 0x0, 0x0, 0x1000000}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd}, {0x8, 0x0, 0x0, 0x0, 0x38}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 2m45.433064669s ago: executing program 0 (id=554): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000080)={[{@noinit_itable}, {@block_validity}, {@quota}, {@nombcache}]}, 0x1, 0x4e1, &(0x7f0000001400)="$eJzs3c9vG1kdAPDvTOKStClJgUOpRFvRorSCOklD24hDKRKCUyWg3EtInCiKE0ex0zZRBan4A5AQAiROPXHpXwAS6oE/ACEhwR2xv7TabXcPe9hdr2yP0zS142jXiavk85Gm897zON/vm8rjmXlPngCOrPMRcSsi+iLickQMZ+1ptsRmY6lt9/zZw5nakkS1eue9JJKsbeffPJG9bSAifvbjiF8mr8Ytr28sTheLhdWsPlZZWhkrr29cWViani/MF5YnJyeuT92YujY13pV+1vp184dv/uG3f/nRzb9/5/7/7r5z6Ve1tIay11v1oxsaXc/V90VTf0Ss7kewHujL1rmOW/5j33MBAKCz2jn+VyLim/Xz/+Hoq5+dAgAAAIdJ9ftD8XESUQUAAAAOrbQ+BzZJ89lcgKFI03y+MYf3a3E8LZbKlW/PldaWZxtzZUcil84tFAvj2ZzakcgltfpEvfyifnVHfTIiTkXE74cH6/X8TKk42+ubHwAAAHBEnNhx/f/hcOP6HwAAADhkRnqdAAAAALDvXrr+f9y7PAAAAID9Y/wfAAAADrWf3L5dW6rN51/P3ltfWyzduzJbKC/ml9Zm8jOl1ZX8fKk0X//NvqVOf69YKq18N5bXHoxVCuXKWHl94+5SaW25Mrjw0iOwAQAAgAN06tzT/yYRsfm9wfpSc6zXSQEHIum0wfa7dm/sby7AwerL1k/+2uNEgAPX3+sEgJ7J9ToBoOc63QdoO3nnn93PBQAA2B+jX98a/x9stjXH/zvfG+g4egi8xtJeJwAAHDjj/3B05bZmAAJH1Zd3NiQRm9uqX3z8v1r9PHkBAADdM1RfkjSfjQUORZrm8xEn648FyCVzC8XCeHZ98J/h3Jdq9Yn6OxOj/wAAAAAAAAAAAAAAAAAAAAAAAACwR9VqElUAAADgUItI306yJ/mPDl8c2nl/4Fjy0XB9HRH3/3znjw+mK5XViVr7+1vtlT9l7Vc9TxwAAABeB83r9OZ1PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB00/NnD2eayysvHtu/uO/+ICJGWsXvj4H6eiByEXH8gyT6t70viYi+LsTffBQRp1vFT2ppxUiWRav4gz2Mn0bEiS7Eh6Psae34c6vV5y+N8/V1689frfxWF+K3P/6lW8e/vjbHn5N7jHFmc5f4jyLO9Lc+/jTjJ23iX9hj/F/8fGOj3WvVxxGjLb9/kpdijVWWVsbK6xtXFpam5wvzheXJyYnrUzemrk2Nj80tFAvZvy1j/O4bf/t0t/4fbxN/pNH/c+36f3GP/f/k3w+efbVRzLWKf+lC6+/f0434r+z/NPvu+1ZWfl6t/no0Kyebjf253dkn/zq7W/9n2/S/0///pT32//JPf/P/PW4KAByA8vrG4nSxWFhVaF2oVu0ohUNZiIHdtun1kQkAAOi2Fyf9vc4EAAAAAAAAAAAAAAAAAAAAjq6D+KWxnTF3+TlqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICe+SwAAP//C2TYfA==") r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000400), 0x3, 0x443, &(0x7f0000000a40)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQuFWp26AmSLSqICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckGMLDG05ckYldE/B4Ro7VsY4Hx2j83ly/P/r18eTaJSuXNv5JquRvLl2fzovn7duaZoYjCp0kcaFHvwsVLaYnShSw/uXjuvcmFi5eePXNu5nTpdOn89IkTx45OPX98+rmexJnGdWP/h/MH97369tXXZ09efefnb5M8/qY4emS808HHK5UeV9dfu+vSyVAfG0JXirVuGsPV/j8axVg9eaPxyid9bRywqSqVSuW+9oeXKsBdLIl+twDoj/yHPp3/5tsWDT3uCNdfrE2A0rhvZlvtyFAUsjLDTfPbXhqPiJNL/3yVbrE59yEAABp8n45/nmk1/itE/X2h/2drKGMRcU9E7ImI4xGxNyLujaiWvT8iHuiy/uZFkrXjn8K1DQW2Tun474Vsbatx/JeP/mKsmOV2V+MfTk6dKZeOZJ/J4RjeluanOtTxw8u/fd7uWP34L93S+vOxYNaOa0PbGt8zN7M4czsx17v+ccT+oVbxJysrAUlE7IuI/Rus48xT3xxsd+zW8XfQg3WmytcRT9TO/1I0xZ9LOq9PTv4vyqUjk/lVsdYvv155o139txV/D6Tnf0fL638l/rGktl57dqZcLl1Y6OZ///LJ9PXKH5+1ndNs9PofSd5q2PfBzOLihamIkeS1WqPr9083lZteLZ/Gf/hQ6/6/J1Y/iQMRkV7ED0bEQxHxcNb2RyLi0Yg41OFT+Omlx97dePybK41/rqvzv5oYieY9rRPFsz9+11DpWDfxp+f/WDV1ONuznu+/9bSr26sZAAAA/qsKEbErksLESrpQmJio/Q3/3thRKM8vLD59av7983O1ZwTGYriQ3+karbsfOpVN6/P8dFP+aHbf+Ivi9mp+Yna+PNfv4GHA7WzT/1N/FvvdOmDTeV4LBpf+D4NL/4fBpf/D4GrR/7f3ox3A1mv1+/9RH9oBbL2m/m/ZDwaI+T8Mro30f98ZcHfo2JdHtq4dwJZa2B63fkheQmJNIgp3RDMkNinR728mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vg3AAD//5US5f8=") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x100000002) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000040)={[{@nobh}, {@nojournal_checksum}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x22c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x86c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x840, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x0, 0x4, 0x8, 0xffffffff, 0x2, 0xa, 0x1, 0x80, 0xffff8000, 0xffff, 0x3, 0x5, 0x7, 0x80, 0x5, 0xbecf, 0x80000001, 0x38000, 0x8, 0x0, 0xc, 0x7, 0x8, 0x3, 0x1, 0x9, 0x5, 0x9, 0x2, 0xb00e, 0x3, 0x10, 0x0, 0x9, 0x10001, 0x15fa, 0x7cc, 0xd5, 0x47d, 0x6, 0x9, 0x9, 0x200, 0xf1, 0x3, 0xb7b1, 0x5, 0x30, 0x8, 0x7f, 0x3, 0x10001, 0x7, 0x10001, 0x7fffffff, 0x6, 0x4, 0x9, 0x7, 0xe17, 0x18000, 0x0, 0x4, 0xa36a, 0xc95d, 0xfffffb79, 0x52, 0x4, 0xa, 0x5, 0x0, 0x0, 0x5, 0x4, 0x4, 0x7, 0x6, 0xa9ac, 0x5, 0x6, 0x8, 0x6, 0x0, 0x9, 0x2, 0x0, 0x2d1, 0x2, 0xd636, 0x1, 0x0, 0x5, 0x382, 0x347f, 0x9e, 0x0, 0xb, 0x2, 0x2, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7, 0x8, 0xaa, 0x101, 0x8, 0xfffffff0, 0xff, 0x1, 0xb, 0x91, 0x6, 0x6d6, 0x0, 0x6c, 0xfffffffb, 0x24e018b5, 0x80, 0x81, 0x3, 0xf6, 0x80, 0x80000001, 0x9, 0x9, 0x1, 0xe, 0x6, 0xfd9, 0x4, 0xff, 0x328, 0x10001, 0x1, 0x8b, 0x0, 0x3, 0x7, 0xfff, 0x3a, 0x3, 0x6, 0x16fc, 0xfffffffe, 0x39, 0x6, 0x4, 0x3, 0x2b, 0x5, 0x9, 0x3, 0x3, 0xff, 0xde81, 0x9, 0x0, 0x1, 0x10, 0x9, 0x8, 0x10000, 0x40, 0x1, 0x2, 0x800, 0x200, 0x1, 0x4a18, 0x4, 0x9, 0x8000, 0x9, 0x800, 0x2, 0xe5b1, 0x1, 0x8, 0x2, 0x5, 0x5, 0x8, 0x5, 0x5, 0x9, 0x7, 0x7, 0x9, 0x3, 0x3, 0x9, 0x7ff, 0x5, 0x6, 0x10000, 0x0, 0x5, 0x81, 0xc, 0x1, 0xa, 0x9, 0x5, 0x10, 0xf9, 0x3, 0x3, 0xff, 0x3969, 0x0, 0x8, 0x5, 0x10, 0x3, 0x0, 0x5, 0x7f, 0x80000001, 0x200, 0x400, 0x3, 0xffffffff, 0x401, 0x0, 0x9c, 0x7, 0xd6, 0x2, 0xfff, 0x1069, 0x0, 0x6, 0xfffffffe, 0x4, 0x3, 0x4efe, 0x9c16, 0x8, 0x5, 0x9, 0x1, 0x4, 0xff7, 0x7, 0xe63, 0x3, 0x2, 0x6, 0x9, 0x8000, 0x6, 0xffff8001]}, @TCA_TBF_RATE64={0xc, 0x4, 0x7b66349e05b59aa}]}}]}, 0x86c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) 2m44.460824495s ago: executing program 0 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x44084, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0), 0x0, 0x40c0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) fcntl$lock(r3, 0x6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, r4}) prlimit64(0x0, 0x2, &(0x7f0000000140), 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) unshare(0x22020600) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000aacaa6fdbee78cfe00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) r10 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x4d299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r10, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000380)={r7, 0x4}, &(0x7f00000003c0)=0x8) 2m29.42202896s ago: executing program 32 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x44084, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0), 0x0, 0x40c0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) fcntl$lock(r3, 0x6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, r4}) prlimit64(0x0, 0x2, &(0x7f0000000140), 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) unshare(0x22020600) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000aacaa6fdbee78cfe00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) r10 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x4d299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r10, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000380)={r7, 0x4}, &(0x7f00000003c0)=0x8) 1.983315538s ago: executing program 2 (id=2599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4000000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0xf5ff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 1.207764131s ago: executing program 3 (id=2636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000009000000000000000000000000000000000000000000004a9f28455928e37dead0ce0f669546a63f1622773e667a30ca4e497efb9e01471c1c831bdfe9e63262b0371b4f0c7b79818c183668f4438adbb0f20b3c7d77ad905a844dbb62a4ab2d74b2fa801bbc0ce15c5577d7cf6a5c891114"], 0x50) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x133a000, 0x1000, 0xfffffff8, 0x3}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306050000000000000000000000000605000100070000002fedd6f34ea90a584c28febe180fba9f4c1b1cffae12bf014c"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1.189725341s ago: executing program 3 (id=2637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) name_to_handle_at(r3, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 1.173694301s ago: executing program 3 (id=2639): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000802800018023"], 0xe8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000802800018023"], 0xe8}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xac, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x4}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8011}, 0x4040005) 1.079439693s ago: executing program 2 (id=2640): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000}, 0x18) mq_open(&(0x7f0000000380)='B\x9f\x85\xb6\xa3\x8c\xc4}\x06\x10H?\xd7\xf7X\xfe\xf3\xd8\x86\xe0\xbb\x01@\x15\x95@=\x19\x04\xc8Ps,Ol~\x1d.M\xf4+\xdd\x9b\xd7\xedO\x06\x1a\x18y\x95\x95\xbd\t\xcca\xaf\xe1\xd0\v\xbb\xca\xeez\xb7\x95\xdbZR\xd9X\x9c\xd8>*5 \"\f\x06\x81\xbc\xd3\xc1\v\x90\x91\x87bS\x8b\xb5\xab^|\xc1\x12\xf0J\xd1h\xf8\xbf\xc4\x1d\xf3Y', 0x80, 0x32, &(0x7f0000000080)={0xecec, 0x2, 0x7fffffffffffffff, 0x2}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="030000005c43dda228598836b905e91a5ff30401", @ANYRES32, @ANYBLOB='/\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a000001050001000700007ad6"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 1.078784733s ago: executing program 2 (id=2641): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x34) sendmsg$can_raw(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x4000000) 948.136515ms ago: executing program 2 (id=2642): openat$uhid(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xca85}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000001880)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x9, 0x8000, 0x1000}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[{0x5, 0x3, 0x1, 0x4}, {0x2, 0x5, 0xa, 0x6}, {0x1, 0x4, 0x4, 0x3}, {0x1, 0x2, 0xc, 0x9}], 0x10, 0x3f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4, 0x0, 0x10000003}, 0x18) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 920.328236ms ago: executing program 3 (id=2643): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 919.751096ms ago: executing program 3 (id=2644): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101000, 0x0) mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xc}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x17}]}}]}, 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="83efffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 848.275807ms ago: executing program 4 (id=2646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = fsopen(&(0x7f0000000240)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000040)='/]{[,/$\x01\\[#@\\-^(}@!!\']{*:,##\x00', &(0x7f0000000080)='./file0\x00', r5) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x178, 0x394, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0xa}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 837.905737ms ago: executing program 4 (id=2647): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000009000000000000000000000000000000000000000000004a9f28455928e37dead0ce0f669546a63f1622773e667a30ca4e497efb9e01471c1c831bdfe9e63262b0371b4f0c7b79818c183668f4438adbb0f20b3c7d77ad905a844dbb62a4ab2d74b2fa801bbc0ce15c5577d7cf6a5c891114"], 0x50) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x133a000, 0x1000, 0xfffffff8, 0x3}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306050000000000000000000000000605000100070000002fedd6f34ea90a584c28febe180fba9f4c1b1cffae12bf014c"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 797.448057ms ago: executing program 4 (id=2648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) name_to_handle_at(r3, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 745.605048ms ago: executing program 4 (id=2649): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@nodioread_nolock}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") umount2(0x0, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mq_unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) write$binfmt_script(r0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20208}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 745.076998ms ago: executing program 3 (id=2650): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x6, 0x0) poll(&(0x7f0000000080), 0x0, 0x101) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100001900009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='sched_switch\x00', r7}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = io_uring_setup(0x4d1c, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 0x400000, 0x137}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r9, &(0x7f0000000340)=ANY=[], 0xff2e) close_range(r8, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000001819a1abfd34a06153f45f578890b4c1e08390b0456e7499382a41d92e3fc0886b0cc1375cab3d4bce1614aaffb98096f182ee35201e7c101955ad481b2f2fa4b0f0e926ce0b0a1659af2c8f768245076af9938c0e748d1c631713351169a1b86589c1fdc036f93ff132687b4aafe55be785223c99a418b69a4fde46edd503747c47e992d7a54e98d75a8272de5dc93fc226c8bd1eeaced8e0b04f68f847fbff7d5715db1935", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 683.069519ms ago: executing program 4 (id=2653): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp']) 682.116019ms ago: executing program 5 (id=2654): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 649.37881ms ago: executing program 5 (id=2655): ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) lchown(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r0], 0x54}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080bf10000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad846d701270a6f09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dc6e4edef5d2defd5ccae8d3fb7c27a1059ae31", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) syz_clone3(&(0x7f00000003c0)={0x101040000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r9 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r9, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r8, 0x5423, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) 510.306592ms ago: executing program 5 (id=2656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe, 0x0, 0x0, 0x500}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x4, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 464.704533ms ago: executing program 5 (id=2658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000009000000000000000000000000000000000000000000004a9f28455928e37dead0ce0f669546a63f1622773e667a30ca4e497efb9e01471c1c831bdfe9e63262b0371b4f0c7b79818c183668f4438adbb0f20b3c7d77ad905a844dbb62a4ab2d74b2fa801bbc0ce15c5577d7cf6a5c891114"], 0x50) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x133a000, 0x1000, 0xfffffff8, 0x3}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306050000000000000000000000000605000100070000002fedd6f34ea90a584c28febe180fba9f4c1b1cffae12bf014c"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 463.995183ms ago: executing program 5 (id=2660): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0xfff, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000280)) io_pgetevents(r1, 0x3, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={[0x2b]}, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x8040600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) socketpair(0x1, 0x20000000000001, 0x81, &(0x7f0000000100)) chdir(&(0x7f0000000540)='./cgroup\x00') r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000010000000000000060400000006000000000000e801000000060000000000000700000000080000000000000e0400000002000000005f300000000030000000b8424ceb8087c99fdee161b1be0d72f5c9c86f3328fbef68bc730400"/114], &(0x7f00000001c0)=""/48, 0x57, 0x30, 0x1, 0xfffffff9, 0x10000, @value=r2}, 0x28) unshare(0x100) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x4, 0x3}, {0x401, 0xfff}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x2, 0x0, 0x4, 0xb00, 0x7, 0x4, 0xa7f5}}) 396.516314ms ago: executing program 5 (id=2661): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000440)="01000000026f2600004a7f2c0387e3bae99c13f2e96a9973cfb1d22f55abf27ca21803975268fd2e9eb555b6bd52005e19f3fe4aaf08e7008cac0e6326", 0x3d, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000740)={0x800006dc, 0x0, 0xfffffff9, 0x3, 0x0, "1012a2c2e0d997451fe550bd026388080d00"}) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000040)=0xa) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x7ffffe, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x1, 0x1000, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x300}}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0xff, 0x3, 0xb, 0xb80}]}) 396.071424ms ago: executing program 4 (id=2662): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x260100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fsopen(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 274.403026ms ago: executing program 1 (id=2665): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 235.739746ms ago: executing program 1 (id=2666): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 153.505468ms ago: executing program 1 (id=2667): r0 = socket(0x10, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 153.200378ms ago: executing program 1 (id=2668): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) name_to_handle_at(r2, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 119.943038ms ago: executing program 1 (id=2669): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x5212, &(0x7f0000000580)={0x0, 0xd146, 0x40, 0x3, 0x3bb}) 55.36021ms ago: executing program 2 (id=2670): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000009000000000000000000000000000000000000000000004a9f28455928e37dead0ce0f669546a63f1622773e667a30ca4e497efb9e01471c1c831bdfe9e63262b0371b4f0c7b79818c183668f4438adbb0f20b3c7d77ad905a844dbb62a4ab2d74b2fa801bbc0ce15c5577d7cf6a5c891114"], 0x50) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x133a000, 0x1000, 0xfffffff8, 0x3}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306050000000000000000000000000605000100070000002fedd6f34ea90a584c28febe180fba9f4c1b1cffae12bf014c"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1.35835ms ago: executing program 2 (id=2671): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x1104, 0x0, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 0s ago: executing program 1 (id=2672): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0xd) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="syz.4.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 170.824000][ T29] audit: type=1326 audit(2000000029.510:12416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="syz.4.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 170.847598][ T29] audit: type=1326 audit(2000000029.510:12417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="syz.4.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 170.871445][ T29] audit: type=1326 audit(2000000029.510:12418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="syz.4.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 170.915358][ T8106] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 170.924295][ T29] audit: type=1400 audit(2000000029.760:12419): avc: denied { write } for pid=8121 comm="syz.4.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 170.924504][ T8106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 170.964961][ T8106] System zones: 0-2, 18-18, 34-34 [ 170.971782][ T8106] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 171.026525][ T8106] EXT4-fs (loop3): 1 truncate cleaned up [ 171.032832][ T8106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.105147][ T8128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.123795][ T8128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.151089][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.200639][ T8133] loop3: detected capacity change from 0 to 512 [ 171.232944][ T8133] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 171.246125][ T8133] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.292587][ T8133] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 171.338505][ T8133] EXT4-fs (loop3): 1 truncate cleaned up [ 171.368267][ T8133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.412675][ T8133] EXT4-fs error (device loop3): __ext4_iget:5004: inode #12: block 2: comm syz.3.1644: invalid block [ 171.444325][ T8133] EXT4-fs (loop3): Remounting filesystem read-only [ 171.481629][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.813032][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1650'. [ 171.822049][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1650'. [ 171.878087][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1650'. [ 172.595612][ T8166] loop3: detected capacity change from 0 to 512 [ 172.596366][ T8168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1657'. [ 172.612036][ T8166] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.1655: corrupted in-inode xattr: invalid ea_ino [ 172.627552][ T8166] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1655: couldn't read orphan inode 15 (err -117) [ 172.640936][ T8166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.749283][ T8180] FAULT_INJECTION: forcing a failure. [ 172.749283][ T8180] name failslab, interval 1, probability 0, space 0, times 0 [ 172.762048][ T8180] CPU: 0 UID: 0 PID: 8180 Comm: syz.5.1662 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 172.762081][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.762131][ T8180] Call Trace: [ 172.762137][ T8180] [ 172.762143][ T8180] dump_stack_lvl+0xf6/0x150 [ 172.762171][ T8180] dump_stack+0x15/0x1a [ 172.762190][ T8180] should_fail_ex+0x261/0x270 [ 172.762217][ T8180] should_failslab+0x8f/0xb0 [ 172.762326][ T8180] __kmalloc_cache_noprof+0x55/0x320 [ 172.762352][ T8180] ? tcf_block_get_ext+0x19f/0xbb0 [ 172.762379][ T8180] tcf_block_get_ext+0x19f/0xbb0 [ 172.762403][ T8180] tcf_block_get+0x6b/0xa0 [ 172.762472][ T8180] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 172.762504][ T8180] cake_init+0x150/0x4b0 [ 172.762540][ T8180] ? qdisc_alloc+0x3d1/0x450 [ 172.762567][ T8180] ? __pfx_cake_init+0x10/0x10 [ 172.762674][ T8180] qdisc_create+0x541/0x930 [ 172.762720][ T8180] tc_modify_qdisc+0xe13/0x14d0 [ 172.762769][ T8180] ? ns_capable+0x7d/0xb0 [ 172.762793][ T8180] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 172.762844][ T8180] rtnetlink_rcv_msg+0x6b7/0x740 [ 172.762885][ T8180] ? avc_has_perm_noaudit+0x1cc/0x210 [ 172.762922][ T8180] netlink_rcv_skb+0x12f/0x230 [ 172.762949][ T8180] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 172.763032][ T8180] rtnetlink_rcv+0x1c/0x30 [ 172.763063][ T8180] netlink_unicast+0x605/0x6c0 [ 172.763092][ T8180] netlink_sendmsg+0x609/0x720 [ 172.763181][ T8180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.763211][ T8180] __sock_sendmsg+0x140/0x180 [ 172.763266][ T8180] ____sys_sendmsg+0x350/0x4e0 [ 172.763301][ T8180] __sys_sendmsg+0x1a0/0x240 [ 172.763353][ T8180] __x64_sys_sendmsg+0x46/0x50 [ 172.763385][ T8180] x64_sys_call+0x26f3/0x2e10 [ 172.763432][ T8180] do_syscall_64+0xc9/0x1c0 [ 172.763466][ T8180] ? clear_bhb_loop+0x25/0x80 [ 172.763501][ T8180] ? clear_bhb_loop+0x25/0x80 [ 172.763529][ T8180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.763633][ T8180] RIP: 0033:0x7f03fbd8d169 [ 172.763651][ T8180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.763678][ T8180] RSP: 002b:00007f03fa3f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.763701][ T8180] RAX: ffffffffffffffda RBX: 00007f03fbfa5fa0 RCX: 00007f03fbd8d169 [ 172.763723][ T8180] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000007 [ 172.763737][ T8180] RBP: 00007f03fa3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.763752][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.763767][ T8180] R13: 0000000000000000 R14: 00007f03fbfa5fa0 R15: 00007fff537bada8 [ 172.763790][ T8180] [ 173.256800][ T8189] netlink: 'syz.5.1663': attribute type 27 has an invalid length. [ 173.327565][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.664559][ T8196] FAULT_INJECTION: forcing a failure. [ 173.664559][ T8196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.677767][ T8196] CPU: 1 UID: 0 PID: 8196 Comm: syz.4.1668 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 173.677798][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.677811][ T8196] Call Trace: [ 173.677817][ T8196] [ 173.677893][ T8196] dump_stack_lvl+0xf6/0x150 [ 173.677922][ T8196] dump_stack+0x15/0x1a [ 173.677998][ T8196] should_fail_ex+0x261/0x270 [ 173.678029][ T8196] should_fail+0xb/0x10 [ 173.678058][ T8196] should_fail_usercopy+0x1a/0x20 [ 173.678124][ T8196] _copy_from_user+0x1c/0xa0 [ 173.678156][ T8196] kstrtouint_from_user+0x84/0x100 [ 173.678183][ T8196] ? 0xffffffff81000000 [ 173.678196][ T8196] ? selinux_file_permission+0x22d/0x360 [ 173.678244][ T8196] proc_fail_nth_write+0x54/0x160 [ 173.678306][ T8196] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 173.678381][ T8196] vfs_write+0x295/0x950 [ 173.678415][ T8196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.678455][ T8196] ? __fget_files+0x186/0x1c0 [ 173.678494][ T8196] ksys_write+0xeb/0x1b0 [ 173.678651][ T8196] __x64_sys_write+0x42/0x50 [ 173.678681][ T8196] x64_sys_call+0x2a45/0x2e10 [ 173.678704][ T8196] do_syscall_64+0xc9/0x1c0 [ 173.678733][ T8196] ? clear_bhb_loop+0x25/0x80 [ 173.678800][ T8196] ? clear_bhb_loop+0x25/0x80 [ 173.678827][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.678852][ T8196] RIP: 0033:0x7f43e89fbc1f [ 173.678866][ T8196] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 173.678963][ T8196] RSP: 002b:00007f43e705f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 173.678982][ T8196] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f43e89fbc1f [ 173.678997][ T8196] RDX: 0000000000000001 RSI: 00007f43e705f0a0 RDI: 0000000000000007 [ 173.679012][ T8196] RBP: 00007f43e705f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.679026][ T8196] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 173.679038][ T8196] R13: 0000000000000000 R14: 00007f43e8c15fa0 R15: 00007fff591498f8 [ 173.679111][ T8196] [ 173.960100][ T8208] FAULT_INJECTION: forcing a failure. [ 173.960100][ T8208] name failslab, interval 1, probability 0, space 0, times 0 [ 173.972967][ T8208] CPU: 0 UID: 0 PID: 8208 Comm: syz.4.1672 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 173.973053][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.973067][ T8208] Call Trace: [ 173.973074][ T8208] [ 173.973082][ T8208] dump_stack_lvl+0xf6/0x150 [ 173.973142][ T8208] dump_stack+0x15/0x1a [ 173.973162][ T8208] should_fail_ex+0x261/0x270 [ 173.973193][ T8208] should_failslab+0x8f/0xb0 [ 173.973230][ T8208] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 173.973298][ T8208] ? sidtab_sid2str_get+0xb8/0x140 [ 173.973319][ T8208] ? vsnprintf+0x84d/0x8a0 [ 173.973419][ T8208] kmemdup_noprof+0x2b/0x70 [ 173.973442][ T8208] sidtab_sid2str_get+0xb8/0x140 [ 173.973464][ T8208] security_sid_to_context_core+0x1eb/0x2f0 [ 173.973487][ T8208] security_sid_to_context+0x27/0x30 [ 173.973509][ T8208] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 173.973533][ T8208] security_lsmprop_to_secctx+0x40/0x80 [ 173.973564][ T8208] audit_log_task_context+0x7a/0x180 [ 173.973591][ T8208] audit_log_task+0xfb/0x250 [ 173.973618][ T8208] audit_seccomp+0x68/0x130 [ 173.973640][ T8208] __seccomp_filter+0x694/0x10e0 [ 173.973713][ T8208] ? save_fpregs_to_fpstate+0xff/0x160 [ 173.973813][ T8208] ? _raw_spin_unlock+0x26/0x50 [ 173.973837][ T8208] __secure_computing+0x7e/0x160 [ 173.973947][ T8208] syscall_trace_enter+0xcf/0x1f0 [ 173.973977][ T8208] do_syscall_64+0xaa/0x1c0 [ 173.974009][ T8208] ? clear_bhb_loop+0x25/0x80 [ 173.974036][ T8208] ? clear_bhb_loop+0x25/0x80 [ 173.974072][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.974092][ T8208] RIP: 0033:0x7f43e89fbb7c [ 173.974105][ T8208] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 173.974126][ T8208] RSP: 002b:00007f43e705f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.974218][ T8208] RAX: ffffffffffffffda RBX: 00007f43e8c15fa0 RCX: 00007f43e89fbb7c [ 173.974232][ T8208] RDX: 000000000000000f RSI: 00007f43e705f0a0 RDI: 0000000000000006 [ 173.974246][ T8208] RBP: 00007f43e705f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.974260][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.974274][ T8208] R13: 0000000000000000 R14: 00007f43e8c15fa0 R15: 00007fff591498f8 [ 173.974297][ T8208] [ 174.259010][ T8206] sit0: entered promiscuous mode [ 174.264219][ T8206] netlink: 'syz.5.1669': attribute type 1 has an invalid length. [ 174.272126][ T8206] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1669'. [ 174.282918][ T8206] netlink: 'syz.5.1669': attribute type 1 has an invalid length. [ 174.298222][ T8206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.395677][ T8206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.526288][ T8206] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 174.562817][ T8228] loop3: detected capacity change from 0 to 512 [ 174.572497][ T8228] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.1676: corrupted in-inode xattr: invalid ea_ino [ 174.572751][ T8206] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 174.586164][ T8228] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1676: couldn't read orphan inode 15 (err -117) [ 174.608547][ T8228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.643370][ T3383] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 174.669611][ T3383] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 175.219429][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.364289][ T3383] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 175.436864][ T3383] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 175.652567][ T8262] Set syz1 is full, maxelem 65536 reached [ 175.658016][ T8275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1698'. [ 175.680988][ T8275] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode broadcast(3) [ 175.760564][ T8284] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 175.770200][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 175.770217][ T29] audit: type=1326 audit(2000000034.610:12838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 175.900233][ T29] audit: type=1326 audit(2000000034.610:12839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 175.923808][ T29] audit: type=1326 audit(2000000034.610:12840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 175.947340][ T29] audit: type=1326 audit(2000000034.610:12841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 175.970785][ T29] audit: type=1326 audit(2000000034.610:12842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 175.994278][ T29] audit: type=1326 audit(2000000034.610:12843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 176.017724][ T29] audit: type=1326 audit(2000000034.610:12844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 176.041262][ T29] audit: type=1326 audit(2000000034.610:12845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 176.064709][ T29] audit: type=1326 audit(2000000034.610:12846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 176.088319][ T29] audit: type=1326 audit(2000000034.610:12847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 176.171082][ T8299] FAULT_INJECTION: forcing a failure. [ 176.171082][ T8299] name failslab, interval 1, probability 0, space 0, times 0 [ 176.183870][ T8299] CPU: 0 UID: 0 PID: 8299 Comm: syz.1.1708 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 176.183902][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.183917][ T8299] Call Trace: [ 176.183924][ T8299] [ 176.183949][ T8299] dump_stack_lvl+0xf6/0x150 [ 176.183978][ T8299] dump_stack+0x15/0x1a [ 176.184077][ T8299] should_fail_ex+0x261/0x270 [ 176.184111][ T8299] should_failslab+0x8f/0xb0 [ 176.184159][ T8299] kmem_cache_alloc_noprof+0x59/0x340 [ 176.184186][ T8299] ? security_inode_alloc+0x37/0x100 [ 176.184225][ T8299] security_inode_alloc+0x37/0x100 [ 176.184262][ T8299] inode_init_always_gfp+0x4a2/0x4f0 [ 176.184361][ T8299] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 176.184386][ T8299] alloc_inode+0x86/0x170 [ 176.184473][ T8299] new_inode+0x1e/0xe0 [ 176.184550][ T8299] shmem_get_inode+0x24e/0x730 [ 176.184592][ T8299] shmem_mknod+0x44/0x180 [ 176.184613][ T8299] vfs_mknod+0x2d4/0x310 [ 176.184649][ T8299] unix_bind+0x32b/0x940 [ 176.184719][ T8299] __sys_bind+0x111/0x190 [ 176.184751][ T8299] __x64_sys_bind+0x41/0x50 [ 176.184776][ T8299] x64_sys_call+0x1e4a/0x2e10 [ 176.184841][ T8299] do_syscall_64+0xc9/0x1c0 [ 176.184910][ T8299] ? clear_bhb_loop+0x25/0x80 [ 176.184997][ T8299] ? clear_bhb_loop+0x25/0x80 [ 176.185021][ T8299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.185047][ T8299] RIP: 0033:0x7fcb26abd169 [ 176.185064][ T8299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.185097][ T8299] RSP: 002b:00007fcb25127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 176.185119][ T8299] RAX: ffffffffffffffda RBX: 00007fcb26cd5fa0 RCX: 00007fcb26abd169 [ 176.185144][ T8299] RDX: 000000000000006e RSI: 0000200000003000 RDI: 0000000000000003 [ 176.185159][ T8299] RBP: 00007fcb25127090 R08: 0000000000000000 R09: 0000000000000000 [ 176.185174][ T8299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.185188][ T8299] R13: 0000000000000000 R14: 00007fcb26cd5fa0 R15: 00007fff8577cca8 [ 176.185209][ T8299] [ 176.451356][ T8297] loop5: detected capacity change from 0 to 2048 [ 176.550597][ T8297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.582231][ T8297] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 176.614542][ T5567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.700822][ T8310] Set syz1 is full, maxelem 65536 reached [ 176.863482][ T8331] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.875534][ T8331] bond0: (slave lo): Error: Device type is different from other slaves [ 176.892518][ T8331] loop3: detected capacity change from 0 to 1024 [ 176.899499][ T8331] journal_path: Lookup failure for './file0' [ 176.905634][ T8331] EXT4-fs: error: could not find journal device path [ 177.008780][ T8344] 8021q: VLANs not supported on gre0 [ 177.024377][ T8344] sctp: [Deprecated]: syz.3.1722 (pid 8344) Use of int in max_burst socket option. [ 177.024377][ T8344] Use struct sctp_assoc_value instead [ 177.057007][ T8346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1723'. [ 177.413579][ T8352] Set syz1 is full, maxelem 65536 reached [ 177.446659][ T8359] loop3: detected capacity change from 0 to 128 [ 177.453393][ T8359] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.467321][ T8359] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.618479][ T8368] loop5: detected capacity change from 0 to 512 [ 177.630580][ T8370] loop3: detected capacity change from 0 to 512 [ 177.643167][ T8371] netlink: 'syz.1.1732': attribute type 27 has an invalid length. [ 177.652030][ T8368] EXT4-fs error (device loop5): ext4_orphan_get:1390: inode #15: comm syz.5.1734: casefold flag without casefold feature [ 177.673413][ T8368] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1734: couldn't read orphan inode 15 (err -117) [ 177.687455][ T8370] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1733: bg 0: block 5: invalid block bitmap [ 177.688749][ T8368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.734065][ T8370] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 177.744057][ T8370] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1733: invalid indirect mapped block 3 (level 2) [ 177.758914][ T8370] EXT4-fs (loop3): 2 truncates cleaned up [ 177.765625][ T8370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.780766][ T8370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.817882][ T8367] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1734'. [ 177.885638][ T5567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.781534][ T8406] FAULT_INJECTION: forcing a failure. [ 178.781534][ T8406] name failslab, interval 1, probability 0, space 0, times 0 [ 178.794377][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.2.1746 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 178.794411][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.794422][ T8406] Call Trace: [ 178.794430][ T8406] [ 178.794439][ T8406] dump_stack_lvl+0xf6/0x150 [ 178.794462][ T8406] dump_stack+0x15/0x1a [ 178.794481][ T8406] should_fail_ex+0x261/0x270 [ 178.794515][ T8406] should_failslab+0x8f/0xb0 [ 178.794545][ T8406] kmem_cache_alloc_noprof+0x59/0x340 [ 178.794566][ T8406] ? vm_area_dup+0x32/0x260 [ 178.794588][ T8406] vm_area_dup+0x32/0x260 [ 178.794611][ T8406] copy_mm+0x736/0x1360 [ 178.794652][ T8406] copy_process+0xcfc/0x1f60 [ 178.794690][ T8406] kernel_clone+0x168/0x5d0 [ 178.794714][ T8406] ? vfs_write+0x669/0x950 [ 178.794743][ T8406] __x64_sys_clone+0xe9/0x120 [ 178.794778][ T8406] x64_sys_call+0x2dc9/0x2e10 [ 178.794799][ T8406] do_syscall_64+0xc9/0x1c0 [ 178.794831][ T8406] ? clear_bhb_loop+0x25/0x80 [ 178.794862][ T8406] ? clear_bhb_loop+0x25/0x80 [ 178.794887][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.794909][ T8406] RIP: 0033:0x7f4631a0d169 [ 178.794923][ T8406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.794943][ T8406] RSP: 002b:00007f4630076fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 178.794966][ T8406] RAX: ffffffffffffffda RBX: 00007f4631c25fa0 RCX: 00007f4631a0d169 [ 178.794980][ T8406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040800000 [ 178.794995][ T8406] RBP: 00007f4630077090 R08: 0000000000000000 R09: 0000000000000000 [ 178.795009][ T8406] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 178.795024][ T8406] R13: 0000000000000000 R14: 00007f4631c25fa0 R15: 00007ffe428e4758 [ 178.795043][ T8406] [ 179.076107][ T8416] netlink: 'syz.3.1748': attribute type 27 has an invalid length. [ 180.271632][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1760'. [ 180.301051][ T8447] (unnamed net_device) (uninitialized): option mode: invalid value (71) [ 180.877231][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 180.877248][ T29] audit: type=1326 audit(2000000039.720:12974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 180.916353][ T8466] tun0: tun_chr_ioctl cmd 1074025675 [ 180.921696][ T8466] tun0: persist enabled [ 180.923998][ T29] audit: type=1326 audit(2000000039.750:12975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 180.949397][ T29] audit: type=1326 audit(2000000039.750:12976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 180.972988][ T29] audit: type=1326 audit(2000000039.750:12977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 180.996511][ T29] audit: type=1326 audit(2000000039.750:12978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 181.020018][ T29] audit: type=1326 audit(2000000039.750:12979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 181.043540][ T29] audit: type=1326 audit(2000000039.750:12980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 181.067064][ T29] audit: type=1326 audit(2000000039.750:12981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 181.090620][ T29] audit: type=1326 audit(2000000039.750:12982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 181.114285][ T29] audit: type=1326 audit(2000000039.750:12983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 181.140588][ T8467] pimreg: entered allmulticast mode [ 181.310622][ T8486] FAULT_INJECTION: forcing a failure. [ 181.310622][ T8486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.323890][ T8486] CPU: 0 UID: 0 PID: 8486 Comm: syz.5.1778 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 181.323917][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.323929][ T8486] Call Trace: [ 181.323936][ T8486] [ 181.324024][ T8486] dump_stack_lvl+0xf6/0x150 [ 181.324056][ T8486] dump_stack+0x15/0x1a [ 181.324072][ T8486] should_fail_ex+0x261/0x270 [ 181.324101][ T8486] should_fail+0xb/0x10 [ 181.324129][ T8486] should_fail_usercopy+0x1a/0x20 [ 181.324167][ T8486] _copy_from_user+0x1c/0xa0 [ 181.324210][ T8486] copy_msghdr_from_user+0x54/0x2b0 [ 181.324243][ T8486] ? __fget_files+0x186/0x1c0 [ 181.324266][ T8486] __sys_sendmsg+0x141/0x240 [ 181.324387][ T8486] __x64_sys_sendmsg+0x46/0x50 [ 181.324412][ T8486] x64_sys_call+0x26f3/0x2e10 [ 181.324437][ T8486] do_syscall_64+0xc9/0x1c0 [ 181.324473][ T8486] ? clear_bhb_loop+0x25/0x80 [ 181.324508][ T8486] ? clear_bhb_loop+0x25/0x80 [ 181.324533][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.324573][ T8486] RIP: 0033:0x7f03fbd8d169 [ 181.324666][ T8486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.324683][ T8486] RSP: 002b:00007f03fa3f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.324714][ T8486] RAX: ffffffffffffffda RBX: 00007f03fbfa5fa0 RCX: 00007f03fbd8d169 [ 181.324725][ T8486] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 181.324736][ T8486] RBP: 00007f03fa3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 181.324746][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.324756][ T8486] R13: 0000000000000000 R14: 00007f03fbfa5fa0 R15: 00007fff537bada8 [ 181.324775][ T8486] [ 182.049469][ T8493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.062042][ T8493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.896880][ T8553] loop5: detected capacity change from 0 to 128 [ 183.905452][ T8553] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.921086][ T8553] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.042408][ T8560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8560 comm=syz.4.1803 [ 184.147561][ T8568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1807'. [ 184.950423][ T8597] FAULT_INJECTION: forcing a failure. [ 184.950423][ T8597] name failslab, interval 1, probability 0, space 0, times 0 [ 184.963166][ T8597] CPU: 0 UID: 0 PID: 8597 Comm: syz.3.1819 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 184.963198][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.963211][ T8597] Call Trace: [ 184.963217][ T8597] [ 184.963225][ T8597] dump_stack_lvl+0xf6/0x150 [ 184.963269][ T8597] dump_stack+0x15/0x1a [ 184.963313][ T8597] should_fail_ex+0x261/0x270 [ 184.963339][ T8597] should_failslab+0x8f/0xb0 [ 184.963385][ T8597] kmem_cache_alloc_noprof+0x59/0x340 [ 184.963412][ T8597] ? audit_log_start+0x37f/0x6e0 [ 184.963440][ T8597] audit_log_start+0x37f/0x6e0 [ 184.963530][ T8597] ? audit_log_end+0x1d0/0x1e0 [ 184.963563][ T8597] audit_seccomp+0x4b/0x130 [ 184.963627][ T8597] __seccomp_filter+0x694/0x10e0 [ 184.963672][ T8597] ? get_random_bytes_user+0x27e/0x290 [ 184.963791][ T8597] ? vfs_write+0x669/0x950 [ 184.963828][ T8597] __secure_computing+0x7e/0x160 [ 184.963936][ T8597] syscall_trace_enter+0xcf/0x1f0 [ 184.964070][ T8597] ? fpregs_assert_state_consistent+0x83/0xa0 [ 184.964123][ T8597] do_syscall_64+0xaa/0x1c0 [ 184.964192][ T8597] ? clear_bhb_loop+0x25/0x80 [ 184.964290][ T8597] ? clear_bhb_loop+0x25/0x80 [ 184.964378][ T8597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.964403][ T8597] RIP: 0033:0x7f74a982bb7c [ 184.964421][ T8597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 184.964442][ T8597] RSP: 002b:00007f74a7e8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.964512][ T8597] RAX: ffffffffffffffda RBX: 00007f74a9a45fa0 RCX: 00007f74a982bb7c [ 184.964524][ T8597] RDX: 000000000000000f RSI: 00007f74a7e8f0a0 RDI: 0000000000000005 [ 184.964538][ T8597] RBP: 00007f74a7e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 184.964552][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.964565][ T8597] R13: 0000000000000000 R14: 00007f74a9a45fa0 R15: 00007ffe12c7db78 [ 184.964637][ T8597] [ 185.334943][ T8609] hub 9-0:1.0: USB hub found [ 185.339640][ T8609] hub 9-0:1.0: 8 ports detected [ 185.344503][ T8609] FAULT_INJECTION: forcing a failure. [ 185.344503][ T8609] name failslab, interval 1, probability 0, space 0, times 0 [ 185.357273][ T8609] CPU: 0 UID: 0 PID: 8609 Comm: syz.4.1825 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 185.357349][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.357364][ T8609] Call Trace: [ 185.357372][ T8609] [ 185.357381][ T8609] dump_stack_lvl+0xf6/0x150 [ 185.357409][ T8609] dump_stack+0x15/0x1a [ 185.357428][ T8609] should_fail_ex+0x261/0x270 [ 185.357475][ T8609] should_failslab+0x8f/0xb0 [ 185.357565][ T8609] __kmalloc_noprof+0xad/0x410 [ 185.357598][ T8609] ? usb_alloc_urb+0x3f/0xd0 [ 185.357638][ T8609] usb_alloc_urb+0x3f/0xd0 [ 185.357668][ T8609] usb_control_msg+0xd4/0x250 [ 185.357750][ T8609] usb_get_status+0xd1/0x1b0 [ 185.357774][ T8609] hub_probe+0xf05/0x1650 [ 185.357799][ T8609] usb_probe_interface+0x468/0x6b0 [ 185.357828][ T8609] ? __pfx_usb_probe_interface+0x10/0x10 [ 185.357856][ T8609] really_probe+0x1cf/0x5d0 [ 185.357949][ T8609] __driver_probe_device+0x12d/0x200 [ 185.357998][ T8609] driver_probe_device+0x38/0x2f0 [ 185.358027][ T8609] __device_attach_driver+0x216/0x320 [ 185.358067][ T8609] ? __pfx___device_attach_driver+0x10/0x10 [ 185.358097][ T8609] bus_for_each_drv+0x1cf/0x250 [ 185.358135][ T8609] __device_attach+0x1d6/0x2b0 [ 185.358171][ T8609] device_attach+0x17/0x20 [ 185.358194][ T8609] proc_ioctl+0x343/0x420 [ 185.358233][ T8609] usbdev_ioctl+0x1dd6/0x3e70 [ 185.358273][ T8609] ? do_vfs_ioctl+0x977/0x1570 [ 185.358321][ T8609] ? selinux_file_ioctl+0x2f9/0x380 [ 185.358344][ T8609] ? __fget_files+0x186/0x1c0 [ 185.358417][ T8609] ? __pfx_usbdev_ioctl+0x10/0x10 [ 185.358509][ T8609] __se_sys_ioctl+0xc9/0x140 [ 185.358542][ T8609] __x64_sys_ioctl+0x43/0x50 [ 185.358574][ T8609] x64_sys_call+0x168d/0x2e10 [ 185.358650][ T8609] do_syscall_64+0xc9/0x1c0 [ 185.358687][ T8609] ? clear_bhb_loop+0x25/0x80 [ 185.358731][ T8609] ? clear_bhb_loop+0x25/0x80 [ 185.358758][ T8609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.358811][ T8609] RIP: 0033:0x7f43e89fd169 [ 185.358829][ T8609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.358885][ T8609] RSP: 002b:00007f43e705f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.358908][ T8609] RAX: ffffffffffffffda RBX: 00007f43e8c15fa0 RCX: 00007f43e89fd169 [ 185.358923][ T8609] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 185.358937][ T8609] RBP: 00007f43e705f090 R08: 0000000000000000 R09: 0000000000000000 [ 185.358952][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.359004][ T8609] R13: 0000000000000000 R14: 00007f43e8c15fa0 R15: 00007fff591498f8 [ 185.359040][ T8609] [ 185.359054][ T8609] hub 9-0:1.0: config failed, can't get hub status (err -5) [ 185.720429][ T8626] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1831'. [ 186.054114][ T8648] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 186.060752][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.068291][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 186.075893][ T8648] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 186.082593][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.090205][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 186.097670][ T8648] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.127614][ T8648] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 186.134293][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.141761][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 186.161871][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 186.161886][ T29] audit: type=1326 audit(2000000044.990:13284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 186.191934][ T29] audit: type=1326 audit(2000000044.990:13285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 186.215498][ T29] audit: type=1326 audit(2000000044.990:13286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 186.221143][ T8657] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 186.239075][ T29] audit: type=1326 audit(2000000044.990:13287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 186.245549][ T8657] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.245676][ T8657] vhci_hcd vhci_hcd.0: Device attached [ 186.268949][ T29] audit: type=1326 audit(2000000044.990:13288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 186.305365][ T29] audit: type=1326 audit(2000000044.990:13289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 186.328831][ T29] audit: type=1326 audit(2000000044.990:13290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 186.352509][ T29] audit: type=1326 audit(2000000044.990:13291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 186.375974][ T29] audit: type=1326 audit(2000000044.990:13292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 186.399823][ T29] audit: type=1326 audit(2000000044.990:13293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 186.411185][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 186.432300][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 186.443294][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 186.455187][ T8648] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(24) [ 186.461813][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 186.469495][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 186.498920][ T8657] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.509186][ T8657] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.578002][ T8662] vhci_hcd: connection closed [ 186.578096][ T8658] vhci_hcd: connection closed [ 186.582868][ T8649] vhci_hcd: connection closed [ 186.583196][ T8651] vhci_hcd: connection closed [ 186.588485][ T57] vhci_hcd: stop threads [ 186.592468][ T8655] vhci_hcd: connection closed [ 186.596984][ T57] vhci_hcd: release socket [ 186.597001][ T57] vhci_hcd: disconnect device [ 186.625549][ T57] vhci_hcd: stop threads [ 186.629856][ T57] vhci_hcd: release socket [ 186.634287][ T57] vhci_hcd: disconnect device [ 186.643757][ T57] vhci_hcd: stop threads [ 186.648215][ T57] vhci_hcd: release socket [ 186.652643][ T57] vhci_hcd: disconnect device [ 186.676912][ T57] vhci_hcd: stop threads [ 186.681198][ T57] vhci_hcd: release socket [ 186.685737][ T57] vhci_hcd: disconnect device [ 186.712759][ T57] vhci_hcd: stop threads [ 186.717198][ T57] vhci_hcd: release socket [ 186.721760][ T57] vhci_hcd: disconnect device [ 186.857670][ T8678] loop5: detected capacity change from 0 to 2048 [ 187.080919][ T8678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.110255][ T8678] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 187.486145][ T5567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.013169][ T8709] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 188.102282][ T8716] syzkaller1: entered promiscuous mode [ 188.107887][ T8716] syzkaller1: entered allmulticast mode [ 189.477132][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1870'. [ 189.508633][ T8743] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1871'. [ 189.583337][ T8748] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 189.802918][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1881'. [ 189.807581][ T8761] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.820946][ T8763] netlink: 'syz.1.1878': attribute type 21 has an invalid length. [ 189.834511][ T8766] 8021q: adding VLAN 0 to HW filter on device team1 [ 189.850177][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1883'. [ 189.913260][ T8766] ipvlan2: entered promiscuous mode [ 189.918615][ T8766] ipvlan2: entered allmulticast mode [ 189.924027][ T8766] bridge0: entered allmulticast mode [ 189.931404][ T8766] batman_adv: batadv0: Adding interface: ipvlan2 [ 189.937813][ T8766] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.963329][ T8766] batman_adv: batadv0: Interface activated: ipvlan2 [ 190.010160][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1887'. [ 190.019630][ T8775] hub 9-0:1.0: USB hub found [ 190.024332][ T8775] hub 9-0:1.0: 8 ports detected [ 190.060890][ T8785] ucma_write: process 1018 (syz.1.1889) changed security contexts after opening file descriptor, this is not allowed. [ 190.075919][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 190.769527][ T8804] SELinux: ebitmap: truncated map [ 190.780379][ T8804] SELinux: failed to load policy [ 191.168584][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 191.168599][ T29] audit: type=1326 audit(2000000051.005:13565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 191.234879][ T29] audit: type=1326 audit(2000000051.005:13566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 191.258573][ T29] audit: type=1326 audit(2000000051.045:13567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 191.282158][ T29] audit: type=1326 audit(2000000051.055:13568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 191.305758][ T29] audit: type=1326 audit(2000000051.055:13569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 191.329332][ T29] audit: type=1326 audit(2000000051.055:13570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 191.352868][ T29] audit: type=1326 audit(2000000051.055:13571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 191.376388][ T29] audit: type=1326 audit(2000000051.065:13572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 191.400054][ T29] audit: type=1326 audit(2000000051.065:13573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 191.423651][ T29] audit: type=1326 audit(2000000051.065:13574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 191.776779][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 192.023549][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 192.032655][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 192.130314][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 194.801543][ T8933] 9p: Unknown access argument j: -22 [ 195.013269][ T8952] FAULT_INJECTION: forcing a failure. [ 195.013269][ T8952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.026414][ T8952] CPU: 1 UID: 0 PID: 8952 Comm: syz.5.1952 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 195.026441][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.026452][ T8952] Call Trace: [ 195.026458][ T8952] [ 195.026465][ T8952] dump_stack_lvl+0xf6/0x150 [ 195.026566][ T8952] dump_stack+0x15/0x1a [ 195.026582][ T8952] should_fail_ex+0x261/0x270 [ 195.026609][ T8952] should_fail+0xb/0x10 [ 195.026656][ T8952] should_fail_usercopy+0x1a/0x20 [ 195.026690][ T8952] fpu__restore_sig+0x124/0xaa0 [ 195.026781][ T8952] restore_sigcontext+0x1ba/0x230 [ 195.026820][ T8952] __do_sys_rt_sigreturn+0x112/0x180 [ 195.026962][ T8952] x64_sys_call+0x2b49/0x2e10 [ 195.027059][ T8952] do_syscall_64+0xc9/0x1c0 [ 195.027153][ T8952] ? clear_bhb_loop+0x25/0x80 [ 195.027179][ T8952] ? clear_bhb_loop+0x25/0x80 [ 195.027223][ T8952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.027248][ T8952] RIP: 0033:0x7f03fbd8d167 [ 195.027305][ T8952] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 195.027387][ T8952] RSP: 002b:00007f03fa3f7038 EFLAGS: 00000246 [ 195.027403][ T8952] RAX: 0000000000000013 RBX: 00007f03fbfa5fa0 RCX: 00007f03fbd8d169 [ 195.027486][ T8952] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 195.027500][ T8952] RBP: 00007f03fa3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.027514][ T8952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.027528][ T8952] R13: 0000000000000000 R14: 00007f03fbfa5fa0 R15: 00007fff537bada8 [ 195.027548][ T8952] [ 196.614211][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 196.614226][ T29] audit: type=1326 audit(2000000056.445:13756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 196.668776][ T29] audit: type=1326 audit(2000000056.485:13757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 196.692434][ T29] audit: type=1326 audit(2000000056.485:13758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 196.716052][ T29] audit: type=1326 audit(2000000056.485:13759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 196.739543][ T29] audit: type=1326 audit(2000000056.485:13760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 196.763261][ T29] audit: type=1326 audit(2000000056.485:13761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 196.786694][ T29] audit: type=1326 audit(2000000056.485:13762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 196.810213][ T29] audit: type=1326 audit(2000000056.485:13763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 196.833730][ T29] audit: type=1326 audit(2000000056.485:13764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 196.857313][ T29] audit: type=1326 audit(2000000056.485:13765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 196.971142][ T9012] FAULT_INJECTION: forcing a failure. [ 196.971142][ T9012] name failslab, interval 1, probability 0, space 0, times 0 [ 196.983885][ T9012] CPU: 0 UID: 0 PID: 9012 Comm: syz.1.1972 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 196.983913][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.983925][ T9012] Call Trace: [ 196.983931][ T9012] [ 196.983981][ T9012] dump_stack_lvl+0xf6/0x150 [ 196.984076][ T9012] dump_stack+0x15/0x1a [ 196.984097][ T9012] should_fail_ex+0x261/0x270 [ 196.984126][ T9012] should_failslab+0x8f/0xb0 [ 196.984180][ T9012] __kmalloc_cache_noprof+0x55/0x320 [ 196.984205][ T9012] ? add_modify_gid+0xec/0x590 [ 196.984229][ T9012] add_modify_gid+0xec/0x590 [ 196.984254][ T9012] __ib_cache_gid_add+0x16a/0x230 [ 196.984328][ T9012] ? ref_tracker_alloc+0x1ff/0x310 [ 196.984359][ T9012] ib_cache_gid_set_default_gid+0x47f/0x4f0 [ 196.984404][ T9012] enum_all_gids_of_dev_cb+0x24b/0x320 [ 196.984435][ T9012] ib_enum_roce_netdev+0x148/0x1d0 [ 196.984468][ T9012] ? __pfx_enum_all_gids_of_dev_cb+0x10/0x10 [ 196.984496][ T9012] ? __pfx_pass_all_filter+0x10/0x10 [ 196.984585][ T9012] rdma_roce_rescan_device+0x28/0x30 [ 196.984604][ T9012] ib_cache_setup_one+0x279/0x380 [ 196.984693][ T9012] ib_register_device+0x9dd/0xc80 [ 196.984729][ T9012] rxe_register_device+0x175/0x190 [ 196.984756][ T9012] rxe_add+0x89e/0x8c0 [ 196.984817][ T9012] rxe_net_add+0x5b/0xa0 [ 196.984851][ T9012] rxe_newlink+0xc7/0x180 [ 196.984871][ T9012] nldev_newlink+0x36c/0x3f0 [ 196.984987][ T9012] ? __pfx_nldev_newlink+0x10/0x10 [ 196.985020][ T9012] rdma_nl_rcv+0x48a/0x5b0 [ 196.985040][ T9012] ? should_fail_ex+0xd7/0x270 [ 196.985143][ T9012] netlink_unicast+0x605/0x6c0 [ 196.985169][ T9012] netlink_sendmsg+0x609/0x720 [ 196.985202][ T9012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.985251][ T9012] __sock_sendmsg+0x140/0x180 [ 196.985292][ T9012] ____sys_sendmsg+0x350/0x4e0 [ 196.985328][ T9012] __sys_sendmsg+0x1a0/0x240 [ 196.985373][ T9012] __x64_sys_sendmsg+0x46/0x50 [ 196.985407][ T9012] x64_sys_call+0x26f3/0x2e10 [ 196.985514][ T9012] do_syscall_64+0xc9/0x1c0 [ 196.985561][ T9012] ? clear_bhb_loop+0x25/0x80 [ 196.985586][ T9012] ? clear_bhb_loop+0x25/0x80 [ 196.985612][ T9012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.985710][ T9012] RIP: 0033:0x7fcb26abd169 [ 196.985725][ T9012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.985743][ T9012] RSP: 002b:00007fcb25127038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.985765][ T9012] RAX: ffffffffffffffda RBX: 00007fcb26cd5fa0 RCX: 00007fcb26abd169 [ 196.985779][ T9012] RDX: 0000000004004052 RSI: 0000200000000300 RDI: 0000000000000011 [ 196.985793][ T9012] RBP: 00007fcb25127090 R08: 0000000000000000 R09: 0000000000000000 [ 196.985805][ T9012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.985817][ T9012] R13: 0000000000000000 R14: 00007fcb26cd5fa0 R15: 00007fff8577cca8 [ 196.985840][ T9012] [ 197.269897][ T9012] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:aaaa:aa00:01aa:aa30 error=-12 [ 197.442633][ T9012] infiniband syz1: set down [ 197.447367][ T9012] infiniband syz1: added ipvlan0 [ 197.552716][ T9012] RDS/IB: syz1: added [ 197.605051][ T9012] smc: adding ib device syz1 with port count 1 [ 197.625047][ T9012] smc: ib device syz1 port 1 has pnetid [ 198.187764][ T9044] netlink: 'syz.5.1982': attribute type 27 has an invalid length. [ 198.202356][ T9044] sit0: left promiscuous mode [ 198.263909][ T9044] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 198.281229][ T9044] ipvlan2: left promiscuous mode [ 198.286276][ T9044] ipvlan2: left allmulticast mode [ 198.291322][ T9044] bridge0: left allmulticast mode [ 198.984735][ T9079] Invalid ELF header magic: != ELF [ 198.987480][ T9012] syz.1.1972 (9012) used greatest stack depth: 9768 bytes left [ 199.622850][ T9089] netlink: 'syz.1.1999': attribute type 27 has an invalid length. [ 199.649538][ T9091] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 199.790647][ T9094] syz.2.2002: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 199.805300][ T9094] CPU: 1 UID: 0 PID: 9094 Comm: syz.2.2002 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 199.805369][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.805384][ T9094] Call Trace: [ 199.805391][ T9094] [ 199.805397][ T9094] dump_stack_lvl+0xf6/0x150 [ 199.805424][ T9094] dump_stack+0x15/0x1a [ 199.805444][ T9094] warn_alloc+0x145/0x1b0 [ 199.805499][ T9094] ? __vmalloc_node_range_noprof+0x8a/0xe80 [ 199.805530][ T9094] __vmalloc_node_range_noprof+0xac/0xe80 [ 199.805581][ T9094] ? __perf_event_task_sched_in+0xa1b/0xa80 [ 199.805615][ T9094] ? _raw_spin_unlock+0x26/0x50 [ 199.805634][ T9094] ? should_fail_ex+0x31/0x270 [ 199.805662][ T9094] ? should_failslab+0x8f/0xb0 [ 199.805703][ T9094] vmalloc_user_noprof+0x59/0x70 [ 199.805757][ T9094] ? xskq_create+0x79/0xd0 [ 199.805790][ T9094] xskq_create+0x79/0xd0 [ 199.805824][ T9094] xsk_init_queue+0x82/0xd0 [ 199.805854][ T9094] xsk_setsockopt+0x37d/0x550 [ 199.805958][ T9094] ? __pfx_xsk_setsockopt+0x10/0x10 [ 199.805989][ T9094] __sys_setsockopt+0x187/0x200 [ 199.806067][ T9094] __x64_sys_setsockopt+0x66/0x80 [ 199.806091][ T9094] x64_sys_call+0x2a09/0x2e10 [ 199.806111][ T9094] do_syscall_64+0xc9/0x1c0 [ 199.806145][ T9094] ? clear_bhb_loop+0x25/0x80 [ 199.806208][ T9094] ? clear_bhb_loop+0x25/0x80 [ 199.806233][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.806257][ T9094] RIP: 0033:0x7f4631a0d169 [ 199.806272][ T9094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.806289][ T9094] RSP: 002b:00007f4630077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.806379][ T9094] RAX: ffffffffffffffda RBX: 00007f4631c25fa0 RCX: 00007f4631a0d169 [ 199.806394][ T9094] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 199.806435][ T9094] RBP: 00007f4631a8e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 199.806448][ T9094] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.806462][ T9094] R13: 0000000000000000 R14: 00007f4631c25fa0 R15: 00007ffe428e4758 [ 199.806547][ T9094] [ 199.806554][ T9094] Mem-Info: [ 200.021997][ T9094] active_anon:8342 inactive_anon:2 isolated_anon:0 [ 200.021997][ T9094] active_file:23208 inactive_file:2101 isolated_file:0 [ 200.021997][ T9094] unevictable:1024 dirty:192 writeback:0 [ 200.021997][ T9094] slab_reclaimable:3081 slab_unreclaimable:21117 [ 200.021997][ T9094] mapped:34656 shmem:6455 pagetables:961 [ 200.021997][ T9094] sec_pagetables:0 bounce:0 [ 200.021997][ T9094] kernel_misc_reclaimable:0 [ 200.021997][ T9094] free:1845754 free_pcp:29168 free_cma:0 [ 200.067236][ T9094] Node 0 active_anon:38356kB inactive_anon:8kB active_file:92832kB inactive_file:8404kB unevictable:4096kB isolated(anon):0kB isolated(file):0kB mapped:143612kB dirty:768kB writeback:0kB shmem:30808kB writeback_tmp:0kB kernel_stack:3568kB pagetables:3844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.096332][ T9094] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.123254][ T9094] lowmem_reserve[]: 0 2882 7860 7860 [ 200.128612][ T9094] Node 0 DMA32 free:2947704kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951332kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 200.157252][ T9094] lowmem_reserve[]: 0 0 4978 4978 [ 200.162367][ T9094] Node 0 Normal free:4414384kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:44040kB inactive_anon:8kB active_file:92832kB inactive_file:8404kB unevictable:4096kB writepending:768kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:108216kB local_pcp:20516kB free_cma:0kB [ 200.192926][ T9094] lowmem_reserve[]: 0 0 0 0 [ 200.197491][ T9094] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.210218][ T9094] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947704kB [ 200.226408][ T9094] Node 0 Normal: 32*4kB (UME) 906*8kB (UM) 1314*16kB (UM) 475*32kB (UM) 352*64kB (UM) 325*128kB (UM) 219*256kB (UM) 122*512kB (UM) 70*1024kB (UME) 78*2048kB (UME) 965*4096kB (UM) = 4410320kB [ 200.245437][ T9094] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 200.254749][ T9094] 32346 total pagecache pages [ 200.259471][ T9094] 3 pages in swap cache [ 200.263744][ T9094] Free swap = 124984kB [ 200.267947][ T9094] Total swap = 124996kB [ 200.272110][ T9094] 2097051 pages RAM [ 200.275950][ T9094] 0 pages HighMem/MovableOnly [ 200.280654][ T9094] 80817 pages reserved [ 200.393898][ T9113] Invalid ELF header magic: != ELF [ 200.437119][ T9115] __nla_validate_parse: 5 callbacks suppressed [ 200.437214][ T9115] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 200.451880][ T9115] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 201.009243][ T9137] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 201.190086][ T9142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9142 comm=syz.1.2018 [ 201.431907][ T9148] FAULT_INJECTION: forcing a failure. [ 201.431907][ T9148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.445194][ T9148] CPU: 1 UID: 0 PID: 9148 Comm: syz.1.2020 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 201.445243][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.445280][ T9148] Call Trace: [ 201.445285][ T9148] [ 201.445293][ T9148] dump_stack_lvl+0xf6/0x150 [ 201.445321][ T9148] dump_stack+0x15/0x1a [ 201.445409][ T9148] should_fail_ex+0x261/0x270 [ 201.445440][ T9148] should_fail+0xb/0x10 [ 201.445465][ T9148] should_fail_usercopy+0x1a/0x20 [ 201.445520][ T9148] _copy_from_iter+0xd8/0xd10 [ 201.445548][ T9148] ? kmalloc_reserve+0x16e/0x190 [ 201.445574][ T9148] ? __build_skb_around+0x199/0x1f0 [ 201.445599][ T9148] ? __alloc_skb+0x24c/0x320 [ 201.445619][ T9148] ? skb_put+0xba/0x100 [ 201.445711][ T9148] ? __virt_addr_valid+0x1ed/0x250 [ 201.445735][ T9148] ? __check_object_size+0x367/0x510 [ 201.445777][ T9148] tipc_msg_build+0x522/0x870 [ 201.445820][ T9148] tipc_send_group_bcast+0x5ea/0x700 [ 201.445864][ T9148] ? __pfx_woken_wake_function+0x10/0x10 [ 201.445933][ T9148] __tipc_sendmsg+0x1a0/0x1c90 [ 201.446074][ T9148] ? selinux_socket_sendmsg+0x18a/0x1c0 [ 201.446113][ T9148] ? _raw_spin_unlock_bh+0x36/0x40 [ 201.446137][ T9148] ? lock_sock_nested+0x114/0x140 [ 201.446252][ T9148] ? __pfx_tipc_sendmsg+0x10/0x10 [ 201.446288][ T9148] tipc_sendmsg+0x3e/0x60 [ 201.446326][ T9148] __sock_sendmsg+0x140/0x180 [ 201.446367][ T9148] ____sys_sendmsg+0x350/0x4e0 [ 201.446459][ T9148] __sys_sendmmsg+0x22a/0x4b0 [ 201.446513][ T9148] __x64_sys_sendmmsg+0x57/0x70 [ 201.446544][ T9148] x64_sys_call+0x2b53/0x2e10 [ 201.446603][ T9148] do_syscall_64+0xc9/0x1c0 [ 201.446631][ T9148] ? clear_bhb_loop+0x25/0x80 [ 201.446657][ T9148] ? clear_bhb_loop+0x25/0x80 [ 201.446812][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.446910][ T9148] RIP: 0033:0x7fcb26abd169 [ 201.446925][ T9148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.446944][ T9148] RSP: 002b:00007fcb25127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 201.446966][ T9148] RAX: ffffffffffffffda RBX: 00007fcb26cd5fa0 RCX: 00007fcb26abd169 [ 201.446979][ T9148] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 000000000000000a [ 201.446990][ T9148] RBP: 00007fcb25127090 R08: 0000000000000000 R09: 0000000000000000 [ 201.447002][ T9148] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.447016][ T9148] R13: 0000000000000000 R14: 00007fcb26cd5fa0 R15: 00007fff8577cca8 [ 201.447083][ T9148] [ 201.519015][ T9161] siw: device registration error -23 [ 201.623833][ T9166] Illegal XDP return value 4040446060 on prog (id 1392) dev N/A, expect packet loss! [ 201.859530][ T9168] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2026'. [ 201.868701][ T9168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2026'. [ 201.906403][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 201.906427][ T29] audit: type=1326 audit(2000000061.745:14028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 201.970817][ T29] audit: type=1326 audit(2000000061.785:14029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 201.994381][ T29] audit: type=1326 audit(2000000061.785:14030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 202.018134][ T29] audit: type=1326 audit(2000000061.785:14031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 202.041722][ T29] audit: type=1326 audit(2000000061.785:14032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 202.065258][ T29] audit: type=1326 audit(2000000061.785:14033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 202.088757][ T29] audit: type=1326 audit(2000000061.785:14034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 202.112424][ T29] audit: type=1326 audit(2000000061.785:14035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 202.136145][ T29] audit: type=1326 audit(2000000061.785:14036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 202.159988][ T29] audit: type=1326 audit(2000000061.785:14037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 202.622531][ T9195] netlink: 'syz.1.2035': attribute type 27 has an invalid length. [ 203.066290][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.074992][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.086845][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.113779][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.124308][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2040'. [ 204.625389][ T9237] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 205.515009][ T9269] FAULT_INJECTION: forcing a failure. [ 205.515009][ T9269] name failslab, interval 1, probability 0, space 0, times 0 [ 205.527747][ T9269] CPU: 1 UID: 0 PID: 9269 Comm: syz.1.2065 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 205.527775][ T9269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.527787][ T9269] Call Trace: [ 205.527794][ T9269] [ 205.527802][ T9269] dump_stack_lvl+0xf6/0x150 [ 205.527875][ T9269] dump_stack+0x15/0x1a [ 205.527893][ T9269] should_fail_ex+0x261/0x270 [ 205.527922][ T9269] should_failslab+0x8f/0xb0 [ 205.528031][ T9269] __kmalloc_cache_noprof+0x55/0x320 [ 205.528056][ T9269] ? x509_cert_parse+0x69/0x440 [ 205.528161][ T9269] x509_cert_parse+0x69/0x440 [ 205.528245][ T9269] x509_key_preparse+0x3c/0x440 [ 205.528278][ T9269] asymmetric_key_preparse+0x6b/0xc0 [ 205.528303][ T9269] __key_create_or_update+0x2ad/0x780 [ 205.528399][ T9269] key_create_or_update+0x42/0x60 [ 205.528454][ T9269] __se_sys_add_key+0x2a1/0x330 [ 205.528477][ T9269] ? fput+0x99/0xd0 [ 205.528552][ T9269] __x64_sys_add_key+0x67/0x80 [ 205.528576][ T9269] x64_sys_call+0x1f10/0x2e10 [ 205.528599][ T9269] do_syscall_64+0xc9/0x1c0 [ 205.528677][ T9269] ? clear_bhb_loop+0x25/0x80 [ 205.528729][ T9269] ? clear_bhb_loop+0x25/0x80 [ 205.528751][ T9269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.528772][ T9269] RIP: 0033:0x7fcb26abd169 [ 205.528788][ T9269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.528805][ T9269] RSP: 002b:00007fcb25127038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 205.528869][ T9269] RAX: ffffffffffffffda RBX: 00007fcb26cd5fa0 RCX: 00007fcb26abd169 [ 205.528881][ T9269] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000380 [ 205.528892][ T9269] RBP: 00007fcb25127090 R08: fffffffffffffffe R09: 0000000000000000 [ 205.528903][ T9269] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 205.528914][ T9269] R13: 0000000000000000 R14: 00007fcb26cd5fa0 R15: 00007fff8577cca8 [ 205.528933][ T9269] [ 205.760194][ T9273] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2066'. [ 206.344045][ T9303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2078'. [ 206.567153][ T9306] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2079'. [ 206.705253][ T9318] netlink: 47 bytes leftover after parsing attributes in process `syz.2.2084'. [ 206.940456][ T9332] SELinux: ebitmap: truncated map [ 206.949358][ T9332] SELinux: failed to load policy [ 206.955703][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 206.955734][ T29] audit: type=1400 audit(2000000066.795:14485): avc: denied { read } for pid=9321 comm="syz.3.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 207.004924][ T29] audit: type=1326 audit(2000000066.835:14486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb26ab4127 code=0x7ffc0000 [ 207.035083][ T9342] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2092'. [ 207.083530][ T29] audit: type=1326 audit(2000000066.875:14487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb26a59359 code=0x7ffc0000 [ 207.107000][ T29] audit: type=1326 audit(2000000066.875:14488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb26ab4127 code=0x7ffc0000 [ 207.130562][ T29] audit: type=1326 audit(2000000066.875:14489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb26a59359 code=0x7ffc0000 [ 207.153975][ T29] audit: type=1326 audit(2000000066.875:14490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 207.177737][ T29] audit: type=1326 audit(2000000066.875:14491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 207.201285][ T29] audit: type=1326 audit(2000000066.875:14492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 207.224920][ T29] audit: type=1326 audit(2000000066.875:14493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 207.248427][ T29] audit: type=1326 audit(2000000066.875:14494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 208.165390][ T9379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2105'. [ 208.197496][ T9385] block device autoloading is deprecated and will be removed. [ 208.206587][ T9385] syz.2.2109: attempt to access beyond end of device [ 208.206587][ T9385] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 208.220154][ T9385] EXT4-fs (loop5): unable to read superblock [ 208.233289][ T9385] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2109'. [ 208.246161][ T9390] can0: slcan on ptm0. [ 208.344973][ T9389] can0 (unregistered): slcan off ptm0. [ 208.390825][ T9404] SELinux: ebitmap: map size 2 does not match my size 64 (high bit was 64) [ 208.472772][ T9404] SELinux: failed to load policy [ 208.626166][ T9412] FAULT_INJECTION: forcing a failure. [ 208.626166][ T9412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.639447][ T9412] CPU: 0 UID: 0 PID: 9412 Comm: syz.4.2119 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 208.639484][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.639524][ T9412] Call Trace: [ 208.639531][ T9412] [ 208.639538][ T9412] dump_stack_lvl+0xf6/0x150 [ 208.639587][ T9412] dump_stack+0x15/0x1a [ 208.639607][ T9412] should_fail_ex+0x261/0x270 [ 208.639645][ T9412] should_fail+0xb/0x10 [ 208.639672][ T9412] should_fail_usercopy+0x1a/0x20 [ 208.639746][ T9412] _copy_from_user+0x1c/0xa0 [ 208.639798][ T9412] kstrtouint_from_user+0x84/0x100 [ 208.639891][ T9412] ? 0xffffffff81000000 [ 208.639904][ T9412] ? selinux_file_permission+0x22d/0x360 [ 208.639995][ T9412] proc_fail_nth_write+0x54/0x160 [ 208.640014][ T9412] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 208.640049][ T9412] vfs_write+0x295/0x950 [ 208.640075][ T9412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.640158][ T9412] ? __fget_files+0x186/0x1c0 [ 208.640183][ T9412] ksys_write+0xeb/0x1b0 [ 208.640274][ T9412] __x64_sys_write+0x42/0x50 [ 208.640301][ T9412] x64_sys_call+0x2a45/0x2e10 [ 208.640351][ T9412] do_syscall_64+0xc9/0x1c0 [ 208.640381][ T9412] ? clear_bhb_loop+0x25/0x80 [ 208.640532][ T9412] ? clear_bhb_loop+0x25/0x80 [ 208.640553][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.640574][ T9412] RIP: 0033:0x7f43e89fbc1f [ 208.640648][ T9412] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 208.640667][ T9412] RSP: 002b:00007f43e705f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 208.640688][ T9412] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f43e89fbc1f [ 208.640742][ T9412] RDX: 0000000000000001 RSI: 00007f43e705f0a0 RDI: 0000000000000004 [ 208.640756][ T9412] RBP: 00007f43e705f090 R08: 0000000000000000 R09: 0000000000000000 [ 208.640768][ T9412] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 208.640780][ T9412] R13: 0000000000000000 R14: 00007f43e8c15fa0 R15: 00007fff591498f8 [ 208.640802][ T9412] [ 209.368723][ T9434] FAULT_INJECTION: forcing a failure. [ 209.368723][ T9434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.381868][ T9434] CPU: 0 UID: 0 PID: 9434 Comm: syz.1.2125 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 209.381902][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.381917][ T9434] Call Trace: [ 209.382002][ T9434] [ 209.382010][ T9434] dump_stack_lvl+0xf6/0x150 [ 209.382036][ T9434] dump_stack+0x15/0x1a [ 209.382053][ T9434] should_fail_ex+0x261/0x270 [ 209.382079][ T9434] should_fail+0xb/0x10 [ 209.382105][ T9434] should_fail_usercopy+0x1a/0x20 [ 209.382213][ T9434] _copy_to_user+0x20/0xa0 [ 209.382291][ T9434] simple_read_from_buffer+0xb2/0x130 [ 209.382326][ T9434] proc_fail_nth_read+0x103/0x140 [ 209.382370][ T9434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.382434][ T9434] vfs_read+0x1b2/0x710 [ 209.382466][ T9434] ? __rcu_read_unlock+0x4e/0x70 [ 209.382499][ T9434] ? __fget_files+0x186/0x1c0 [ 209.382526][ T9434] ksys_read+0xeb/0x1b0 [ 209.382566][ T9434] __x64_sys_read+0x42/0x50 [ 209.382608][ T9434] x64_sys_call+0x2a3b/0x2e10 [ 209.382635][ T9434] do_syscall_64+0xc9/0x1c0 [ 209.382686][ T9434] ? clear_bhb_loop+0x25/0x80 [ 209.382713][ T9434] ? clear_bhb_loop+0x25/0x80 [ 209.382740][ T9434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.382780][ T9434] RIP: 0033:0x7fcb26abbb7c [ 209.382794][ T9434] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.382812][ T9434] RSP: 002b:00007fcb25106030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.382910][ T9434] RAX: ffffffffffffffda RBX: 00007fcb26cd6080 RCX: 00007fcb26abbb7c [ 209.382925][ T9434] RDX: 000000000000000f RSI: 00007fcb251060a0 RDI: 0000000000000006 [ 209.382940][ T9434] RBP: 00007fcb25106090 R08: 0000000000000000 R09: 0000000000000000 [ 209.382954][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.382969][ T9434] R13: 0000000000000000 R14: 00007fcb26cd6080 R15: 00007fff8577cca8 [ 209.382993][ T9434] [ 209.738169][ T9442] FAULT_INJECTION: forcing a failure. [ 209.738169][ T9442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.751305][ T9442] CPU: 1 UID: 0 PID: 9442 Comm: +}[@ Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 209.751356][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.751371][ T9442] Call Trace: [ 209.751377][ T9442] [ 209.751430][ T9442] dump_stack_lvl+0xf6/0x150 [ 209.751454][ T9442] dump_stack+0x15/0x1a [ 209.751471][ T9442] should_fail_ex+0x261/0x270 [ 209.751502][ T9442] should_fail+0xb/0x10 [ 209.751611][ T9442] should_fail_usercopy+0x1a/0x20 [ 209.751655][ T9442] _copy_from_user+0x1c/0xa0 [ 209.751688][ T9442] restore_altstack+0x4d/0xd0 [ 209.751786][ T9442] __do_sys_rt_sigreturn+0xe5/0x180 [ 209.751831][ T9442] x64_sys_call+0x2b49/0x2e10 [ 209.751858][ T9442] do_syscall_64+0xc9/0x1c0 [ 209.751892][ T9442] ? clear_bhb_loop+0x25/0x80 [ 209.751940][ T9442] ? clear_bhb_loop+0x25/0x80 [ 209.751966][ T9442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.751991][ T9442] RIP: 0033:0x7f74a97c9359 [ 209.752008][ T9442] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 209.752029][ T9442] RSP: 002b:00007f74a7e8ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 209.752051][ T9442] RAX: ffffffffffffffda RBX: 00007f74a9a45fa0 RCX: 00007f74a97c9359 [ 209.752072][ T9442] RDX: 00007f74a7e8ea80 RSI: 00007f74a7e8ebb0 RDI: 0000000000000021 [ 209.752086][ T9442] RBP: 00007f74a7e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 209.752100][ T9442] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 209.752112][ T9442] R13: 0000000000000000 R14: 00007f74a9a45fa0 R15: 00007ffe12c7db78 [ 209.752135][ T9442] [ 210.145246][ T9445] x_tables: duplicate underflow at hook 2 [ 210.576331][ T9454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9454 comm=syz.2.2131 [ 210.765320][ T9466] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2138'. [ 211.130926][ T9477] 9p: Unknown access argument 00000000000000000000<ª¼ÄGÇ3‹´: -22 [ 211.251440][ T9466] rdma_op ffff888146368180 conn xmit_rdma 0000000000000000 [ 211.516977][ T9495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=9495 comm=syz.3.2146 [ 211.854880][ T9507] 9pnet: Could not find request transport: tcpÿÿÿ [ 211.862374][ T9510] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 211.890132][ T9505] hub 9-0:1.0: USB hub found [ 211.895180][ T9505] hub 9-0:1.0: 8 ports detected [ 211.972616][ T9521] netlink: 'syz.5.2153': attribute type 27 has an invalid length. [ 211.991803][ T9523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2156'. [ 212.001882][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 212.001898][ T29] audit: type=1326 audit(2000000071.835:14715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 212.031912][ T29] audit: type=1326 audit(2000000071.835:14716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 212.071725][ T9524] bridge0: port 3(netdevsim3) entered blocking state [ 212.078537][ T9524] bridge0: port 3(netdevsim3) entered disabled state [ 212.086934][ T9524] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 212.094991][ T9524] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 212.113076][ T9526] netlink: 'syz.1.2157': attribute type 10 has an invalid length. [ 212.122187][ T9526] team0: Port device netdevsim1 added [ 212.128979][ T29] audit: type=1326 audit(2000000071.945:14717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 212.152549][ T29] audit: type=1326 audit(2000000071.945:14718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 212.176227][ T29] audit: type=1326 audit(2000000071.945:14719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 212.200002][ T29] audit: type=1326 audit(2000000071.945:14720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 212.223771][ T29] audit: type=1326 audit(2000000071.945:14721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 212.247503][ T29] audit: type=1326 audit(2000000071.945:14722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 212.271583][ T29] audit: type=1326 audit(2000000071.945:14723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 212.295116][ T29] audit: type=1326 audit(2000000071.945:14724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 212.388999][ T9533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.401066][ T9533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.277953][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2170'. [ 214.597069][ T9585] netlink: 'syz.3.2174': attribute type 27 has an invalid length. [ 214.610015][ T9582] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 214.637960][ T9588] FAULT_INJECTION: forcing a failure. [ 214.637960][ T9588] name failslab, interval 1, probability 0, space 0, times 0 [ 214.650790][ T9588] CPU: 0 UID: 0 PID: 9588 Comm: syz.4.2178 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 214.650837][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.650870][ T9588] Call Trace: [ 214.650877][ T9588] [ 214.650885][ T9588] dump_stack_lvl+0xf6/0x150 [ 214.650913][ T9588] dump_stack+0x15/0x1a [ 214.650932][ T9588] should_fail_ex+0x261/0x270 [ 214.650963][ T9588] should_failslab+0x8f/0xb0 [ 214.650994][ T9588] __kvmalloc_node_noprof+0x12c/0x520 [ 214.651086][ T9588] ? simple_xattr_alloc+0x43/0x90 [ 214.651111][ T9588] simple_xattr_alloc+0x43/0x90 [ 214.651132][ T9588] shmem_initxattrs+0x189/0x350 [ 214.651218][ T9588] security_inode_init_security+0x25d/0x340 [ 214.651249][ T9588] ? __pfx_shmem_initxattrs+0x10/0x10 [ 214.651283][ T9588] shmem_mknod+0xa8/0x180 [ 214.651302][ T9588] shmem_mkdir+0x33/0x70 [ 214.651321][ T9588] vfs_mkdir+0x214/0x350 [ 214.651424][ T9588] do_mkdirat+0x13c/0x2e0 [ 214.651452][ T9588] __x64_sys_mkdirat+0x4e/0x60 [ 214.651505][ T9588] x64_sys_call+0x2ce3/0x2e10 [ 214.651526][ T9588] do_syscall_64+0xc9/0x1c0 [ 214.651554][ T9588] ? clear_bhb_loop+0x25/0x80 [ 214.651598][ T9588] ? clear_bhb_loop+0x25/0x80 [ 214.651619][ T9588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.651638][ T9588] RIP: 0033:0x7f43e89fd169 [ 214.651651][ T9588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.651758][ T9588] RSP: 002b:00007f43e705f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 214.651779][ T9588] RAX: ffffffffffffffda RBX: 00007f43e8c15fa0 RCX: 00007f43e89fd169 [ 214.651791][ T9588] RDX: 00000000000001c0 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 214.651802][ T9588] RBP: 00007f43e705f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.651813][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.651824][ T9588] R13: 0000000000000000 R14: 00007f43e8c15fa0 R15: 00007fff591498f8 [ 214.651842][ T9588] [ 215.197250][ T9608] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 215.575319][ T9616] FAULT_INJECTION: forcing a failure. [ 215.575319][ T9616] name failslab, interval 1, probability 0, space 0, times 0 [ 215.679240][ T9616] CPU: 1 UID: 0 PID: 9616 Comm: syz.2.2187 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 215.679332][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.679347][ T9616] Call Trace: [ 215.679356][ T9616] [ 215.679365][ T9616] dump_stack_lvl+0xf6/0x150 [ 215.679389][ T9616] dump_stack+0x15/0x1a [ 215.679488][ T9616] should_fail_ex+0x261/0x270 [ 215.679518][ T9616] should_failslab+0x8f/0xb0 [ 215.679549][ T9616] kmem_cache_alloc_noprof+0x59/0x340 [ 215.679574][ T9616] ? skb_clone+0x154/0x1f0 [ 215.679653][ T9616] skb_clone+0x154/0x1f0 [ 215.679679][ T9616] bpf_clone_redirect+0x78/0x200 [ 215.679715][ T9616] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 215.679737][ T9616] ? __rcu_read_unlock+0x4e/0x70 [ 215.679771][ T9616] ? avc_has_perm_noaudit+0x1cc/0x210 [ 215.679861][ T9616] ? avc_has_perm+0xd6/0x150 [ 215.679946][ T9616] ? __rcu_read_unlock+0x4e/0x70 [ 215.680034][ T9616] ? 0xffffffffa0000650 [ 215.680115][ T9616] ? is_bpf_text_address+0x141/0x160 [ 215.680143][ T9616] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 215.680200][ T9616] ? kernel_text_address+0x96/0xb0 [ 215.680237][ T9616] ? __kernel_text_address+0xd/0x40 [ 215.680350][ T9616] ? unwind_get_return_address+0x16/0x30 [ 215.680557][ T9616] ? arch_stack_walk+0xff/0x150 [ 215.680592][ T9616] ? find_stack+0xcf/0x170 [ 215.680622][ T9616] ? stack_depot_save_flags+0x7d0/0x8b0 [ 215.680648][ T9616] ? bpf_test_timer_continue+0xb5/0x260 [ 215.680680][ T9616] bpf_test_run+0x1e7/0x4a0 [ 215.680706][ T9616] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 215.680731][ T9616] ? bpf_test_run+0x106/0x4a0 [ 215.680764][ T9616] bpf_prog_test_run_skb+0x857/0xbe0 [ 215.680791][ T9616] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 215.680816][ T9616] bpf_prog_test_run+0x20e/0x3a0 [ 215.680880][ T9616] __sys_bpf+0x440/0x800 [ 215.680913][ T9616] __x64_sys_bpf+0x43/0x50 [ 215.680948][ T9616] x64_sys_call+0x23da/0x2e10 [ 215.681015][ T9616] do_syscall_64+0xc9/0x1c0 [ 215.681049][ T9616] ? clear_bhb_loop+0x25/0x80 [ 215.681074][ T9616] ? clear_bhb_loop+0x25/0x80 [ 215.681100][ T9616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.681146][ T9616] RIP: 0033:0x7f4631a0d169 [ 215.681162][ T9616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.681180][ T9616] RSP: 002b:00007f4630077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.681197][ T9616] RAX: ffffffffffffffda RBX: 00007f4631c25fa0 RCX: 00007f4631a0d169 [ 215.681208][ T9616] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 215.681278][ T9616] RBP: 00007f4630077090 R08: 0000000000000000 R09: 0000000000000000 [ 215.681329][ T9616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.681340][ T9616] R13: 0000000000000000 R14: 00007f4631c25fa0 R15: 00007ffe428e4758 [ 215.681394][ T9616] [ 215.989079][ T9618] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 216.022488][ T9618] SELinux: failed to load policy [ 216.265416][ T9634] FAULT_INJECTION: forcing a failure. [ 216.265416][ T9634] name failslab, interval 1, probability 0, space 0, times 0 [ 216.278201][ T9634] CPU: 1 UID: 0 PID: 9634 Comm: syz.2.2195 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 216.278230][ T9634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.278242][ T9634] Call Trace: [ 216.278248][ T9634] [ 216.278256][ T9634] dump_stack_lvl+0xf6/0x150 [ 216.278301][ T9634] dump_stack+0x15/0x1a [ 216.278318][ T9634] should_fail_ex+0x261/0x270 [ 216.278346][ T9634] should_failslab+0x8f/0xb0 [ 216.278377][ T9634] __kvmalloc_node_noprof+0x12c/0x520 [ 216.278455][ T9634] ? alloc_fdtable+0xa5/0x1b0 [ 216.278529][ T9634] ? __kmalloc_cache_noprof+0x22b/0x320 [ 216.278553][ T9634] alloc_fdtable+0xa5/0x1b0 [ 216.278591][ T9634] dup_fd+0x508/0x580 [ 216.278629][ T9634] copy_files+0x98/0xe0 [ 216.278655][ T9634] copy_process+0xc60/0x1f60 [ 216.278690][ T9634] ? copy_clone_args_from_user+0x413/0x4b0 [ 216.278779][ T9634] kernel_clone+0x168/0x5d0 [ 216.278839][ T9634] __se_sys_clone3+0x1c6/0x200 [ 216.278889][ T9634] __x64_sys_clone3+0x31/0x40 [ 216.278954][ T9634] x64_sys_call+0x11e9/0x2e10 [ 216.278987][ T9634] do_syscall_64+0xc9/0x1c0 [ 216.279021][ T9634] ? clear_bhb_loop+0x25/0x80 [ 216.279084][ T9634] ? clear_bhb_loop+0x25/0x80 [ 216.279107][ T9634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.279132][ T9634] RIP: 0033:0x7f4631a0d169 [ 216.279149][ T9634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.279218][ T9634] RSP: 002b:00007f4630076f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 216.279240][ T9634] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4631a0d169 [ 216.279307][ T9634] RDX: 00007f4630076f20 RSI: 0000000000000058 RDI: 00007f4630076f20 [ 216.279318][ T9634] RBP: 00007f4630077090 R08: 0000000000000000 R09: 0000000000000058 [ 216.279329][ T9634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.279340][ T9634] R13: 0000000000000000 R14: 00007f4631c25fa0 R15: 00007ffe428e4758 [ 216.279359][ T9634] [ 216.652185][ T9639] FAULT_INJECTION: forcing a failure. [ 216.652185][ T9639] name failslab, interval 1, probability 0, space 0, times 0 [ 216.665130][ T9639] CPU: 1 UID: 0 PID: 9639 Comm: syz.2.2197 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 216.665158][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.665171][ T9639] Call Trace: [ 216.665178][ T9639] [ 216.665185][ T9639] dump_stack_lvl+0xf6/0x150 [ 216.665206][ T9639] dump_stack+0x15/0x1a [ 216.665226][ T9639] should_fail_ex+0x261/0x270 [ 216.665255][ T9639] should_failslab+0x8f/0xb0 [ 216.665331][ T9639] kmem_cache_alloc_noprof+0x59/0x340 [ 216.665350][ T9639] ? copy_mm+0xe7/0x1360 [ 216.665377][ T9639] copy_mm+0xe7/0x1360 [ 216.665449][ T9639] ? __hrtimer_init+0xfd/0x110 [ 216.665534][ T9639] ? __pfx_it_real_fn+0x10/0x10 [ 216.665566][ T9639] ? hrtimer_setup+0x45/0x140 [ 216.665594][ T9639] ? __init_rwsem+0x5d/0x70 [ 216.665621][ T9639] ? copy_signal+0x316/0x340 [ 216.665643][ T9639] copy_process+0xcfc/0x1f60 [ 216.665714][ T9639] ? copy_clone_args_from_user+0x413/0x4b0 [ 216.665754][ T9639] kernel_clone+0x168/0x5d0 [ 216.665783][ T9639] __se_sys_clone3+0x1c6/0x200 [ 216.665820][ T9639] __x64_sys_clone3+0x31/0x40 [ 216.665913][ T9639] x64_sys_call+0x11e9/0x2e10 [ 216.665937][ T9639] do_syscall_64+0xc9/0x1c0 [ 216.665969][ T9639] ? clear_bhb_loop+0x25/0x80 [ 216.665989][ T9639] ? clear_bhb_loop+0x25/0x80 [ 216.666007][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.666099][ T9639] RIP: 0033:0x7f4631a0d169 [ 216.666112][ T9639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.666127][ T9639] RSP: 002b:00007f4630076f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 216.666215][ T9639] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4631a0d169 [ 216.666228][ T9639] RDX: 00007f4630076f20 RSI: 0000000000000058 RDI: 00007f4630076f20 [ 216.666242][ T9639] RBP: 00007f4630077090 R08: 0000000000000000 R09: 0000000000000058 [ 216.666255][ T9639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.666268][ T9639] R13: 0000000000000000 R14: 00007f4631c25fa0 R15: 00007ffe428e4758 [ 216.666305][ T9639] [ 216.954380][ T9643] batadv1: entered promiscuous mode [ 216.963529][ T9647] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 216.973935][ T9647] SELinux: failed to load policy [ 217.286381][ T9672] SELinux: Context ELF is not valid (left unmapped). [ 217.312017][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 218.149693][ T9686] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 218.272589][ T9686] SELinux: failed to load policy [ 218.361110][ T9688] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 218.482617][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 218.482633][ T29] audit: type=1326 audit(2000000078.315:14779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 218.516089][ T9698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2219'. [ 218.538577][ T29] audit: type=1326 audit(2000000078.315:14780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 218.562159][ T29] audit: type=1326 audit(2000000078.315:14781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 218.585908][ T29] audit: type=1326 audit(2000000078.315:14782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 218.609318][ T29] audit: type=1326 audit(2000000078.315:14783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 218.633014][ T29] audit: type=1326 audit(2000000078.315:14784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 218.656503][ T29] audit: type=1326 audit(2000000078.315:14785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 218.680030][ T29] audit: type=1326 audit(2000000078.315:14786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 218.703569][ T29] audit: type=1326 audit(2000000078.315:14787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 218.727388][ T29] audit: type=1326 audit(2000000078.315:14788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 218.805233][ T9702] openvswitch: netlink: Message has 6 unknown bytes. [ 218.893391][ T9712] FAULT_INJECTION: forcing a failure. [ 218.893391][ T9712] name failslab, interval 1, probability 0, space 0, times 0 [ 218.906128][ T9712] CPU: 1 UID: 0 PID: 9712 Comm: syz.5.2223 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 218.906189][ T9712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.906200][ T9712] Call Trace: [ 218.906206][ T9712] [ 218.906211][ T9712] dump_stack_lvl+0xf6/0x150 [ 218.906274][ T9712] dump_stack+0x15/0x1a [ 218.906293][ T9712] should_fail_ex+0x261/0x270 [ 218.906417][ T9712] should_failslab+0x8f/0xb0 [ 218.906559][ T9712] __kmalloc_cache_noprof+0x55/0x320 [ 218.906595][ T9712] ? sctp_add_bind_addr+0x6f/0x1f0 [ 218.906633][ T9712] sctp_add_bind_addr+0x6f/0x1f0 [ 218.906707][ T9712] sctp_copy_local_addr_list+0x19d/0x220 [ 218.906746][ T9712] sctp_copy_one_addr+0x82/0x270 [ 218.906910][ T9712] sctp_bind_addr_copy+0x81/0x2b0 [ 218.906955][ T9712] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 218.906989][ T9712] sctp_connect_new_asoc+0x1df/0x3c0 [ 218.907041][ T9712] sctp_sendmsg+0xe96/0x1870 [ 218.907065][ T9712] ? __pfx_sctp_sendmsg+0x10/0x10 [ 218.907085][ T9712] inet_sendmsg+0xc5/0xd0 [ 218.907111][ T9712] __sock_sendmsg+0x102/0x180 [ 218.907179][ T9712] __sys_sendto+0x1aa/0x230 [ 218.907211][ T9712] __x64_sys_sendto+0x78/0x90 [ 218.907254][ T9712] x64_sys_call+0x2bcb/0x2e10 [ 218.907284][ T9712] do_syscall_64+0xc9/0x1c0 [ 218.907344][ T9712] ? clear_bhb_loop+0x25/0x80 [ 218.907385][ T9712] ? clear_bhb_loop+0x25/0x80 [ 218.907412][ T9712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.907438][ T9712] RIP: 0033:0x7f03fbd8d169 [ 218.907455][ T9712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.907476][ T9712] RSP: 002b:00007f03fa3f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 218.907515][ T9712] RAX: ffffffffffffffda RBX: 00007f03fbfa5fa0 RCX: 00007f03fbd8d169 [ 218.907530][ T9712] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000005 [ 218.907545][ T9712] RBP: 00007f03fa3f7090 R08: 0000200000000140 R09: 000000000000001c [ 218.907560][ T9712] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 218.907572][ T9712] R13: 0000000000000000 R14: 00007f03fbfa5fa0 R15: 00007fff537bada8 [ 218.907592][ T9712] [ 219.328439][ T9722] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 219.437899][ T9732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2232'. [ 219.456747][ T9724] SELinux: ebitmap: truncated map [ 219.463921][ T9730] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 219.465448][ T9724] SELinux: failed to load policy [ 219.888654][ T9756] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 220.367348][ T9761] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2242'. [ 220.744088][ T9769] SELinux: ebitmap: truncated map [ 220.750815][ T9769] SELinux: failed to load policy [ 220.795905][ T9773] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 221.155569][ T9797] netlink: 'syz.5.2255': attribute type 27 has an invalid length. [ 222.228120][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 222.263368][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 222.275290][ T9832] SELinux: ebitmap: truncated map [ 222.282978][ T9832] SELinux: failed to load policy [ 222.463581][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2277'. [ 222.714173][ T9864] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 222.806710][ T9863] SELinux: ebitmap: truncated map [ 222.848763][ T9863] SELinux: failed to load policy [ 223.558428][ T9900] netlink: 'syz.4.2295': attribute type 27 has an invalid length. [ 223.609351][ T9901] SELinux: ebitmap: truncated map [ 223.615988][ T9901] SELinux: failed to load policy [ 223.655590][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 223.655605][ T29] audit: type=1326 audit(2000000083.495:15061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.1.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 223.685425][ T29] audit: type=1326 audit(2000000083.495:15062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.1.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 223.755008][ T29] audit: type=1326 audit(2000000083.495:15063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.1.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 223.778845][ T29] audit: type=1326 audit(2000000083.495:15064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.1.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 223.912631][ T9924] netlink: 'syz.5.2302': attribute type 27 has an invalid length. [ 225.131168][ T29] audit: type=1326 audit(2000000084.965:15065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.1.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 225.154930][ T29] audit: type=1326 audit(2000000084.965:15066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.1.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 225.178481][ T29] audit: type=1326 audit(2000000084.965:15067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.1.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb26abd169 code=0x7ffc0000 [ 225.313610][ T9955] tipc: New replicast peer: 255.255.255.255 [ 225.319969][ T9955] tipc: Enabled bearer , priority 10 [ 225.468103][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.504407][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.529456][ T29] audit: type=1400 audit(2000000085.365:15068): avc: denied { append } for pid=9960 comm="syz.3.2322" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 225.552604][ T29] audit: type=1400 audit(2000000085.365:15069): avc: denied { shutdown } for pid=9960 comm="syz.3.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.437299][ T3383] tipc: Node number set to 1 [ 226.457034][ T9994] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 226.656676][ T29] audit: type=1326 audit(2000000086.495:15070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.5.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03fbd8d169 code=0x7ffc0000 [ 226.874510][T10014] netlink: 'syz.2.2342': attribute type 27 has an invalid length. [ 227.022393][T10017] hub 9-0:1.0: USB hub found [ 227.027368][T10017] hub 9-0:1.0: 8 ports detected [ 227.436191][T10045] hub 9-0:1.0: USB hub found [ 227.441010][T10045] hub 9-0:1.0: 8 ports detected [ 228.217294][T10071] hub 9-0:1.0: USB hub found [ 228.222045][T10071] hub 9-0:1.0: 8 ports detected [ 228.321466][T10084] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2371'. [ 228.687408][T10094] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 228.695298][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 228.695312][ T29] audit: type=1400 audit(2000000088.535:15153): avc: denied { setattr } for pid=10096 comm="syz.3.2376" name="pagemap" dev="proc" ino=27927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 228.920696][T10109] RDS: rds_bind could not find a transport for ::c000:0:20:0, load rds_tcp or rds_rdma? [ 228.940177][ T29] audit: type=1326 audit(2000000088.775:15154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 228.963995][ T29] audit: type=1326 audit(2000000088.775:15155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 228.987707][ T29] audit: type=1326 audit(2000000088.775:15156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 229.011451][ T29] audit: type=1326 audit(2000000088.775:15157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 229.011488][ T29] audit: type=1326 audit(2000000088.775:15158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e89fd169 code=0x7ffc0000 [ 229.122734][ T29] audit: type=1326 audit(2000000088.955:15159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.2.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 229.146518][ T29] audit: type=1326 audit(2000000088.955:15160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.2.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 229.170232][ T29] audit: type=1326 audit(2000000088.955:15161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.2.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 229.194001][ T29] audit: type=1326 audit(2000000088.955:15162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.2.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 229.218928][T10123] netlink: 'syz.2.2383': attribute type 27 has an invalid length. [ 229.265450][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2387'. [ 230.497192][T10174] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 230.571208][T10180] SELinux: policydb magic number 0x75622f2e does not match expected magic number 0xf97cff8c [ 230.581522][T10180] SELinux: failed to load policy [ 230.751246][T10184] xt_hashlimit: max too large, truncated to 1048576 [ 231.060763][T10203] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 231.346392][T10208] SELinux: policydb magic number 0x75622f2e does not match expected magic number 0xf97cff8c [ 231.406287][T10208] SELinux: failed to load policy [ 231.458561][T10214] FAULT_INJECTION: forcing a failure. [ 231.458561][T10214] name failslab, interval 1, probability 0, space 0, times 0 [ 231.471343][T10214] CPU: 0 UID: 0 PID: 10214 Comm: syz.2.2421 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 231.471371][T10214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.471385][T10214] Call Trace: [ 231.471390][T10214] [ 231.471396][T10214] dump_stack_lvl+0xf6/0x150 [ 231.471417][T10214] dump_stack+0x15/0x1a [ 231.471433][T10214] should_fail_ex+0x261/0x270 [ 231.471462][T10214] should_failslab+0x8f/0xb0 [ 231.471496][T10214] kmem_cache_alloc_noprof+0x59/0x340 [ 231.471520][T10214] ? vm_area_alloc+0x2c/0xb0 [ 231.471542][T10214] ? vma_merge_new_range+0x2df/0x340 [ 231.471574][T10214] vm_area_alloc+0x2c/0xb0 [ 231.471591][T10214] mmap_region+0x83e/0x1490 [ 231.471629][T10214] do_mmap+0x9ef/0xc80 [ 231.471662][T10214] vm_mmap_pgoff+0x16d/0x2d0 [ 231.471696][T10214] ksys_mmap_pgoff+0xd0/0x340 [ 231.471726][T10214] ? fpregs_assert_state_consistent+0x83/0xa0 [ 231.471762][T10214] x64_sys_call+0x1945/0x2e10 [ 231.471781][T10214] do_syscall_64+0xc9/0x1c0 [ 231.471807][T10214] ? clear_bhb_loop+0x25/0x80 [ 231.471825][T10214] ? clear_bhb_loop+0x25/0x80 [ 231.471846][T10214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.471887][T10214] RIP: 0033:0x7f4631a0d1a3 [ 231.471909][T10214] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 231.471926][T10214] RSP: 002b:00007f4630076e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 231.471943][T10214] RAX: ffffffffffffffda RBX: 000000000000043e RCX: 00007f4631a0d1a3 [ 231.471954][T10214] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 231.471965][T10214] RBP: 0000200000000cc2 R08: 00000000ffffffff R09: 0000000000000000 [ 231.471976][T10214] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 231.471988][T10214] R13: 00007f4630076ef0 R14: 00007f4630076eb0 R15: 0000200000000700 [ 231.472011][T10214] [ 231.795402][T10236] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 232.802588][T10257] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 233.932894][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 233.932909][ T29] audit: type=1400 audit(2000000093.765:15507): avc: denied { accept } for pid=10301 comm="syz.4.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.044896][ T29] audit: type=1326 audit(2000000093.875:15508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 234.068546][ T29] audit: type=1326 audit(2000000093.875:15509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 234.092226][ T29] audit: type=1326 audit(2000000093.875:15510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 234.115930][ T29] audit: type=1326 audit(2000000093.875:15511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 234.139794][ T29] audit: type=1326 audit(2000000093.875:15512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 234.163421][ T29] audit: type=1326 audit(2000000093.875:15513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 234.219811][ T29] audit: type=1326 audit(2000000093.875:15514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 234.243604][ T29] audit: type=1326 audit(2000000093.885:15515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 234.263874][T10310] veth0_to_bond: entered promiscuous mode [ 234.268642][ T29] audit: type=1326 audit(2000000093.885:15516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4631a0d169 code=0x7ffc0000 [ 234.275418][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'. [ 234.314546][T10310] veth0_to_bond (unregistering): left promiscuous mode [ 234.323208][T10310] bond0: (slave bond_slave_0): Releasing backup interface [ 234.335378][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2459'. [ 234.386579][T10315] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.384658][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2480'. [ 235.483490][T10369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.492601][T10369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.522652][T10369] SELinux: ebitmap: truncated map [ 235.529781][T10369] SELinux: failed to load policy [ 235.644902][ T4489] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 235.972618][T10373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.982431][T10373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.982577][T10425] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2498'. [ 237.049326][T10424] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 237.057984][T10424] netdevsim netdevsim3 netdevsim3 (unregistering): left promiscuous mode [ 237.066508][T10424] bridge0: port 3(netdevsim3) entered disabled state [ 237.865825][T10446] SELinux: ebitmap: map size 2 does not match my size 64 (high bit was 64) [ 238.037020][T10446] SELinux: failed to load policy [ 238.061034][T10452] hub 2-0:1.0: USB hub found [ 238.074863][T10452] hub 2-0:1.0: 8 ports detected [ 238.169298][T10458] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 238.453738][T10484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2527'. [ 238.518168][T10486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2528'. [ 238.585287][T10490] 9pnet_fd: Insufficient options for proto=fd [ 238.611545][T10487] 9pnet_fd: Insufficient options for proto=fd [ 238.672549][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2530'. [ 238.681566][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2530'. [ 238.856737][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2539'. [ 238.914557][T10520] netlink: 'syz.5.2538': attribute type 1 has an invalid length. [ 238.939291][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2538'. [ 238.996784][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 238.996803][ T29] audit: type=1326 audit(2000000098.835:15886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 239.056500][T10533] program syz.3.2548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.084993][ T29] audit: type=1326 audit(2000000098.865:15887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 239.108725][ T29] audit: type=1326 audit(2000000098.865:15888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 239.132346][ T29] audit: type=1326 audit(2000000098.865:15889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 239.155906][ T29] audit: type=1326 audit(2000000098.865:15890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 239.179663][ T29] audit: type=1326 audit(2000000098.865:15891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 239.203263][ T29] audit: type=1326 audit(2000000098.865:15892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 239.226949][ T29] audit: type=1326 audit(2000000098.865:15893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 239.250473][ T29] audit: type=1326 audit(2000000098.865:15894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 239.274076][ T29] audit: type=1326 audit(2000000098.865:15895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f74a982d169 code=0x7ffc0000 [ 239.320506][T10544] __nla_validate_parse: 2 callbacks suppressed [ 239.320522][T10544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2552'. [ 239.367958][T10550] FAULT_INJECTION: forcing a failure. [ 239.367958][T10550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.381079][T10550] CPU: 1 UID: 0 PID: 10550 Comm: syz.1.2554 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 239.381113][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.381128][T10550] Call Trace: [ 239.381133][T10550] [ 239.381138][T10550] dump_stack_lvl+0xf6/0x150 [ 239.381159][T10550] dump_stack+0x15/0x1a [ 239.381173][T10550] should_fail_ex+0x261/0x270 [ 239.381201][T10550] should_fail+0xb/0x10 [ 239.381269][T10550] should_fail_usercopy+0x1a/0x20 [ 239.381293][T10550] _copy_to_user+0x20/0xa0 [ 239.381320][T10550] simple_read_from_buffer+0xb2/0x130 [ 239.381392][T10550] proc_fail_nth_read+0x103/0x140 [ 239.381422][T10550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.381493][T10550] vfs_read+0x1b2/0x710 [ 239.381518][T10550] ? __cond_resched+0x53/0x90 [ 239.381612][T10550] ksys_read+0xeb/0x1b0 [ 239.381636][T10550] __x64_sys_read+0x42/0x50 [ 239.381659][T10550] x64_sys_call+0x2a3b/0x2e10 [ 239.381717][T10550] do_syscall_64+0xc9/0x1c0 [ 239.381741][T10550] ? clear_bhb_loop+0x25/0x80 [ 239.381759][T10550] ? clear_bhb_loop+0x25/0x80 [ 239.381819][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.381836][T10550] RIP: 0033:0x7fcb26abbb7c [ 239.381848][T10550] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 239.381862][T10550] RSP: 002b:00007fcb25127030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.381878][T10550] RAX: ffffffffffffffda RBX: 00007fcb26cd5fa0 RCX: 00007fcb26abbb7c [ 239.381890][T10550] RDX: 000000000000000f RSI: 00007fcb251270a0 RDI: 0000000000000003 [ 239.381980][T10550] RBP: 00007fcb25127090 R08: 0000000000000000 R09: 0000000000000000 [ 239.381990][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.381999][T10550] R13: 0000000000000000 R14: 00007fcb26cd5fa0 R15: 00007fff8577cca8 [ 239.382016][T10550] [ 239.604610][T10558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2559'. [ 239.660969][T10560] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 239.674441][T10560] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 239.991099][T10603] SELinux: ebitmap: map size 2 does not match my size 64 (high bit was 64) [ 240.043488][T10603] SELinux: failed to load policy [ 240.097311][T10615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10615 comm=syz.3.2583 [ 240.372981][T10640] netlink: 'syz.4.2592': attribute type 3 has an invalid length. [ 240.983477][T10683] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2609'. [ 241.162876][T10711] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.268453][T10717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2625'. [ 241.341429][T10727] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.441251][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2635'. [ 241.453700][T10737] gretap1: entered allmulticast mode [ 241.497604][T10743] FAULT_INJECTION: forcing a failure. [ 241.497604][T10743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.500082][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2639'. [ 241.510721][T10743] CPU: 0 UID: 0 PID: 10743 Comm: syz.4.2638 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 241.510752][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.510777][T10743] Call Trace: [ 241.510784][T10743] [ 241.510813][T10743] dump_stack_lvl+0xf6/0x150 [ 241.510841][T10743] dump_stack+0x15/0x1a [ 241.510860][T10743] should_fail_ex+0x261/0x270 [ 241.510896][T10743] should_fail+0xb/0x10 [ 241.510968][T10743] should_fail_usercopy+0x1a/0x20 [ 241.511003][T10743] _copy_from_user+0x1c/0xa0 [ 241.511149][T10743] memdup_user+0x6b/0xd0 [ 241.511178][T10743] ppp_get_filter+0xe0/0x160 [ 241.511207][T10743] ppp_ioctl+0xc2a/0x1250 [ 241.511229][T10743] ? __fget_files+0x186/0x1c0 [ 241.511332][T10743] ? __pfx_ppp_ioctl+0x10/0x10 [ 241.511357][T10743] __se_sys_ioctl+0xc9/0x140 [ 241.511392][T10743] __x64_sys_ioctl+0x43/0x50 [ 241.511423][T10743] x64_sys_call+0x168d/0x2e10 [ 241.511517][T10743] do_syscall_64+0xc9/0x1c0 [ 241.511552][T10743] ? clear_bhb_loop+0x25/0x80 [ 241.511578][T10743] ? clear_bhb_loop+0x25/0x80 [ 241.511604][T10743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.511634][T10743] RIP: 0033:0x7f43e89fd169 [ 241.511653][T10743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.511731][T10743] RSP: 002b:00007f43e705f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.511754][T10743] RAX: ffffffffffffffda RBX: 00007f43e8c15fa0 RCX: 00007f43e89fd169 [ 241.511769][T10743] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000003 [ 241.511784][T10743] RBP: 00007f43e705f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.511804][T10743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.511819][T10743] R13: 0000000000000000 R14: 00007f43e8c15fa0 R15: 00007fff591498f8 [ 241.511945][T10743] [ 241.707996][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2639'. [ 241.729457][T10753] sd 0:0:1:0: device reset [ 241.755742][T10757] netlink: 'syz.3.2644': attribute type 3 has an invalid length. [ 241.763581][T10757] netlink: 'syz.3.2644': attribute type 3 has an invalid length. [ 241.777392][T10757] wireguard0: entered promiscuous mode [ 241.782922][T10757] wireguard0: entered allmulticast mode [ 241.813157][T10762] xt_addrtype: ipv6 does not support BROADCAST matching [ 242.038751][T10781] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2655'. [ 242.059565][T10781] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2655'. [ 242.209201][T10772] 9pnet_fd: Insufficient options for proto=fd [ 242.335888][T10798] 9pnet_fd: Insufficient options for proto=fd [ 242.786782][ T12] ================================================================== [ 242.794925][ T12] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 242.803473][ T12] [ 242.805825][ T12] write to 0xffff88811e2fed21 of 1 bytes by task 10821 on cpu 0: [ 242.813560][ T12] tty_set_termios+0x480/0x8b0 [ 242.818344][ T12] set_termios+0x4af/0x4f0 [ 242.822881][ T12] tty_mode_ioctl+0x394/0x5d0 [ 242.827587][ T12] n_tty_ioctl_helper+0x8d/0x240 [ 242.832574][ T12] n_tty_ioctl+0xfd/0x210 [ 242.836920][ T12] tty_ioctl+0x878/0xbd0 [ 242.841196][ T12] __se_sys_ioctl+0xc9/0x140 [ 242.845796][ T12] __x64_sys_ioctl+0x43/0x50 [ 242.850386][ T12] x64_sys_call+0x168d/0x2e10 [ 242.855063][ T12] do_syscall_64+0xc9/0x1c0 [ 242.859571][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.865461][ T12] [ 242.867781][ T12] read to 0xffff88811e2fed21 of 1 bytes by task 12 on cpu 1: [ 242.875146][ T12] n_tty_receive_char_flow_ctrl+0x22/0x1a0 [ 242.881059][ T12] n_tty_lookahead_flow_ctrl+0xee/0x130 [ 242.886637][ T12] tty_port_default_lookahead_buf+0x8a/0xc0 [ 242.892567][ T12] flush_to_ldisc+0x322/0x410 [ 242.897346][ T12] process_scheduled_works+0x4de/0xa20 [ 242.902828][ T12] worker_thread+0x52c/0x710 [ 242.907424][ T12] kthread+0x4b7/0x540 [ 242.911501][ T12] ret_from_fork+0x4b/0x60 [ 242.915915][ T12] ret_from_fork_asm+0x1a/0x30 [ 242.920680][ T12] [ 242.922993][ T12] value changed: 0x11 -> 0x00 [ 242.927662][ T12] [ 242.929983][ T12] Reported by Kernel Concurrency Sanitizer on: [ 242.936127][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 242.948196][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.958255][ T12] Workqueue: events_unbound flush_to_ldisc [ 242.964074][ T12] ==================================================================