last executing test programs: 4.662409228s ago: executing program 0 (id=4985): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmmsg(r1, &(0x7f0000002800)=[{{&(0x7f0000000080)=@can={0x1d, r2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)="5472e330ed75561b0cbbe2ad823a", 0xe}], 0x1}}], 0x1, 0x80) 4.649317359s ago: executing program 0 (id=4986): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000080), 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r6 = openat$ipvs(0xffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000340)={0x5, 0xf1b, 0x4}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 3.75592373s ago: executing program 0 (id=4999): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = geteuid() openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x6, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800dc5d00000000000000000000000034110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeb2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) syz_io_uring_setup(0x2663, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) r4 = getegid() fchown(0xffffffffffffffff, r1, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9818}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x944b, 0x4002, 0x0, 0x23f}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 3.693141286s ago: executing program 0 (id=5002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)="c057", 0x2}], 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00006c3000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x102, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x2) write$binfmt_script(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) 2.98980172s ago: executing program 1 (id=5015): syz_open_dev$sg(0x0, 0x0, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000002c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000002200000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x1ff) 2.397058263s ago: executing program 3 (id=5020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmmsg(r2, &(0x7f0000002800)=[{{&(0x7f0000000080)=@can={0x1d, r3}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)="5472e330ed75561b0cbbe2ad823a", 0xe}], 0x1}}], 0x1, 0x80) 2.290040523s ago: executing program 3 (id=5021): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x9e7, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.115032309s ago: executing program 1 (id=5025): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x2, 0x1, {{0x1d, 0x4, 0x2, 0x23, 0x74, 0x66, 0x0, 0xc, 0x4, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0xc, 0x21, 0x1, 0x5, [{@local, 0x40}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x1b, 0x6f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @rand_addr=0x64010102, @remote]}, @cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0xb9, [@local]}, @cipso={0x86, 0x1f, 0x1, [{0x2, 0x4, "c8db"}, {0x5, 0x7, "59dbf46451"}, {0x6, 0xe, "341097e9ae941a6037a843e0"}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@deltclass={0x50, 0x29, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x1, 0xe}, {0xffe0}, {0x2}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0xb}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xff}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000008}, 0xc000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0xf3a, 0x0) write(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='cpu_frequency_limits\x00', r0}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000080)={0x1}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe, 0x110, r5, 0x1c26f000) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000480)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001800)=@raw={'raw\x00', 0x3c1, 0x3, 0x1378, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12a8, 0x2e8, 0x2e8, 0x12a8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13d8) 2.029320427s ago: executing program 3 (id=5027): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000890000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet(0x2, 0x2, 0x0) (async) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) add_key(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r9, 0x209, 0x70bd27, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}}, 0x0) 1.998147889s ago: executing program 2 (id=5028): syz_mount_image$ext4(&(0x7f00000013c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x30, 0x3, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x5, 0x0]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x14040004}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r1, r2}, 0xc) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0) 1.8779429s ago: executing program 2 (id=5029): socket$kcm(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x2, &(0x7f00000000c0)=0x0) connect$nfc_raw(r4, &(0x7f0000000140)={0x27, r6}, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000280)=@nfc={0x27, r6, 0x1, 0x2}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x860) 1.857944592s ago: executing program 1 (id=5030): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = io_uring_setup(0xad5, &(0x7f0000000100)) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x1, {0x1, 0x0, 0x3}, 0xff}, 0x18) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2) close(r1) 1.816047416s ago: executing program 3 (id=5031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmmsg(r2, &(0x7f0000002800)=[{{&(0x7f0000000080)=@can={0x1d, r3}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)="5472e330ed75561b0cbbe2ad823a", 0xe}], 0x1}}], 0x1, 0x80) 1.800204568s ago: executing program 2 (id=5032): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 1.799659577s ago: executing program 3 (id=5033): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) ioctl$TUNSETLINK(r0, 0x541b, 0x0) iopl(0x3) futex(&(0x7f000000cffc)=0x25a, 0x800000000006, 0x0, 0x0, 0x0, 0x0) init_module(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000140)={0xfffffffc, 0x100000, 0x0, 0x0, 0x0, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) signalfd4(r1, &(0x7f00000001c0), 0x8, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket(0x10, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x81) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, r4}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 1.764911971s ago: executing program 4 (id=5034): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) socket$inet(0x2, 0x2000000080002, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r3}}, 0x48) close_range(r1, 0xffffffffffffffff, 0x2000000) 1.764356981s ago: executing program 4 (id=5035): syz_open_dev$sg(0x0, 0x0, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000002c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000002200000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x1ff) 1.763965341s ago: executing program 2 (id=5036): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0xc44, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x2e, &(0x7f0000001200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000003140100000700dfff0000000900020073797a31000000000800410073697700140033007465616d5f736c6176655f30000000008c82e02eaf0ecf1f697aa7ebef836475c93309f8a513510a1317bdff"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x22) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.620712414s ago: executing program 3 (id=5037): pipe2$9p(&(0x7f0000000240), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x31a96d6b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.00507339s ago: executing program 1 (id=5038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200)={0x1d, r3}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=r2, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 940.796195ms ago: executing program 1 (id=5039): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000148476921870d9e8fd0000008500000083000000bf0900f6ffffffff54"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x1, &(0x7f00000007c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000000206010300000000000006000000000005000500000000000c00078008000840000000580900020073797a300000000005000100070000000d000300686173683a6d616300000000050004"], 0x54}}, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x8000000, 0x240, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendto$inet(r4, 0x0, 0x0, 0x24000080, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x24000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r5, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[], 0xb0) close(0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000240)={0x201, 0x210, 0x8}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 882.024551ms ago: executing program 2 (id=5040): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) io_setup(0x3, &(0x7f0000000340)) (fail_nth: 5) 832.822345ms ago: executing program 4 (id=5041): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x2, 0x1, {{0x1d, 0x4, 0x2, 0x23, 0x74, 0x66, 0x0, 0xc, 0x4, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0xc, 0x21, 0x1, 0x5, [{@local, 0x40}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x1b, 0x6f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @rand_addr=0x64010102, @remote]}, @cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0xb9, [@local]}, @cipso={0x86, 0x1f, 0x1, [{0x2, 0x4, "c8db"}, {0x5, 0x7, "59dbf46451"}, {0x6, 0xe, "341097e9ae941a6037a843e0"}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@deltclass={0x50, 0x29, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x1, 0xe}, {0xffe0}, {0x2}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0xb}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xff}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000008}, 0xc000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0xf3a, 0x0) write(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='cpu_frequency_limits\x00', r0}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000080)={0x1}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe, 0x110, r5, 0x1c26f000) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000480)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001800)=@raw={'raw\x00', 0x3c1, 0x3, 0x1378, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12a8, 0x2e8, 0x2e8, 0x12a8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13d8) 486.746096ms ago: executing program 0 (id=5042): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @multicast1, 0x0}, &(0x7f0000000040)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x19867c71, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f622174616476000900010073797a30"], 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000680)='mm_vmscan_lru_shrink_active\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='CT\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x43, 0xa0, 0x1b0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) 486.251196ms ago: executing program 4 (id=5043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmmsg(r2, &(0x7f0000002800)=[{{&(0x7f0000000080)=@can={0x1d, r3}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)="5472e330ed75561b0cbbe2ad823a", 0xe}], 0x1}}], 0x1, 0x80) 441.284431ms ago: executing program 2 (id=5044): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fstat(r1, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="03f352521000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030005000000"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async) fstat(r1, &(0x7f0000000180)) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="03f352521000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030005000000"], 0x48}}, 0x0) (async) 440.763091ms ago: executing program 4 (id=5045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = io_uring_setup(0x1de1, &(0x7f0000000440)={0x0, 0x10000, 0x1, 0x0, 0xfffffffd}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) (fail_nth: 4) 383.977016ms ago: executing program 0 (id=5046): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000004000000ff00", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000c33ee811d28eb2559b00000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x5}}, 0x10, &(0x7f0000004340)}, 0x8000) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pwrite64(r3, &(0x7f0000000380)="56ec4f6cd2315268794f2624cf7d9e120c5d9a4d1235187c4bc8f95a0795177d209991382748b411a75c4d604418e09afae41a6fed5dd796923c0f6e2e0b6de7c11328b456a3d89e6965407f76", 0x4d, 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x8}, @window={0x3, 0x6, 0x5}, @window={0x3, 0xa, 0x6}, @window={0x3, 0x5, 0x5}, @timestamp, @sack_perm], 0x6) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYRES16=r8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = socket(0x10, 0x3, 0x9) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) 526.68µs ago: executing program 4 (id=5047): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000080), 0x4) recvmsg(r2, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r7 = openat$ipvs(0xffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f0000000340)={0x5, 0xf1b, 0x4}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 0s ago: executing program 1 (id=5048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$eJzs27FqU1EYB/B/alpv7GAHJ1EMdHEq6hMYpIIYECoZdDJQXVoR0iUKYp/HWfAVfBmXDtItcnujbWMKrWmaGn8/OJyPfDnkuwfCd4ZzX916u7X5bufN4se9FLVmFpKH2U9WymioNpyLg3gpx9QyiR8TrQYA/srGRreVfJ11GUxRr9fq3lhdHpPpfJ5BOQAAAAAAAAAAAJyDs9z/X0g+jd7/373gegGAyVX3/5lHjeHc67W6t6vz2wj3/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDZ2R8Mrg/KUQzn4biapEjSSHItST1J+fms6wUAJrc/ON73T+r/SWpJ9H8AmAPPX7x82mq31zeazSL5vtvv9DvVXOUfP2mv32seWDlctdfvd64kKUd7/X6Vbx7PLx6cG8r1D8bml3J3tcqXuUfP2iP55WxexAYAwH9orfnbkf7+q7cna2vj8mV/rqIj54OR/l3PzfrYn1yY0qMAAKe08/7DVnd7+3Xv3IPa2VY1hgWd/J0v9WmVOmnQmPpmXorgW+0ylJFcjt34h4PidPsMzLfDP/1opphNQQAAAAAAAAAAAAAAwB8u4pWjJHdm/ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyXnwEAAP//2d9NhA==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x48) ftruncate(r0, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x48) socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180080e932f455cac0b2b8110000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_read_part_table(0x5c7, &(0x7f0000000000)="$eJzs2z9I3GcYB/DnLnekpEOWTE5JChlKloSMuSEJ3iUhheOSLGmHBBJC8KYLBE56IOigN1i8QRy7lMItVif1BidFwVnEwSI4uLTURXDxivpaOrRF/FNa+Hzg7uEevu/73DP8xl/wv5aNX7vdbiYiupf/OtH9h9Mv273FJ9fLDyovIjKHyb6vvzi8J3N8Ot16M/3e+GPKlc7IzuN8e/357q3XC81s6g6kz+c/zr48h/W4YJOFxavZoVpptF74sFZqbA2vruQiojL7rNmaepp/9DblllLNpfox6tEfffEmqlGNd1E7w/zBP82faG/e2e8ptWfe398rdr6bv5ty5eMDPaff9STzP90Ye9VqPLw9fW38Xn1uubJ96ShX/ZunCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/5bJwuLVwaFaabRe+LBWamwNr6589dNvvZXZZ83W1NP8o7cpt5RqLtWPUY/+6Is3UY1MvIvaOc2faG/e2e8ptWfe398rdjLzd1OufMY9Tzr/042xV63Gw9vT18bv1eeWK9uXjnLVyxf0BwAAAAAAAAAAAAAAAAAAACAieotPrpcfVF5EZOKbyMWXv3ybPeh30/vumZS7mepG6v/w/ZXOyM7jfHv9+e6t1wvNn4/6nx18DUTk//VFOJXfAwAA//9vSI9n") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x105000, 0x0) unshare(0x64000600) kernel console output (not intermixed with test programs): [ 393.903479][T20810] dump_stack_lvl+0xf2/0x150 [ 393.908132][T20810] dump_stack+0x15/0x20 [ 393.912321][T20810] should_fail_ex+0x223/0x230 [ 393.917103][T20810] ? sidtab_sid2str_get+0xb8/0x140 [ 393.922243][T20810] should_failslab+0x8f/0xb0 [ 393.926866][T20810] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 393.933292][T20810] ? vsnprintf+0xdd8/0xe30 [ 393.937793][T20810] kmemdup_noprof+0x2a/0x60 [ 393.942398][T20810] sidtab_sid2str_get+0xb8/0x140 [ 393.947455][T20810] security_sid_to_context_core+0x1eb/0x2f0 [ 393.953369][T20810] security_sid_to_context+0x27/0x30 [ 393.958669][T20810] selinux_secid_to_secctx+0x22/0x30 [ 393.963957][T20810] security_secid_to_secctx+0x48/0x90 [ 393.969348][T20810] audit_log_task_context+0x8c/0x1b0 [ 393.974644][T20810] audit_log_task+0xfb/0x180 [ 393.979244][T20810] audit_seccomp+0x68/0x130 [ 393.983762][T20810] __seccomp_filter+0x6fa/0x1180 [ 393.988710][T20810] ? proc_fail_nth_write+0x12a/0x150 [ 393.994034][T20810] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 393.999702][T20810] ? vfs_write+0x580/0x910 [ 394.004154][T20810] __secure_computing+0x9f/0x1c0 [ 394.009095][T20810] syscall_trace_enter+0xd1/0x1f0 [ 394.014138][T20810] do_syscall_64+0xaa/0x1c0 [ 394.018634][T20810] ? clear_bhb_loop+0x55/0xb0 [ 394.023358][T20810] ? clear_bhb_loop+0x55/0xb0 [ 394.028053][T20810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.033977][T20810] RIP: 0033:0x7f4ebea4dff9 [ 394.038467][T20810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.058074][T20810] RSP: 002b:00007f4ebd6c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 394.066484][T20810] RAX: ffffffffffffffda RBX: 00007f4ebec05f80 RCX: 00007f4ebea4dff9 [ 394.074489][T20810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 394.082470][T20810] RBP: 00007f4ebd6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 394.090460][T20810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.098445][T20810] R13: 0000000000000000 R14: 00007f4ebec05f80 R15: 00007fff02563738 [ 394.106498][T20810] [ 394.162867][ T56] team0 (unregistering): Port device team_slave_1 removed [ 394.173861][ T56] team0 (unregistering): Port device team_slave_0 removed [ 394.245988][T20755] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.253212][T20755] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.275560][T20755] bridge_slave_0: entered allmulticast mode [ 394.288941][T20755] bridge_slave_0: entered promiscuous mode [ 394.313895][T20755] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.321308][T20831] FAULT_INJECTION: forcing a failure. [ 394.321308][T20831] name failslab, interval 1, probability 0, space 0, times 0 [ 394.321315][T20755] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.321376][T20831] CPU: 1 UID: 0 PID: 20831 Comm: syz.3.4668 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 394.340653][T20755] bridge_slave_1: entered allmulticast mode [ 394.340904][T20831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.354312][T20755] bridge_slave_1: entered promiscuous mode [ 394.357524][T20831] Call Trace: [ 394.357531][T20831] [ 394.357541][T20831] dump_stack_lvl+0xf2/0x150 [ 394.384259][T20831] dump_stack+0x15/0x20 [ 394.388520][T20831] should_fail_ex+0x223/0x230 [ 394.391481][T20833] loop1: detected capacity change from 0 to 128 [ 394.393216][T20831] ? security_file_alloc+0x32/0x100 [ 394.399812][T20833] vfat: Unknown parameter 'ÿÿ' [ 394.404663][T20831] should_failslab+0x8f/0xb0 [ 394.414058][T20831] kmem_cache_alloc_noprof+0x4c/0x290 [ 394.419510][T20831] security_file_alloc+0x32/0x100 [ 394.424650][T20831] alloc_empty_file+0x121/0x2f0 [ 394.429544][T20831] path_openat+0x6a/0x1fa0 [ 394.434031][T20831] ? _parse_integer+0x27/0x30 [ 394.438727][T20831] ? kstrtoull+0x110/0x140 [ 394.443153][T20831] ? kstrtouint+0x77/0xc0 [ 394.447496][T20831] do_filp_open+0xf7/0x200 [ 394.452097][T20831] do_sys_openat2+0xab/0x120 [ 394.456692][T20831] __x64_sys_openat+0xf3/0x120 [ 394.461451][T20831] x64_sys_call+0x1025/0x2d60 [ 394.466167][T20831] do_syscall_64+0xc9/0x1c0 [ 394.470867][T20831] ? clear_bhb_loop+0x55/0xb0 [ 394.475647][T20831] ? clear_bhb_loop+0x55/0xb0 [ 394.480356][T20831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.486338][T20831] RIP: 0033:0x7f992c5bdff9 [ 394.490755][T20831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.510386][T20831] RSP: 002b:00007f992b237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 394.518948][T20831] RAX: ffffffffffffffda RBX: 00007f992c775f80 RCX: 00007f992c5bdff9 [ 394.526958][T20831] RDX: 0000000000020000 RSI: 0000000020000200 RDI: 00000000ffffff9c [ 394.534932][T20831] RBP: 00007f992b237090 R08: 0000000000000000 R09: 0000000000000000 [ 394.542923][T20831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.550976][T20831] R13: 0000000000000000 R14: 00007f992c775f80 R15: 00007ffe4375f398 [ 394.559030][T20831] [ 394.571472][T20755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.582452][T20755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.604122][T20755] team0: Port device team_slave_0 added [ 394.611265][T20755] team0: Port device team_slave_1 added [ 394.696113][T20755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.703235][T20755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.729204][T20755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.880103][T20755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.887120][T20755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.913192][T20755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.952161][T20755] hsr_slave_0: entered promiscuous mode [ 394.958267][T20755] hsr_slave_1: entered promiscuous mode [ 394.964330][T20755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.971997][T20755] Cannot create hsr debugfs directory [ 395.162927][T20868] FAULT_INJECTION: forcing a failure. [ 395.162927][T20868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.176191][T20868] CPU: 0 UID: 0 PID: 20868 Comm: syz.2.4678 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 395.186982][T20868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.197082][T20868] Call Trace: [ 395.200445][T20868] [ 395.203393][T20868] dump_stack_lvl+0xf2/0x150 [ 395.208051][T20868] dump_stack+0x15/0x20 [ 395.212209][T20868] should_fail_ex+0x223/0x230 [ 395.217029][T20868] should_fail+0xb/0x10 [ 395.221237][T20868] should_fail_usercopy+0x1a/0x20 [ 395.226334][T20868] fpu__restore_sig+0x11a/0xaf0 [ 395.231246][T20868] restore_sigcontext+0x1b5/0x220 [ 395.236293][T20868] __do_sys_rt_sigreturn+0xe5/0x150 [ 395.241573][T20868] x64_sys_call+0x28e1/0x2d60 [ 395.246324][T20868] do_syscall_64+0xc9/0x1c0 [ 395.250819][T20868] ? clear_bhb_loop+0x55/0xb0 [ 395.255557][T20868] ? clear_bhb_loop+0x55/0xb0 [ 395.260241][T20868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.266299][T20868] RIP: 0033:0x7f92412adff9 [ 395.270844][T20868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.290508][T20868] RSP: 002b:00007f923ff27038 EFLAGS: 00000246 [ 395.296730][T20868] RAX: 0000000000000000 RBX: 00007f9241465f80 RCX: 00007f92412adff9 [ 395.304700][T20868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.312810][T20868] RBP: 00007f923ff27090 R08: 0000000000000000 R09: 0000000000000000 [ 395.320807][T20868] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 395.328872][T20868] R13: 0000000000000000 R14: 00007f9241465f80 R15: 00007ffdf2ad9ee8 [ 395.336864][T20868] [ 395.365436][T20755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.378713][T20755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.410224][T20755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.433912][T20755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.477988][T20755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.489481][T20755] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.502973][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.510151][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.530247][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.537327][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.550494][T20888] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.564498][T20890] FAULT_INJECTION: forcing a failure. [ 395.564498][T20890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.577799][T20890] CPU: 1 UID: 0 PID: 20890 Comm: syz.1.4683 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 395.588599][T20890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.598756][T20890] Call Trace: [ 395.602059][T20890] [ 395.605099][T20890] dump_stack_lvl+0xf2/0x150 [ 395.609746][T20890] dump_stack+0x15/0x20 [ 395.613941][T20890] should_fail_ex+0x223/0x230 [ 395.618694][T20890] should_fail+0xb/0x10 [ 395.622897][T20890] should_fail_usercopy+0x1a/0x20 [ 395.627971][T20890] _copy_from_user+0x1e/0xd0 [ 395.632639][T20890] vt_ioctl+0x9b1/0x1810 [ 395.634723][T20755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.636927][T20890] tty_ioctl+0x815/0xbe0 [ 395.647941][T20890] ? __pfx_tty_ioctl+0x10/0x10 [ 395.652740][T20890] __se_sys_ioctl+0xcd/0x140 [ 395.657399][T20890] __x64_sys_ioctl+0x43/0x50 [ 395.662019][T20890] x64_sys_call+0x15cc/0x2d60 [ 395.666773][T20890] do_syscall_64+0xc9/0x1c0 [ 395.671303][T20890] ? clear_bhb_loop+0x55/0xb0 [ 395.676004][T20890] ? clear_bhb_loop+0x55/0xb0 [ 395.680771][T20890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.686695][T20890] RIP: 0033:0x7ff79255dff9 [ 395.691227][T20890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.710891][T20890] RSP: 002b:00007ff7911d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.719337][T20890] RAX: ffffffffffffffda RBX: 00007ff792715f80 RCX: 00007ff79255dff9 [ 395.727324][T20890] RDX: 0000000020000000 RSI: 0000000000004b72 RDI: 000000000000000c [ 395.735291][T20890] RBP: 00007ff7911d7090 R08: 0000000000000000 R09: 0000000000000000 [ 395.743278][T20890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.751269][T20890] R13: 0000000000000000 R14: 00007ff792715f80 R15: 00007fff57ac2108 [ 395.759262][T20890] [ 395.783991][T20888] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.806775][T20890] loop1: detected capacity change from 0 to 2048 [ 395.821100][T20888] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.843432][T20890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.866536][T20755] veth0_vlan: entered promiscuous mode [ 395.880585][T20888] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.892383][T15520] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.909559][T20755] veth1_vlan: entered promiscuous mode [ 395.932449][T20755] veth0_macvtap: entered promiscuous mode [ 395.941170][T20755] veth1_macvtap: entered promiscuous mode [ 395.959081][T20888] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.974384][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.985001][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.994928][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.005412][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.015250][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.025705][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.035663][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.035684][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.035704][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.035779][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.035795][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.035892][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.035910][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.035925][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.043363][T20755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.127932][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.138463][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.148310][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.158841][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.168704][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.179203][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.189116][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.199650][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.209489][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.219980][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.229842][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.240425][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.250273][T20755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.260783][T20755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.273582][T20755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.283804][T20888] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.289647][T20923] loop1: detected capacity change from 0 to 2048 [ 396.302919][T20755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.311741][T20755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.320570][T20755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.329334][T20755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.343701][T20888] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.360210][T20923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.382871][T20888] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.399124][T20940] bridge0: port 3(gretap0) entered blocking state [ 396.405593][T20940] bridge0: port 3(gretap0) entered disabled state [ 396.408693][T20940] gretap0: entered allmulticast mode [ 396.409237][T20940] gretap0: entered promiscuous mode [ 396.409392][T20940] bridge0: port 3(gretap0) entered blocking state [ 396.409424][T20940] bridge0: port 3(gretap0) entered forwarding state [ 396.424107][T20945] loop0: detected capacity change from 0 to 512 [ 396.424474][T20945] journal_path: Lookup failure for './file0' [ 396.424493][T20945] EXT4-fs: error: could not find journal device path [ 396.494921][T15520] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.598332][T20960] loop2: detected capacity change from 0 to 256 [ 396.605197][T20960] msdos: Unknown parameter '' [ 396.650133][T20967] loop3: detected capacity change from 0 to 512 [ 396.679904][T20967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.706650][T20967] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.760399][T20974] FAULT_INJECTION: forcing a failure. [ 396.760399][T20974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.773617][T20974] CPU: 1 UID: 0 PID: 20974 Comm: syz.2.4701 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 396.781712][T20967] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4699'. [ 396.784465][T20974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 396.784481][T20974] Call Trace: [ 396.784488][T20974] [ 396.795036][T20978] Cannot find del_set index 0 as target [ 396.803372][T20974] dump_stack_lvl+0xf2/0x150 [ 396.803406][T20974] dump_stack+0x15/0x20 [ 396.803469][T20974] should_fail_ex+0x223/0x230 [ 396.803507][T20974] should_fail+0xb/0x10 [ 396.820850][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 396.820865][ T29] audit: type=1326 audit(1727900004.711:11972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20961 comm="syz.2.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f92412adff9 code=0x7ffc0000 [ 396.824112][T20974] should_fail_usercopy+0x1a/0x20 [ 396.831598][ T29] audit: type=1400 audit(1727900004.741:11973): avc: denied { name_connect } for pid=20966 comm="syz.3.4699" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 396.832921][T20974] _copy_from_user+0x1e/0xd0 [ 396.893475][T20974] copy_msghdr_from_user+0x54/0x2a0 [ 396.898765][T20974] __sys_sendmsg+0x171/0x270 [ 396.903502][T20974] __x64_sys_sendmsg+0x46/0x50 [ 396.908281][T20974] x64_sys_call+0x2689/0x2d60 [ 396.913087][T20974] do_syscall_64+0xc9/0x1c0 [ 396.917596][T20974] ? clear_bhb_loop+0x55/0xb0 [ 396.922295][T20974] ? clear_bhb_loop+0x55/0xb0 [ 396.927066][T20974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.932979][T20974] RIP: 0033:0x7f92412adff9 [ 396.937396][T20974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.957138][T20974] RSP: 002b:00007f923ff27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.965552][T20974] RAX: ffffffffffffffda RBX: 00007f9241465f80 RCX: 00007f92412adff9 [ 396.973522][T20974] RDX: 0000000000000810 RSI: 00000000200037c0 RDI: 0000000000000006 [ 396.981515][T20974] RBP: 00007f923ff27090 R08: 0000000000000000 R09: 0000000000000000 [ 396.989483][T20974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.997457][T20974] R13: 0000000000000000 R14: 00007f9241465f80 R15: 00007ffdf2ad9ee8 [ 397.005463][T20974] [ 397.138141][T20989] loop4: detected capacity change from 512 to 64 [ 397.196767][T20991] FAULT_INJECTION: forcing a failure. [ 397.196767][T20991] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 397.210076][T20991] CPU: 1 UID: 0 PID: 20991 Comm: syz.2.4707 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 397.220890][T20991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 397.231035][T20991] Call Trace: [ 397.234347][T20991] [ 397.237453][T20991] dump_stack_lvl+0xf2/0x150 [ 397.242083][T20991] dump_stack+0x15/0x20 [ 397.246237][T20991] should_fail_ex+0x223/0x230 [ 397.250974][T20991] should_fail_alloc_page+0xfd/0x110 [ 397.256267][T20991] __alloc_pages_noprof+0x109/0x360 [ 397.261566][T20991] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 397.266982][T20991] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 397.272403][T20991] do_wp_page+0x64e/0x2340 [ 397.276860][T20991] ? __rcu_read_lock+0x36/0x50 [ 397.281676][T20991] handle_mm_fault+0xc47/0x2a80 [ 397.286554][T20991] exc_page_fault+0x3b9/0x650 [ 397.291303][T20991] asm_exc_page_fault+0x26/0x30 [ 397.296241][T20991] RIP: 0033:0x7f924117da3d [ 397.300651][T20991] Code: 00 00 00 64 f0 83 04 25 90 ff ff ff 01 64 48 8b 04 25 00 00 00 00 48 8d b8 c8 fe ff ff e8 9b bc 0c 00 85 c0 0f 84 93 01 00 00 <64> f0 83 2c 25 90 ff ff ff 01 e8 e4 96 0b 00 48 8b 0c 24 8b 00 48 [ 397.320264][T20991] RSP: 002b:00007f923ff27060 EFLAGS: 00010202 [ 397.326367][T20991] RAX: 0000000000000000 RBX: 00007f9241465f80 RCX: 0000000000000001 [ 397.334428][T20991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.342404][T20991] RBP: 00007f923ff27090 R08: 0000000020000300 R09: 0000000000000000 [ 397.350458][T20991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.358456][T20991] R13: 0000000000000001 R14: 00007f9241465f80 R15: 00007ffdf2ad9ee8 [ 397.366457][T20991] [ 397.369642][T20991] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 397.417907][T21005] loop0: detected capacity change from 0 to 128 [ 397.429822][T21005] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 397.433932][ T29] audit: type=1400 audit(1727900005.341:11974): avc: denied { map } for pid=21008 comm="syz.2.4714" path="socket:[56129]" dev="sockfs" ino=56129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 397.458283][T21005] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 397.465327][ T29] audit: type=1400 audit(1727900005.341:11975): avc: denied { read } for pid=21008 comm="syz.2.4714" path="socket:[56129]" dev="sockfs" ino=56129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 397.520801][ T29] audit: type=1400 audit(1727900005.411:11976): avc: denied { mounton } for pid=21002 comm="syz.0.4711" path="/2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 397.528298][T21005] loop0: detected capacity change from 128 to 64 [ 397.607962][T11768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.617271][T20755] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Out of memory [ 397.629343][T20755] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 397.641847][T21021] loop1: detected capacity change from 0 to 128 [ 397.653342][T21023] loop3: detected capacity change from 0 to 128 [ 397.660617][ T29] audit: type=1400 audit(1727900005.561:11977): avc: denied { remount } for pid=21018 comm="syz.1.4719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 397.661395][T20755] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Out of memory [ 397.681038][ T29] audit: type=1400 audit(1727900005.571:11978): avc: denied { unlink } for pid=20755 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 397.713153][T21023] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 397.726336][T21023] ext4 filesystem being mounted at /487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 397.730718][T20755] EXT4-fs error (device loop0): __ext4_unlink:3277: inode #2: comm syz-executor: mark_inode_dirty error [ 397.807871][T21023] loop3: detected capacity change from 128 to 64 [ 397.823672][T11768] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 397.833043][T11768] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 397.847313][T11768] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 397.856826][T11768] EXT4-fs error (device loop3): __ext4_unlink:3277: inode #2: comm syz-executor: mark_inode_dirty error [ 397.952632][ T29] audit: type=1400 audit(1727900005.861:11979): avc: denied { ioctl } for pid=21043 comm="syz.1.4727" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 397.980440][T21044] loop1: detected capacity change from 0 to 512 [ 397.987440][T21044] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 398.000905][T21044] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 398.009328][T21044] System zones: 1-12 [ 398.013892][T21044] EXT4-fs (loop1): 1 truncate cleaned up [ 398.021574][T21044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.057551][T11768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 398.069001][T21045] loop1: detected capacity change from 512 to 64 [ 398.161999][T21045] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop1 ino=15 [ 398.171168][T21045] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop1 ino=15 [ 398.180739][T21045] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -12) [ 398.192688][ T29] audit: type=1400 audit(1727900006.091:11980): avc: denied { unlink } for pid=21043 comm="syz.1.4727" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 398.217931][ T29] audit: type=1400 audit(1727900006.121:11981): avc: denied { read } for pid=21052 comm="syz.4.4730" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 398.242471][T21053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.251295][T21053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.259593][T21053] 9pnet_fd: Insufficient options for proto=fd [ 398.286046][T15520] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 398.301336][T15520] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 398.314921][T15520] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 398.320865][T21056] chnl_net:caif_netlink_parms(): no params data found [ 398.330948][T15520] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 398.348923][T15520] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 398.362523][T15520] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 398.376138][T15520] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 398.391488][T15520] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 398.405233][T15520] EXT4-fs warning (device loop1): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 398.427478][T21056] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.434671][T21056] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.441986][T21056] bridge_slave_0: entered allmulticast mode [ 398.448522][T21056] bridge_slave_0: entered promiscuous mode [ 398.459548][T21056] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.466697][T21056] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.474239][T21056] bridge_slave_1: entered allmulticast mode [ 398.480773][T21056] bridge_slave_1: entered promiscuous mode [ 398.498717][T21056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.509697][T21056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.529083][T21056] team0: Port device team_slave_0 added [ 398.535687][T21056] team0: Port device team_slave_1 added [ 398.550927][T21056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.558079][T21056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.583996][T21056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.595397][T21056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.602438][T21056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.628444][T21056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.657127][T21056] hsr_slave_0: entered promiscuous mode [ 398.663667][T21056] hsr_slave_1: entered promiscuous mode [ 398.670167][T21056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.677724][T21056] Cannot create hsr debugfs directory [ 398.691680][T21072] netlink: 'syz.2.4733': attribute type 1 has an invalid length. [ 398.699518][T15520] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.734047][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.751829][T21078] loop2: detected capacity change from 0 to 256 [ 398.764484][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.773287][T21078] vfat: Unknown parameter 'icharset' [ 398.832646][T21056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.849740][T21083] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 398.869884][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.893012][T21056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.931527][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.983699][T21056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.996692][T21090] FAULT_INJECTION: forcing a failure. [ 398.996692][T21090] name failslab, interval 1, probability 0, space 0, times 0 [ 399.009454][T21090] CPU: 1 UID: 0 PID: 21090 Comm: syz.2.4736 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 399.020319][T21090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.030466][T21090] Call Trace: [ 399.033788][T21090] [ 399.036735][T21090] dump_stack_lvl+0xf2/0x150 [ 399.041339][T21090] dump_stack+0x15/0x20 [ 399.045680][T21090] should_fail_ex+0x223/0x230 [ 399.050396][T21090] ? __d_alloc+0x3d/0x340 [ 399.054734][T21090] should_failslab+0x8f/0xb0 [ 399.059335][T21090] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 399.065111][T21090] __d_alloc+0x3d/0x340 [ 399.069308][T21090] d_alloc_pseudo+0x1e/0x80 [ 399.073840][T21090] alloc_file_pseudo+0x70/0x140 [ 399.078700][T21090] anon_inode_getfile+0xa3/0x120 [ 399.083744][T21090] bpf_link_prime+0x10a/0x1e0 [ 399.088517][T21090] tcx_link_attach+0x109/0x600 [ 399.093369][T21090] ? __fget_files+0x1d4/0x210 [ 399.098127][T21090] link_create+0x399/0x650 [ 399.102611][T21090] __sys_bpf+0x430/0x7a0 [ 399.106944][T21090] __x64_sys_bpf+0x43/0x50 [ 399.111451][T21090] x64_sys_call+0x2625/0x2d60 [ 399.116144][T21090] do_syscall_64+0xc9/0x1c0 [ 399.120652][T21090] ? clear_bhb_loop+0x55/0xb0 [ 399.125376][T21090] ? clear_bhb_loop+0x55/0xb0 [ 399.130146][T21090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.136117][T21090] RIP: 0033:0x7f92412adff9 [ 399.140531][T21090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.160180][T21090] RSP: 002b:00007f923ff06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.168714][T21090] RAX: ffffffffffffffda RBX: 00007f9241466058 RCX: 00007f92412adff9 [ 399.176745][T21090] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 000000000000001c [ 399.184789][T21090] RBP: 00007f923ff06090 R08: 0000000000000000 R09: 0000000000000000 [ 399.192861][T21090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.200835][T21090] R13: 0000000000000000 R14: 00007f9241466058 R15: 00007ffdf2ad9ee8 [ 399.208862][T21090] [ 399.229508][T21078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4736'. [ 399.245711][ T11] bridge_slave_1: left allmulticast mode [ 399.251591][ T11] bridge_slave_1: left promiscuous mode [ 399.257360][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.267175][ T11] bridge_slave_0: left allmulticast mode [ 399.272892][ T11] bridge_slave_0: left promiscuous mode [ 399.278789][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.510709][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.521504][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.531901][ T11] bond0 (unregistering): Released all slaves [ 399.540602][ T11] bond1 (unregistering): Released all slaves [ 399.553000][T21056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.581816][ T11] tipc: Disabling bearer [ 399.587107][ T11] tipc: Left network mode [ 399.601109][ T11] hsr_slave_0: left promiscuous mode [ 399.607158][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.614678][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.622334][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.629768][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.639486][ T11] veth1_macvtap: left promiscuous mode [ 399.644987][ T11] veth0_macvtap: left promiscuous mode [ 399.650618][ T11] veth1_vlan: left promiscuous mode [ 399.655916][ T11] veth0_vlan: left promiscuous mode [ 399.731917][ T11] team0 (unregistering): Port device team_slave_1 removed [ 399.742740][ T11] team0 (unregistering): Port device team_slave_0 removed [ 399.812449][T21079] chnl_net:caif_netlink_parms(): no params data found [ 399.874240][T21056] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 399.887655][T21056] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 399.897012][T21079] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.904260][T21079] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.911484][T21079] bridge_slave_0: entered allmulticast mode [ 399.917928][T21079] bridge_slave_0: entered promiscuous mode [ 399.924647][T21056] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 399.934498][T21079] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.941685][T21079] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.949028][T21079] bridge_slave_1: entered allmulticast mode [ 399.955476][T21079] bridge_slave_1: entered promiscuous mode [ 399.961745][T21056] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 399.983270][T21079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.994193][T21079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.015757][T21079] team0: Port device team_slave_0 added [ 400.023977][T21079] team0: Port device team_slave_1 added [ 400.042687][T21079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.049703][T21079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.075709][T21079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.087176][T21079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.094170][T21079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.120131][T21079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.157145][T21079] hsr_slave_0: entered promiscuous mode [ 400.163753][T21079] hsr_slave_1: entered promiscuous mode [ 400.169744][T21079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.177313][T21079] Cannot create hsr debugfs directory [ 400.247327][ T56] bridge_slave_1: left allmulticast mode [ 400.253057][ T56] bridge_slave_1: left promiscuous mode [ 400.258821][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.266945][ T56] bridge_slave_0: left allmulticast mode [ 400.272647][ T56] bridge_slave_0: left promiscuous mode [ 400.278320][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.450047][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.460557][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.470666][ T56] bond0 (unregistering): Released all slaves [ 400.487169][T21056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.507235][T21056] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.521119][ T1689] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.528294][ T1689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.550988][ T56] tipc: Disabling bearer [ 400.556329][ T56] tipc: Left network mode [ 400.560228][ T1689] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.567742][ T1689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.594316][ T56] hsr_slave_0: left promiscuous mode [ 400.600447][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.607942][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.615634][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.623148][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.632451][ T56] veth1_macvtap: left promiscuous mode [ 400.638180][ T56] veth0_macvtap: left promiscuous mode [ 400.643734][ T56] veth1_vlan: left promiscuous mode [ 400.649065][ T56] veth0_vlan: left promiscuous mode [ 400.727510][ T56] team0 (unregistering): Port device team_slave_1 removed [ 400.738682][ T56] team0 (unregistering): Port device team_slave_0 removed [ 400.754403][T21128] syz.4.4747[21128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.754475][T21128] syz.4.4747[21128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.767862][T21128] syz.4.4747[21128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.836743][T21056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.849917][T21138] FAULT_INJECTION: forcing a failure. [ 400.849917][T21138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.868151][T21138] CPU: 1 UID: 0 PID: 21138 Comm: syz.4.4750 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 400.878996][T21138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 400.889058][T21138] Call Trace: [ 400.892349][T21138] [ 400.895334][T21138] dump_stack_lvl+0xf2/0x150 [ 400.899937][T21138] dump_stack+0x15/0x20 [ 400.904098][T21138] should_fail_ex+0x223/0x230 [ 400.908804][T21138] should_fail+0xb/0x10 [ 400.912975][T21138] should_fail_usercopy+0x1a/0x20 [ 400.918024][T21138] _copy_from_user+0x1e/0xd0 [ 400.922655][T21138] __se_sys_mount+0x119/0x2d0 [ 400.927364][T21138] ? ksys_write+0x17a/0x1b0 [ 400.931939][T21138] __x64_sys_mount+0x67/0x80 [ 400.936541][T21138] x64_sys_call+0x203e/0x2d60 [ 400.941345][T21138] do_syscall_64+0xc9/0x1c0 [ 400.945852][T21138] ? clear_bhb_loop+0x55/0xb0 [ 400.950546][T21138] ? clear_bhb_loop+0x55/0xb0 [ 400.955341][T21138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.961319][T21138] RIP: 0033:0x7f4ebea4dff9 [ 400.965730][T21138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.985340][T21138] RSP: 002b:00007f4ebd6c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 400.993797][T21138] RAX: ffffffffffffffda RBX: 00007f4ebec05f80 RCX: 00007f4ebea4dff9 [ 401.001850][T21138] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 401.009822][T21138] RBP: 00007f4ebd6c7090 R08: 0000000020000400 R09: 0000000000000000 [ 401.017804][T21138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.025779][T21138] R13: 0000000000000000 R14: 00007f4ebec05f80 R15: 00007fff02563738 [ 401.033848][T21138] [ 401.047162][T21138] 9pnet_fd: Insufficient options for proto=fd [ 401.100202][T21056] veth0_vlan: entered promiscuous mode [ 401.113785][T21056] veth1_vlan: entered promiscuous mode [ 401.126883][T21079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.135774][T21079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 401.144844][T21079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.154550][T21079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.176195][T21056] veth0_macvtap: entered promiscuous mode [ 401.190014][T21056] veth1_macvtap: entered promiscuous mode [ 401.210276][T21056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.221031][T21056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.230884][T21056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.241378][T21056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.251225][T21056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.261746][T21056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.271705][T21056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.282374][T21056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.292388][T21056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.303028][T21056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.313064][T21056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.323523][T21056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.337848][T21056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.349623][T21056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.360338][T21056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.370261][T21056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.380730][T21056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.381926][T20755] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 401.390540][T21056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.409935][T21056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.419778][T21056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.430228][T21056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.440141][T21056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.450676][T21056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.460510][T21056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.470956][T21056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.483023][T21056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.519269][T21056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.528035][T21056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.536775][T21056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.545555][T21056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.581067][T21156] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 401.582949][T21079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.620110][T21079] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.631945][ T3359] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.639051][ T3359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.655981][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.676609][ T3359] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.683795][ T3359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.707309][T21079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.717836][T21079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.738660][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.757459][T21172] loop3: detected capacity change from 0 to 512 [ 401.780518][T21172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.794825][T21172] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.811097][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.841794][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 401.841811][ T29] audit: type=1400 audit(1727900009.751:12094): avc: denied { create } for pid=21179 comm="syz.2.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 401.870912][ T29] audit: type=1400 audit(1727900009.761:12095): avc: denied { write } for pid=21179 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 401.888903][T21056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.890115][ T29] audit: type=1400 audit(1727900009.761:12096): avc: denied { connect } for pid=21179 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 401.918361][ T29] audit: type=1400 audit(1727900009.761:12097): avc: denied { name_connect } for pid=21179 comm="+}[@" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 401.940241][ T29] audit: type=1400 audit(1727900009.771:12098): avc: denied { ioctl } for pid=21179 comm="+}[@" path="socket:[56829]" dev="sockfs" ino=56829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 401.964636][ T29] audit: type=1400 audit(1727900009.771:12099): avc: denied { bind } for pid=21179 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 401.983545][ T29] audit: type=1400 audit(1727900009.771:12100): avc: denied { write } for pid=21179 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 402.013430][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.035206][T21157] chnl_net:caif_netlink_parms(): no params data found [ 402.049155][ T29] audit: type=1400 audit(1727900009.941:12101): avc: denied { write } for pid=21187 comm="syz.3.4759" path="socket:[56840]" dev="sockfs" ino=56840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 402.085638][ T29] audit: type=1400 audit(1727900009.991:12102): avc: denied { create } for pid=21191 comm="syz.4.4762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 402.117221][T21079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.123763][ T29] audit: type=1400 audit(1727900010.011:12103): avc: denied { getopt } for pid=21191 comm="syz.4.4762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 402.181260][T21203] loop3: detected capacity change from 0 to 512 [ 402.194872][T21203] EXT4-fs (loop3): filesystem is read-only [ 402.242812][ T56] bridge_slave_1: left allmulticast mode [ 402.248287][T21203] loop3: detected capacity change from 0 to 1024 [ 402.248769][ T56] bridge_slave_1: left promiscuous mode [ 402.260656][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.269058][ T56] bridge_slave_0: left allmulticast mode [ 402.274715][ T56] bridge_slave_0: left promiscuous mode [ 402.280422][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.301310][T21203] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 402.309845][T21203] System zones: 0-1, 3-12 [ 402.314713][T21203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.351348][T21056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.384090][T21217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.395517][T21217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.406707][T21217] sd 0:0:1:0: device reset [ 402.416867][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.427358][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.438481][ T56] bond0 (unregistering): Released all slaves [ 402.446475][T21157] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.453615][T21157] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.462602][T21157] bridge_slave_0: entered allmulticast mode [ 402.469698][T21157] bridge_slave_0: entered promiscuous mode [ 402.481173][T21208] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 402.491626][T21157] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.498769][T21157] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.508294][T21157] bridge_slave_1: entered allmulticast mode [ 402.514940][T21157] bridge_slave_1: entered promiscuous mode [ 402.539305][ T56] hsr_slave_0: left promiscuous mode [ 402.545359][ T56] hsr_slave_1: left promiscuous mode [ 402.551239][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.558827][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.567347][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.574930][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.585620][ T56] veth1_macvtap: left promiscuous mode [ 402.591261][ T56] veth0_macvtap: left promiscuous mode [ 402.596809][ T56] veth1_vlan: left promiscuous mode [ 402.602219][ T56] veth0_vlan: left promiscuous mode [ 402.691109][ T56] team0 (unregistering): Port device team_slave_1 removed [ 402.702307][ T56] team0 (unregistering): Port device team_slave_0 removed [ 402.742097][T21157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.755764][T21157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.784374][T21157] team0: Port device team_slave_0 added [ 402.795452][T21157] team0: Port device team_slave_1 added [ 402.816786][T21157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.823804][T21157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.849734][T21157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.867504][T21079] veth0_vlan: entered promiscuous mode [ 402.873791][T21157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.881303][T21157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.907623][T21157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.921949][T21079] veth1_vlan: entered promiscuous mode [ 402.948112][T21157] hsr_slave_0: entered promiscuous mode [ 402.954276][T21157] hsr_slave_1: entered promiscuous mode [ 402.961652][T21157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.969391][T21157] Cannot create hsr debugfs directory [ 402.986436][T21079] veth0_macvtap: entered promiscuous mode [ 403.003183][T21079] veth1_macvtap: entered promiscuous mode [ 403.039070][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.049701][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.059573][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.070074][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.079886][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.090458][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.100282][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.110717][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.120651][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.131077][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.140988][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.151441][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.162097][T21079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.178173][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.188667][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.198569][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.208999][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.218814][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.229234][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.239069][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.249502][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.259387][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.269832][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.279709][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.290181][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.301061][T21079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.313647][T21079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.322706][T21079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.331511][T21079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.340325][T21079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.400819][T21237] loop1: detected capacity change from 0 to 512 [ 403.419594][T21237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.432257][T21237] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.442669][T21241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4772'. [ 403.459187][T21241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4772'. [ 403.462589][T21237] FAULT_INJECTION: forcing a failure. [ 403.462589][T21237] name failslab, interval 1, probability 0, space 0, times 0 [ 403.480987][T21237] CPU: 0 UID: 0 PID: 21237 Comm: syz.1.4735 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 403.491813][T21237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 403.501863][T21237] Call Trace: [ 403.505136][T21237] [ 403.508062][T21237] dump_stack_lvl+0xf2/0x150 [ 403.512660][T21237] dump_stack+0x15/0x20 [ 403.516832][T21237] should_fail_ex+0x223/0x230 [ 403.521538][T21237] ? ext4_mb_new_blocks+0x7ad/0x2020 [ 403.526834][T21237] should_failslab+0x8f/0xb0 [ 403.531502][T21237] kmem_cache_alloc_noprof+0x4c/0x290 [ 403.536883][T21237] ext4_mb_new_blocks+0x7ad/0x2020 [ 403.542110][T21237] ? __rcu_read_unlock+0x4e/0x70 [ 403.547085][T21237] ? folio_memcg_unlock+0xa7/0xc0 [ 403.552130][T21237] ? mark_buffer_dirty+0x11b/0x250 [ 403.557249][T21237] ? __ext4_handle_dirty_metadata+0x1fa/0x470 [ 403.563331][T21237] ext4_new_meta_blocks+0xc1/0x1a0 [ 403.568482][T21237] ext4_ext_insert_extent+0x9d8/0x2880 [ 403.573949][T21237] ext4_split_extent_at+0x60b/0x9f0 [ 403.579241][T21237] ext4_ext_remove_space+0x43b/0x2940 [ 403.584642][T21237] ? __es_remove_extent+0xd1d/0xd80 [ 403.589889][T21237] ? ext4_es_remove_extent+0x1b2/0x2c0 [ 403.595430][T21237] ext4_fallocate+0xa89/0x1170 [ 403.600210][T21237] vfs_fallocate+0x368/0x3b0 [ 403.604917][T21237] __x64_sys_fallocate+0x79/0xc0 [ 403.609907][T21237] x64_sys_call+0x2783/0x2d60 [ 403.614649][T21237] do_syscall_64+0xc9/0x1c0 [ 403.619149][T21237] ? clear_bhb_loop+0x55/0xb0 [ 403.623835][T21237] ? clear_bhb_loop+0x55/0xb0 [ 403.628591][T21237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.634489][T21237] RIP: 0033:0x7f768871dff9 [ 403.639043][T21237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.658662][T21237] RSP: 002b:00007f7687397038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 403.667076][T21237] RAX: ffffffffffffffda RBX: 00007f76888d5f80 RCX: 00007f768871dff9 [ 403.675043][T21237] RDX: 0000000000001800 RSI: 0000000000000008 RDI: 0000000000000008 [ 403.683014][T21237] RBP: 00007f7687397090 R08: 0000000000000000 R09: 0000000000000000 [ 403.690992][T21237] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 403.699001][T21237] R13: 0000000000000000 R14: 00007f76888d5f80 R15: 00007ffdd2a33878 [ 403.706975][T21237] [ 403.722916][T21079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.802827][T21251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4777'. [ 403.811838][T21251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4777'. [ 403.821805][T21157] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 403.843846][T21157] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 403.852245][T21256] syz.2.4778[21256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.852311][T21256] syz.2.4778[21256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.866949][T21157] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.905913][T21157] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.962136][T21157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.977428][T21157] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.004732][T21260] syzkaller0: entered promiscuous mode [ 404.010305][T21260] syzkaller0: entered allmulticast mode [ 404.020487][T21258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4779'. [ 404.030619][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.037698][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.038389][T21260] loop1: detected capacity change from 0 to 512 [ 404.052054][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.052436][T21260] EXT4-fs: Ignoring removed i_version option [ 404.059214][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.065168][T21260] EXT4-fs: Ignoring removed nobh option [ 404.081453][T21260] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 404.093882][T21260] EXT4-fs (loop1): 1 truncate cleaned up [ 404.103123][T21260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.118245][T21266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4781'. [ 404.127383][T21266] bridge_slave_1: left allmulticast mode [ 404.133083][T21266] bridge_slave_1: left promiscuous mode [ 404.138835][T21266] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.157462][T21266] bridge_slave_0: left allmulticast mode [ 404.163449][T21266] bridge_slave_0: left promiscuous mode [ 404.169251][T21266] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.233563][T21268] veth0_vlan: left promiscuous mode [ 404.239865][T21268] veth0_vlan: entered promiscuous mode [ 404.265401][T21157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.327181][T21278] loop2: detected capacity change from 0 to 764 [ 404.334616][T21278] iso9660: Unknown parameter 'ÿ01777777777777777777777' [ 404.343766][T21157] veth0_vlan: entered promiscuous mode [ 404.354228][T21157] veth1_vlan: entered promiscuous mode [ 404.370965][T21157] veth0_macvtap: entered promiscuous mode [ 404.381275][T21157] veth1_macvtap: entered promiscuous mode [ 404.393381][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.403926][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.413824][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.420766][T21281] loop2: detected capacity change from 0 to 512 [ 404.424263][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.440392][T21281] EXT4-fs (loop2): filesystem is read-only [ 404.440462][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.456772][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.457943][T21281] loop2: detected capacity change from 0 to 1024 [ 404.466592][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.483473][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.491471][T21281] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 404.493303][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.507989][T21281] System zones: [ 404.511773][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.511790][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.511803][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.511817][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.515339][T21281] 0-1 [ 404.525138][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.534054][T21157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.535579][T21281] , 3-12 [ 404.558269][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.558578][T21281] [ 404.568467][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.576580][T21281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.578405][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.616914][T21281] FAULT_INJECTION: forcing a failure. [ 404.616914][T21281] name failslab, interval 1, probability 0, space 0, times 0 [ 404.623598][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.636176][T21281] CPU: 0 UID: 0 PID: 21281 Comm: +}[@ Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 404.646002][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.656193][T21281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 404.656249][T21281] Call Trace: [ 404.666637][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.676663][T21281] [ 404.676672][T21281] dump_stack_lvl+0xf2/0x150 [ 404.679954][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.689715][T21281] dump_stack+0x15/0x20 [ 404.689802][T21281] should_fail_ex+0x223/0x230 [ 404.689841][T21281] ? audit_log_d_path+0x96/0x250 [ 404.692765][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.697336][T21281] should_failslab+0x8f/0xb0 [ 404.707828][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.711946][T21281] __kmalloc_cache_noprof+0x4b/0x2a0 [ 404.716611][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.716633][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.721534][T21281] audit_log_d_path+0x96/0x250 [ 404.731341][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.735915][T21281] ? get_file_rcu+0xeb/0x100 [ 404.746325][T21157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.751567][T21281] ? __rcu_read_unlock+0x4e/0x70 [ 404.751605][T21281] audit_log_d_path_exe+0x42/0x70 [ 404.761445][T21157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.771803][T21281] audit_log_task+0x155/0x180 [ 404.784706][T21157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.786347][T21281] audit_seccomp+0x68/0x130 [ 404.803965][T21157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.806411][T21281] __seccomp_filter+0x6fa/0x1180 [ 404.811500][T21157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.811529][T21157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.821315][T21281] ? proc_fail_nth_write+0x12a/0x150 [ 404.821347][T21281] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 404.826022][T21157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.833188][T21281] ? vfs_write+0x580/0x910 [ 404.893348][T21281] __secure_computing+0x9f/0x1c0 [ 404.898371][T21281] syscall_trace_enter+0xd1/0x1f0 [ 404.903415][T21281] do_syscall_64+0xaa/0x1c0 [ 404.907922][T21281] ? clear_bhb_loop+0x55/0xb0 [ 404.912689][T21281] ? clear_bhb_loop+0x55/0xb0 [ 404.917414][T21281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.923429][T21281] RIP: 0033:0x7f92412adff9 [ 404.927843][T21281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.947451][T21281] RSP: 002b:00007f923ff27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 404.955983][T21281] RAX: ffffffffffffffda RBX: 00007f9241465f80 RCX: 00007f92412adff9 [ 404.963955][T21281] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000009 [ 404.971957][T21281] RBP: 00007f923ff27090 R08: 0000000000000000 R09: 0000000000000000 [ 404.979927][T21281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.987900][T21281] R13: 0000000000000000 R14: 00007f9241465f80 R15: 00007ffdf2ad9ee8 [ 404.996005][T21281] [ 405.033394][T14274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.054712][T21292] loop2: detected capacity change from 0 to 512 [ 405.062198][T21292] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 405.075342][T21292] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 405.090538][T21292] EXT4-fs (loop2): 1 truncate cleaned up [ 405.096659][T21292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.120982][T14274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.141185][T21079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.142805][T21299] loop0: detected capacity change from 0 to 164 [ 405.456298][T21319] loop1: detected capacity change from 0 to 2048 [ 405.487812][T21321] loop3: detected capacity change from 0 to 1024 [ 405.495157][T21321] EXT4-fs: Ignoring removed bh option [ 405.541899][T21321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.567135][T21321] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 405.579691][T21321] EXT4-fs (loop3): This should not happen!! Data will be lost [ 405.579691][T21321] [ 405.589452][T21321] EXT4-fs (loop3): Total free blocks count 0 [ 405.595435][T21321] EXT4-fs (loop3): Free/Dirty block details [ 405.601555][T21321] EXT4-fs (loop3): free_blocks=0 [ 405.606504][T21321] EXT4-fs (loop3): dirty_blocks=0 [ 405.611731][T21321] EXT4-fs (loop3): Block reservation details [ 405.617828][T21321] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 405.652492][T21056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.390817][T21327] loop2: detected capacity change from 0 to 512 [ 406.392636][T21334] loop1: detected capacity change from 0 to 512 [ 406.397409][T21327] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 406.421897][T21332] vlan0: entered allmulticast mode [ 406.430162][T21334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.453531][T21334] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.468569][T21334] Process accounting resumed [ 406.484656][T21334] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 406.487012][T21338] loop0: detected capacity change from 0 to 2048 [ 406.519799][T21338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.552791][T21079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.590873][T21349] loop3: detected capacity change from 0 to 2048 [ 406.601059][T21338] ref_ctr_offset mismatch. inode: 0x13 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 406.614207][T21349] Alternate GPT is invalid, using primary GPT. [ 406.620584][T21349] loop3: p1 p2 p3 [ 406.645136][T21358] loop1: detected capacity change from 0 to 512 [ 406.670841][T21358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.683843][T21358] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.700750][T21358] syz.1.4808 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 406.712778][T21157] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.805157][T21378] FAULT_INJECTION: forcing a failure. [ 406.805157][T21378] name failslab, interval 1, probability 0, space 0, times 0 [ 406.817979][T21378] CPU: 0 UID: 0 PID: 21378 Comm: syz.4.4817 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 406.828771][T21378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 406.838975][T21378] Call Trace: [ 406.842249][T21378] [ 406.845201][T21378] dump_stack_lvl+0xf2/0x150 [ 406.849789][T21378] dump_stack+0x15/0x20 [ 406.853969][T21378] should_fail_ex+0x223/0x230 [ 406.858692][T21378] ? vm_area_alloc+0x2c/0x130 [ 406.863415][T21378] should_failslab+0x8f/0xb0 [ 406.868025][T21378] kmem_cache_alloc_noprof+0x4c/0x290 [ 406.873485][T21378] vm_area_alloc+0x2c/0x130 [ 406.878039][T21378] mmap_region+0x938/0x16e0 [ 406.882691][T21378] do_mmap+0x718/0xb60 [ 406.886880][T21378] vm_mmap_pgoff+0x133/0x290 [ 406.891576][T21378] ksys_mmap_pgoff+0xd0/0x330 [ 406.896273][T21378] ? syscall_trace_enter+0x104/0x1f0 [ 406.901639][T21378] ? fpregs_assert_state_consistent+0x83/0xa0 [ 406.907738][T21378] x64_sys_call+0x1884/0x2d60 [ 406.912427][T21378] do_syscall_64+0xc9/0x1c0 [ 406.916938][T21378] ? clear_bhb_loop+0x55/0xb0 [ 406.921787][T21378] ? clear_bhb_loop+0x55/0xb0 [ 406.926527][T21378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.932450][T21378] RIP: 0033:0x7f4ebea4e033 [ 406.937000][T21378] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 406.956717][T21378] RSP: 002b:00007f4ebd6c6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 406.965138][T21378] RAX: ffffffffffffffda RBX: 0000000000000508 RCX: 00007f4ebea4e033 [ 406.973134][T21378] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 406.981172][T21378] RBP: 0000000020000202 R08: 00000000ffffffff R09: 0000000000000000 [ 406.989146][T21378] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 406.997119][T21378] R13: 00007f4ebd6c6ef0 R14: 00007f4ebd6c6eb0 R15: 0000000020000000 [ 407.005103][T21378] [ 407.012572][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 407.012590][ T29] audit: type=1326 audit(1727900014.921:12323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.2.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92412adff9 code=0x7ffc0000 [ 407.042553][ T29] audit: type=1326 audit(1727900014.921:12324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.2.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92412adff9 code=0x7ffc0000 [ 407.078703][T21381] FAULT_INJECTION: forcing a failure. [ 407.078703][T21381] name failslab, interval 1, probability 0, space 0, times 0 [ 407.091464][T21381] CPU: 1 UID: 0 PID: 21381 Comm: syz.0.4818 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 407.102290][T21381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 407.112440][T21381] Call Trace: [ 407.115730][T21381] [ 407.118669][T21381] dump_stack_lvl+0xf2/0x150 [ 407.123311][T21381] dump_stack+0x15/0x20 [ 407.127490][T21381] should_fail_ex+0x223/0x230 [ 407.132249][T21381] ? __alloc_skb+0x10b/0x310 [ 407.136906][T21381] should_failslab+0x8f/0xb0 [ 407.141522][T21381] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 407.147452][T21381] __alloc_skb+0x10b/0x310 [ 407.151905][T21381] alloc_skb_with_frags+0x80/0x450 [ 407.157038][T21381] ? __rt6_find_exception_rcu+0x93/0x2e0 [ 407.162778][T21381] ? fib6_select_path+0x2bf/0x2f0 [ 407.167840][T21381] sock_alloc_send_pskb+0x435/0x4f0 [ 407.173126][T21381] ? ipv6_get_saddr_eval+0x7a8/0x7d0 [ 407.178439][T21381] __ip6_append_data+0x178a/0x2170 [ 407.183606][T21381] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 407.189203][T21381] ? __rcu_read_unlock+0x4e/0x70 [ 407.194154][T21381] ? ip6_mtu+0xfb/0x120 [ 407.198332][T21381] ? __pfx_ip6_mtu+0x10/0x10 [ 407.203000][T21381] ip6_make_skb+0x28f/0x510 [ 407.207578][T21381] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 407.213162][T21381] udpv6_sendmsg+0x14ac/0x1590 [ 407.218035][T21381] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 407.223606][T21381] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 407.228743][T21381] inet6_sendmsg+0xaf/0xd0 [ 407.233229][T21381] __sock_sendmsg+0x8b/0x180 [ 407.237891][T21381] __sys_sendto+0x1d6/0x260 [ 407.242417][T21381] __x64_sys_sendto+0x78/0x90 [ 407.247181][T21381] x64_sys_call+0x2959/0x2d60 [ 407.251863][T21381] do_syscall_64+0xc9/0x1c0 [ 407.256384][T21381] ? clear_bhb_loop+0x55/0xb0 [ 407.261124][T21381] ? clear_bhb_loop+0x55/0xb0 [ 407.265834][T21381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.271821][T21381] RIP: 0033:0x7f4c38fddff9 [ 407.276244][T21381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.295862][T21381] RSP: 002b:00007f4c37c51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 407.304279][T21381] RAX: ffffffffffffffda RBX: 00007f4c39195f80 RCX: 00007f4c38fddff9 [ 407.312253][T21381] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 407.320286][T21381] RBP: 00007f4c37c51090 R08: 0000000020000180 R09: 000000000000001c [ 407.328264][T21381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.336240][T21381] R13: 0000000000000000 R14: 00007f4c39195f80 R15: 00007ffd090c2788 [ 407.344271][T21381] [ 407.410642][ T29] audit: type=1400 audit(1727900015.321:12325): avc: denied { setopt } for pid=21391 comm="syz.2.4823" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 407.423919][T21390] loop0: detected capacity change from 0 to 2048 [ 407.444767][T21392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4823'. [ 407.459120][T21390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.476459][ T29] audit: type=1400 audit(1727900015.381:12326): avc: denied { mounton } for pid=21389 comm="syz.0.4822" path="/7/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 407.499562][ T29] audit: type=1400 audit(1727900015.381:12327): avc: denied { execute } for pid=21393 comm="syz.4.4824" path="/380/bus" dev="tmpfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 407.534049][T21079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.556777][T21394] ref_ctr_offset mismatch. inode: 0x7e6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 407.557971][T21390] loop0: detected capacity change from 2048 to 11 [ 407.634122][T21404] loop2: detected capacity change from 0 to 128 [ 407.640669][T21404] vfat: Unknown parameter 'ÿÿ' [ 407.678079][T21157] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.756672][ T29] audit: type=1400 audit(1727900015.661:12328): avc: denied { ioctl } for pid=21408 comm="syz.4.4831" path="socket:[58470]" dev="sockfs" ino=58470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 407.773643][T21407] loop3: detected capacity change from 0 to 128 [ 407.788134][T21395] kmmpd-loop0: attempt to access beyond end of device [ 407.788134][T21395] loop0: rw=14337, sector=256, nr_sectors = 4 limit=11 [ 407.788166][T21395] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 407.811055][T21407] vfat: Unknown parameter 'ÿÿ' [ 407.903014][ T29] audit: type=1326 audit(1727900015.811:12329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21399 comm="syz.1.4826" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f768871dff9 code=0x0 [ 408.081530][T21421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4832'. [ 408.416769][ T29] audit: type=1400 audit(1727900016.321:12330): avc: denied { write } for pid=21429 comm="syz.1.4835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 408.440606][T21431] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 408.683914][T21436] loop1: detected capacity change from 0 to 2048 [ 408.709719][T21436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.784533][ T29] audit: type=1400 audit(1727900016.691:12331): avc: denied { create } for pid=21448 comm="syz.3.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 408.808361][ T29] audit: type=1326 audit(1727900016.721:12332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21448 comm="syz.3.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe53fdff9 code=0x7ffc0000 [ 408.882767][T21453] loop3: detected capacity change from 0 to 2048 [ 408.929192][T21453] Alternate GPT is invalid, using primary GPT. [ 408.935747][T21453] loop3: p1 p2 p3 [ 409.279389][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 409.287175][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 409.295325][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.296011][T21079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.303018][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.319777][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.327448][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.335241][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.342982][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.350680][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.358638][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.366283][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.374108][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.381847][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.389594][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.397244][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.404946][ T3341] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 409.414326][ T3341] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 409.452026][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.459876][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.467652][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.475480][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.483283][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.491149][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.499104][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.506939][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.514747][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x2 [ 409.522601][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.530395][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.538213][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.545984][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.553877][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.561723][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x4 [ 409.569571][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.577355][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.585267][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.593312][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.601181][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.608950][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.616792][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x2 [ 409.624557][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x2 [ 409.632348][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x2 [ 409.635461][T21473] loop2: detected capacity change from 0 to 2048 [ 409.640110][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x2 [ 409.655683][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x2 [ 409.663445][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x3 [ 409.671328][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x2 [ 409.672604][T21473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.679134][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x2 [ 409.679161][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x2 [ 409.679204][ T989] hid-generic 0000:0000:FFFFFFFD.0002: unknown main item tag 0x2 [ 409.684035][ T989] hid-generic 0000:0000:FFFFFFFD.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 409.725123][T21473] ref_ctr_offset mismatch. inode: 0x13 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 409.808989][T14274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.848797][T21485] loop3: detected capacity change from 0 to 512 [ 409.874827][T21493] loop2: detected capacity change from 0 to 128 [ 409.882227][T21485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.897454][T21485] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.910597][T21493] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.910811][T21496] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 409.923673][T21493] ext4 filesystem being mounted at /401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 409.975677][T14274] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 410.004428][T21056] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.035100][ T4909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.157485][ T4909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.218197][ T4909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.240051][T21521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4864'. [ 410.250932][T21510] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 410.284026][ T4909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.347480][T21531] loop3: detected capacity change from 0 to 2048 [ 410.372987][ T4909] bridge_slave_1: left allmulticast mode [ 410.378848][ T4909] bridge_slave_1: left promiscuous mode [ 410.383360][T21531] Alternate GPT is invalid, using primary GPT. [ 410.384486][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.390658][T21531] loop3: p1 p2 p3 [ 410.408246][ T4909] bridge_slave_0: left allmulticast mode [ 410.413929][ T4909] bridge_slave_0: left promiscuous mode [ 410.419745][ T4909] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.447346][T21540] loop1: detected capacity change from 0 to 512 [ 410.497400][T21540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.514978][T21540] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.580108][T21079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.604603][ T4909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.618219][ T4909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.630876][ T4909] bond0 (unregistering): Released all slaves [ 410.647376][T21511] chnl_net:caif_netlink_parms(): no params data found [ 410.672329][T21559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4877'. [ 410.689682][T21559] bond1: entered promiscuous mode [ 410.694944][T21559] bond1: entered allmulticast mode [ 410.700338][T21559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.727414][ T4909] hsr_slave_0: left promiscuous mode [ 410.734633][ T4909] hsr_slave_1: left promiscuous mode [ 410.741074][ T4909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.748754][ T4909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.756556][ T4909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.759812][T21566] 9pnet_fd: Insufficient options for proto=fd [ 410.764316][ T4909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.782267][ T4909] veth1_macvtap: left promiscuous mode [ 410.787913][ T4909] veth0_macvtap: left promiscuous mode [ 410.793439][ T4909] veth1_vlan: left promiscuous mode [ 410.798813][ T4909] veth0_vlan: left promiscuous mode [ 410.901599][ T4909] team0 (unregistering): Port device team_slave_1 removed [ 410.915408][ T4909] team0 (unregistering): Port device team_slave_0 removed [ 410.952073][T21574] loop1: detected capacity change from 0 to 2048 [ 410.977470][T21511] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.984684][T21511] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.989761][T21574] Alternate GPT is invalid, using primary GPT. [ 410.992663][T21511] bridge_slave_0: entered allmulticast mode [ 410.998216][T21574] loop1: p1 p2 p3 [ 411.006604][T21511] bridge_slave_0: entered promiscuous mode [ 411.014641][T21511] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.021808][T21511] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.029223][T21511] bridge_slave_1: entered allmulticast mode [ 411.035931][T21511] bridge_slave_1: entered promiscuous mode [ 411.057642][T21511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.070891][T21511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.071663][T21579] 9pnet_fd: Insufficient options for proto=fd [ 411.101437][T21511] team0: Port device team_slave_0 added [ 411.114612][T21511] team0: Port device team_slave_1 added [ 411.134578][T21584] siw: device registration error -23 [ 411.147147][T21511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.154255][T21511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.180582][T21511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.193666][T21511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.200874][T21511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.227886][T21511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.242030][T21581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4882'. [ 411.263989][T21511] hsr_slave_0: entered promiscuous mode [ 411.270508][T21511] hsr_slave_1: entered promiscuous mode [ 411.276717][T21511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.284552][T21511] Cannot create hsr debugfs directory [ 411.304536][T21590] 9pnet_fd: Insufficient options for proto=fd [ 411.553544][T21511] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 411.562538][T21511] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 411.578436][T21511] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 411.587341][T21511] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.598787][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4894'. [ 411.614298][T21611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4894'. [ 411.626037][T21611] netlink: 532 bytes leftover after parsing attributes in process `syz.4.4894'. [ 411.640929][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4894'. [ 411.710329][T21511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.724747][T21511] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.735157][ T4909] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.742415][ T4909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.755752][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.762983][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.832771][T21511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.904317][T21511] veth0_vlan: entered promiscuous mode [ 411.913210][T21511] veth1_vlan: entered promiscuous mode [ 411.929735][T21511] veth0_macvtap: entered promiscuous mode [ 411.937407][T21511] veth1_macvtap: entered promiscuous mode [ 411.948436][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.959010][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.968892][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.979433][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.989364][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.999922][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.009902][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.020490][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.030492][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.040990][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.050811][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.061275][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.071170][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.081653][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.093327][T21511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.105799][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.116505][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.126331][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.136774][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.146596][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.157026][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.166981][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.177640][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.187469][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.198161][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.208001][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.218530][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.228391][T21511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.238904][T21511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.249894][T21511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.260720][T21511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.269803][T21511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.278661][T21511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.287475][T21511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.374375][T21637] loop0: detected capacity change from 0 to 2048 [ 412.401266][T21637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.424092][T21637] ref_ctr_offset mismatch. inode: 0x13 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 412.446538][T21645] loop3: detected capacity change from 0 to 2048 [ 412.484660][T21511] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.501409][T21645] Alternate GPT is invalid, using primary GPT. [ 412.507837][T21645] loop3: p1 p2 p3 [ 412.515636][T21650] FAULT_INJECTION: forcing a failure. [ 412.515636][T21650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.520562][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 412.520579][ T29] audit: type=1400 audit(1727900020.431:12605): avc: denied { name_bind } for pid=21647 comm="syz.1.4903" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 412.528801][T21650] CPU: 0 UID: 0 PID: 21650 Comm: syz.2.4904 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 412.567523][T21650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 412.577723][T21650] Call Trace: [ 412.581003][T21650] [ 412.584007][T21650] dump_stack_lvl+0xf2/0x150 [ 412.588633][T21650] dump_stack+0x15/0x20 [ 412.592806][T21650] should_fail_ex+0x223/0x230 [ 412.597646][T21650] should_fail+0xb/0x10 [ 412.601883][T21650] should_fail_usercopy+0x1a/0x20 [ 412.606932][T21650] _copy_to_user+0x1e/0xa0 [ 412.611414][T21650] simple_read_from_buffer+0xa0/0x110 [ 412.616881][T21650] proc_fail_nth_read+0xf9/0x140 [ 412.621836][T21650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.627618][T21650] vfs_read+0x195/0x720 [ 412.631785][T21650] ? __rcu_read_unlock+0x4e/0x70 [ 412.636782][T21650] ? __fget_files+0x1d4/0x210 [ 412.641549][T21650] ksys_read+0xeb/0x1b0 [ 412.645715][T21650] __x64_sys_read+0x42/0x50 [ 412.650244][T21650] x64_sys_call+0x27d3/0x2d60 [ 412.655003][T21650] do_syscall_64+0xc9/0x1c0 [ 412.659571][T21650] ? clear_bhb_loop+0x55/0xb0 [ 412.664287][T21650] ? clear_bhb_loop+0x55/0xb0 [ 412.668997][T21650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.674903][T21650] RIP: 0033:0x7f92412aca3c [ 412.679315][T21650] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 412.698921][T21650] RSP: 002b:00007f923ff27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 412.707366][T21650] RAX: ffffffffffffffda RBX: 00007f9241465f80 RCX: 00007f92412aca3c [ 412.715335][T21650] RDX: 000000000000000f RSI: 00007f923ff270a0 RDI: 0000000000000003 [ 412.723304][T21650] RBP: 00007f923ff27090 R08: 0000000000000000 R09: 0000000000000000 [ 412.731275][T21650] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.739308][T21650] R13: 0000000000000000 R14: 00007f9241465f80 R15: 00007ffdf2ad9ee8 [ 412.747283][T21650] [ 412.811869][T21657] loop2: detected capacity change from 0 to 2048 [ 412.841610][T21657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.885114][T14274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.915783][T21683] can0: slcan on ttyS3. [ 412.922466][ T29] audit: type=1400 audit(1727900020.831:12606): avc: denied { mounton } for pid=21682 comm="+}[@" path="/414/file0" dev="tmpfs" ino=2273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 412.925879][T21681] netlink: 'syz.4.4912': attribute type 10 has an invalid length. [ 412.958076][T21681] team0: Port device netdevsim1 added [ 413.001510][T21681] netlink: 'syz.4.4912': attribute type 10 has an invalid length. [ 413.010183][T21683] can0 (unregistered): slcan off ttyS3. [ 413.017680][T21687] loop1: detected capacity change from 0 to 2048 [ 413.026353][T21681] team0: Port device netdevsim1 removed [ 413.035090][T21681] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 413.080777][T21687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.102700][T21687] ref_ctr_offset mismatch. inode: 0x13 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 413.124214][T21695] loop3: detected capacity change from 0 to 8192 [ 413.133753][T21695] FAULT_INJECTION: forcing a failure. [ 413.133753][T21695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.138107][ T29] audit: type=1400 audit(1727900021.041:12607): avc: denied { mount } for pid=21694 comm="syz.3.4917" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 413.146922][T21695] CPU: 1 UID: 0 PID: 21695 Comm: syz.3.4917 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 413.179756][T21695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 413.189812][T21695] Call Trace: [ 413.193084][T21695] [ 413.196010][T21695] dump_stack_lvl+0xf2/0x150 [ 413.200662][T21695] dump_stack+0x15/0x20 [ 413.204835][T21695] should_fail_ex+0x223/0x230 [ 413.209530][T21695] should_fail+0xb/0x10 [ 413.213762][T21695] should_fail_usercopy+0x1a/0x20 [ 413.218853][T21695] strncpy_from_user+0x25/0x200 [ 413.223743][T21695] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 413.229437][T21695] getname_flags+0xb0/0x3b0 [ 413.233955][T21695] __x64_sys_rename+0x33/0x70 [ 413.238652][T21695] x64_sys_call+0x1a84/0x2d60 [ 413.243367][T21695] do_syscall_64+0xc9/0x1c0 [ 413.247969][T21695] ? clear_bhb_loop+0x55/0xb0 [ 413.252710][T21695] ? clear_bhb_loop+0x55/0xb0 [ 413.257400][T21695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.263378][T21695] RIP: 0033:0x7fbfe53fdff9 [ 413.267797][T21695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.287539][T21695] RSP: 002b:00007fbfe4077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 413.296030][T21695] RAX: ffffffffffffffda RBX: 00007fbfe55b5f80 RCX: 00007fbfe53fdff9 [ 413.304041][T21695] RDX: 0000000000000000 RSI: 0000000020001300 RDI: 0000000020000040 [ 413.312033][T21695] RBP: 00007fbfe4077090 R08: 0000000000000000 R09: 0000000000000000 [ 413.320045][T21695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.328026][T21695] R13: 0000000000000000 R14: 00007fbfe55b5f80 R15: 00007ffccd092198 [ 413.336005][T21695] [ 413.350883][ T29] audit: type=1400 audit(1727900021.261:12608): avc: denied { unmount } for pid=21056 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 413.373011][T21079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.419351][T21709] loop1: detected capacity change from 0 to 2048 [ 413.469666][T21709] Alternate GPT is invalid, using primary GPT. [ 413.476160][T21709] loop1: p1 p2 p3 [ 413.516851][T21717] x_tables: duplicate underflow at hook 1 [ 413.554460][ T29] audit: type=1400 audit(1727900021.461:12609): avc: denied { audit_write } for pid=21723 comm="syz.1.4926" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 413.577011][ T29] audit: type=1107 audit(1727900021.461:12610): pid=21723 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 413.612935][T21724] loop1: detected capacity change from 0 to 512 [ 413.620322][T21724] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 413.632643][T21724] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 413.641154][T21724] EXT4-fs (loop1): orphan cleanup on readonly fs [ 413.641593][T21728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4927'. [ 413.668723][T21724] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4926: bg 0: block 361: padding at end of block bitmap is not set [ 413.685406][T21724] EXT4-fs (loop1): Remounting filesystem read-only [ 413.692317][T21724] EXT4-fs (loop1): 1 truncate cleaned up [ 413.702110][T21724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 413.727845][T21724] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 413.737221][T21724] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 413.790565][T21724] veth0_vlan: left promiscuous mode [ 413.796505][T21724] veth0_vlan: entered promiscuous mode [ 413.901843][T21739] loop1: detected capacity change from 0 to 512 [ 413.912816][T21739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 413.931680][T21739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.944333][T21739] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.000585][T21079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.073308][T21749] 9pnet: Could not find request transport: 0xffffffffffffffff [ 414.197865][ T29] audit: type=1400 audit(1727900022.061:12611): avc: denied { name_bind } for pid=21743 comm="syz.2.4931" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 414.290013][T21763] loop1: detected capacity change from 0 to 1024 [ 414.302674][T21763] EXT4-fs: Ignoring removed orlov option [ 414.308528][T21763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.385360][T21763] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 414.453885][T21763] syz.1.4937[21763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.454014][T21763] syz.1.4937[21763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.465722][T21763] syz.1.4937[21763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.466609][ T29] audit: type=1400 audit(1727900022.361:12612): avc: denied { map } for pid=21757 comm="syz.1.4937" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 414.572291][ T29] audit: type=1326 audit(1727900022.481:12613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21757 comm="syz.1.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768871dff9 code=0x7ffc0000 [ 414.596188][ T29] audit: type=1326 audit(1727900022.481:12614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21757 comm="syz.1.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768871dff9 code=0x7ffc0000 [ 414.670324][T21785] siw: device registration error -23 [ 414.671715][T21782] 9pnet: Could not find request transport: 0xffffffffffffffff [ 414.749288][T21791] loop3: detected capacity change from 0 to 2048 [ 414.788577][T21791] ref_ctr_offset mismatch. inode: 0x12 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 415.060113][T21804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4954'. [ 415.163160][T21818] FAULT_INJECTION: forcing a failure. [ 415.163160][T21818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.164747][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4955'. [ 415.176394][T21818] CPU: 1 UID: 0 PID: 21818 Comm: syz.2.4957 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 415.185201][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4955'. [ 415.195909][T21818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 415.195928][T21818] Call Trace: [ 415.195936][T21818] [ 415.195946][T21818] dump_stack_lvl+0xf2/0x150 [ 415.195972][T21818] dump_stack+0x15/0x20 [ 415.204961][T21819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4955'. [ 415.214865][T21818] should_fail_ex+0x223/0x230 [ 415.214907][T21818] should_fail+0xb/0x10 [ 415.247741][T21818] should_fail_usercopy+0x1a/0x20 [ 415.252792][T21818] _copy_from_iter+0xd3/0xd20 [ 415.257597][T21818] ? kmalloc_reserve+0x16e/0x190 [ 415.262572][T21818] ? __build_skb_around+0x196/0x1f0 [ 415.267931][T21818] ? __alloc_skb+0x21f/0x310 [ 415.272615][T21818] ? __virt_addr_valid+0x1ed/0x250 [ 415.277736][T21818] ? __check_object_size+0x364/0x520 [ 415.283118][T21818] netlink_sendmsg+0x460/0x6e0 [ 415.287887][T21818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.293181][T21818] __sock_sendmsg+0x140/0x180 [ 415.297890][T21818] ____sys_sendmsg+0x312/0x410 [ 415.302707][T21818] __sys_sendmsg+0x1d9/0x270 [ 415.307441][T21818] __x64_sys_sendmsg+0x46/0x50 [ 415.312222][T21818] x64_sys_call+0x2689/0x2d60 [ 415.316994][T21818] do_syscall_64+0xc9/0x1c0 [ 415.321497][T21818] ? clear_bhb_loop+0x55/0xb0 [ 415.326184][T21818] ? clear_bhb_loop+0x55/0xb0 [ 415.330912][T21818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.336834][T21818] RIP: 0033:0x7f92412adff9 [ 415.341295][T21818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.360926][T21818] RSP: 002b:00007f923ff27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.369501][T21818] RAX: ffffffffffffffda RBX: 00007f9241465f80 RCX: 00007f92412adff9 [ 415.377472][T21818] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 415.385484][T21818] RBP: 00007f923ff27090 R08: 0000000000000000 R09: 0000000000000000 [ 415.393454][T21818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.401421][T21818] R13: 0000000000000000 R14: 00007f9241465f80 R15: 00007ffdf2ad9ee8 [ 415.409494][T21818] [ 415.440242][T21822] 9pnet: Could not find request transport: 0xffffffffffffffff [ 415.599247][T21842] loop0: detected capacity change from 0 to 512 [ 415.606106][T21842] EXT4-fs: Ignoring removed oldalloc option [ 415.800590][T21842] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.4968: Parent and EA inode have the same ino 15 [ 415.813587][T21842] EXT4-fs (loop0): Remounting filesystem read-only [ 415.820231][T21842] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 415.834247][T21842] EXT4-fs (loop0): 1 orphan inode deleted [ 415.841108][T21842] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 416.079152][T21850] loop0: detected capacity change from 0 to 2048 [ 416.170345][T21850] Alternate GPT is invalid, using primary GPT. [ 416.176831][T21850] loop0: p1 p2 p3 [ 416.232134][T21856] 9pnet: Could not find request transport: 0xffffffffffffffff [ 416.247231][T21859] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4973'. [ 416.256599][T21859] 0ªX¹¦À: renamed from caif0 [ 416.263974][T21859] 0ªX¹¦À: entered allmulticast mode [ 416.269439][T21859] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 416.332423][T21859] loop0: detected capacity change from 0 to 8192 [ 416.340997][T21859] vfat: Unknown parameter 'GPL' [ 416.363785][T21868] siw: device registration error -23 [ 416.968962][T21892] loop0: detected capacity change from 0 to 2048 [ 417.000072][T21892] Alternate GPT is invalid, using primary GPT. [ 417.006456][T21892] loop0: p1 p2 p3 [ 417.053621][T21896] 9pnet: Could not find request transport: 0xffffffffffffffff [ 417.721421][T21920] ref_ctr_offset mismatch. inode: 0x8e1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 417.753532][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 417.753548][ T29] audit: type=1400 audit(1727900025.661:12634): avc: denied { read } for pid=21921 comm="syz.1.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 417.912115][T21932] 9pnet: Could not find request transport: 0xffffffffffffffff [ 417.914335][T21930] loop3: detected capacity change from 0 to 2048 [ 417.979374][T21930] Alternate GPT is invalid, using primary GPT. [ 417.985797][T21930] loop3: p1 p2 p3 [ 418.017089][T21943] ªªªªªª: renamed from vlan0 (while UP) [ 418.101327][ T29] audit: type=1400 audit(1727900026.011:12635): avc: denied { append } for pid=21958 comm="syz.3.5004" name="001" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 418.126435][T21959] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 418.197337][T21973] 9pnet: Could not find request transport: 0xffffffffffffffff [ 418.649723][T21999] loop1: detected capacity change from 0 to 2048 [ 418.689293][T21999] Alternate GPT is invalid, using primary GPT. [ 418.695776][T21999] loop1: p1 p2 p3 [ 419.394443][T22017] 9pnet: Could not find request transport: 0xffffffffffffffff [ 419.487629][ T29] audit: type=1400 audit(1727900027.391:12636): avc: denied { map } for pid=22024 comm="syz.4.5022" path="socket:[60880]" dev="sockfs" ino=60880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 419.619939][ T29] audit: type=1400 audit(1727900027.531:12637): avc: denied { connect } for pid=22028 comm="syz.4.5024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 419.624036][T22029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5024'. [ 419.666846][T22029] gretap0: left allmulticast mode [ 419.671971][T22029] gretap0: left promiscuous mode [ 419.677034][T22029] bridge0: port 3(gretap0) entered disabled state [ 419.704680][T22029] bridge_slave_1: left allmulticast mode [ 419.710598][T22029] bridge_slave_1: left promiscuous mode [ 419.716345][T22029] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.726841][T22029] bridge_slave_0: left allmulticast mode [ 419.732808][T22029] bridge_slave_0: left promiscuous mode [ 419.738551][T22029] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.742476][T22039] loop2: detected capacity change from 0 to 128 [ 419.755051][T22039] ext4 filesystem being mounted at /430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 419.808828][T22044] syz.2.5029[22044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.808943][T22044] syz.2.5029[22044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.820538][T22044] syz.2.5029[22044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.833710][T22037] netlink: 'syz.3.5027': attribute type 4 has an invalid length. [ 419.835225][ T29] audit: type=1400 audit(1727900027.741:12638): avc: denied { create } for pid=22043 comm="syz.2.5029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 419.873103][ T29] audit: type=1400 audit(1727900027.781:12639): avc: denied { connect } for pid=22043 comm="syz.2.5029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 419.873929][T22045] netlink: 'syz.3.5027': attribute type 4 has an invalid length. [ 419.949935][T22057] 9pnet: Could not find request transport: 0xffffffffffffffff [ 419.978734][T22067] siw: device registration error -23 [ 420.867915][ T29] audit: type=1326 audit(1727900028.761:12640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22080 comm="syz.1.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768871dff9 code=0x7ffc0000 [ 420.891774][ T29] audit: type=1326 audit(1727900028.761:12641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22080 comm="syz.1.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f768871dff9 code=0x7ffc0000 [ 420.915532][ T29] audit: type=1326 audit(1727900028.761:12642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22080 comm="syz.1.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768871dff9 code=0x7ffc0000 [ 420.939270][ T29] audit: type=1326 audit(1727900028.761:12643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22080 comm="syz.1.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f768871dff9 code=0x7ffc0000 [ 420.979107][T22086] FAULT_INJECTION: forcing a failure. [ 420.979107][T22086] name failslab, interval 1, probability 0, space 0, times 0 [ 420.991843][T22086] CPU: 0 UID: 0 PID: 22086 Comm: syz.2.5040 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 421.002676][T22086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 421.012916][T22086] Call Trace: [ 421.016194][T22086] [ 421.019127][T22086] dump_stack_lvl+0xf2/0x150 [ 421.023775][T22086] dump_stack+0x15/0x20 [ 421.027968][T22086] should_fail_ex+0x223/0x230 [ 421.032671][T22086] ? memcg_list_lru_alloc+0x132/0x740 [ 421.038078][T22086] should_failslab+0x8f/0xb0 [ 421.042671][T22086] __kmalloc_noprof+0xa5/0x370 [ 421.047469][T22086] memcg_list_lru_alloc+0x132/0x740 [ 421.052796][T22086] __memcg_slab_post_alloc_hook+0x1a2/0x660 [ 421.058711][T22086] ? pcpu_chunk_relocate+0x183/0x280 [ 421.064010][T22086] ? alloc_inode+0x6a/0x160 [ 421.068533][T22086] ? should_fail_ex+0xd7/0x230 [ 421.073339][T22086] ? alloc_inode+0x6a/0x160 [ 421.077857][T22086] kmem_cache_alloc_lru_noprof+0x1ae/0x2a0 [ 421.083680][T22086] alloc_inode+0x6a/0x160 [ 421.088095][T22086] new_inode_pseudo+0x15/0x20 [ 421.092891][T22086] alloc_anon_inode+0x1e/0x170 [ 421.097674][T22086] aio_setup_ring+0x96/0x6a0 [ 421.102282][T22086] ioctx_alloc+0x2b2/0x4c0 [ 421.106714][T22086] __se_sys_io_setup+0x6b/0x1b0 [ 421.111585][T22086] __x64_sys_io_setup+0x31/0x40 [ 421.116521][T22086] x64_sys_call+0x2639/0x2d60 [ 421.121212][T22086] do_syscall_64+0xc9/0x1c0 [ 421.125840][T22086] ? clear_bhb_loop+0x55/0xb0 [ 421.130534][T22086] ? clear_bhb_loop+0x55/0xb0 [ 421.135240][T22086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.141208][T22086] RIP: 0033:0x7f92412adff9 [ 421.145621][T22086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.166703][T22086] RSP: 002b:00007f923ff27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 421.175191][T22086] RAX: ffffffffffffffda RBX: 00007f9241465f80 RCX: 00007f92412adff9 [ 421.183168][T22086] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 421.191258][T22086] RBP: 00007f923ff27090 R08: 0000000000000000 R09: 0000000000000000 [ 421.199229][T22086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.207216][T22086] R13: 0000000000000000 R14: 00007f9241465f80 R15: 00007ffdf2ad9ee8 [ 421.215232][T22086] [ 421.268431][T22090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5042'. [ 421.311460][T22097] FAULT_INJECTION: forcing a failure. [ 421.311460][T22097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.324648][T22097] CPU: 1 UID: 0 PID: 22097 Comm: syz.4.5045 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 421.335528][T22097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 421.345709][T22097] Call Trace: [ 421.349083][T22097] [ 421.352094][T22097] dump_stack_lvl+0xf2/0x150 [ 421.356792][T22097] dump_stack+0x15/0x20 [ 421.360956][T22097] should_fail_ex+0x223/0x230 [ 421.365811][T22097] should_fail+0xb/0x10 [ 421.370011][T22097] should_fail_usercopy+0x1a/0x20 [ 421.375051][T22097] _copy_to_user+0x1e/0xa0 [ 421.379497][T22097] simple_read_from_buffer+0xa0/0x110 [ 421.384880][T22097] proc_fail_nth_read+0xf9/0x140 [ 421.389843][T22097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.395482][T22097] vfs_read+0x195/0x720 [ 421.399646][T22097] ? __rcu_read_unlock+0x4e/0x70 [ 421.404594][T22097] ? __fget_files+0x1d4/0x210 [ 421.409320][T22097] ksys_read+0xeb/0x1b0 [ 421.413566][T22097] __x64_sys_read+0x42/0x50 [ 421.418106][T22097] x64_sys_call+0x27d3/0x2d60 [ 421.422793][T22097] do_syscall_64+0xc9/0x1c0 [ 421.427302][T22097] ? clear_bhb_loop+0x55/0xb0 [ 421.432104][T22097] ? clear_bhb_loop+0x55/0xb0 [ 421.436861][T22097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.442848][T22097] RIP: 0033:0x7f4ebea4ca3c [ 421.447266][T22097] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 421.466953][T22097] RSP: 002b:00007f4ebd6c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.475404][T22097] RAX: ffffffffffffffda RBX: 00007f4ebec05f80 RCX: 00007f4ebea4ca3c [ 421.483377][T22097] RDX: 000000000000000f RSI: 00007f4ebd6c70a0 RDI: 0000000000000007 [ 421.491377][T22097] RBP: 00007f4ebd6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 421.499348][T22097] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 421.507401][T22097] R13: 0000000000000000 R14: 00007f4ebec05f80 R15: 00007fff02563738 [ 421.515400][T22097] [ 421.720595][T22105] ================================================================== [ 421.728769][T22105] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 421.736552][T22105] [ 421.738889][T22105] write to 0xffff88810437a260 of 8 bytes by task 22094 on cpu 0: [ 421.746690][T22105] mas_wr_store_entry+0x146b/0x2d00 [ 421.751986][T22105] mas_store_prealloc+0x6bf/0x960 [ 421.757241][T22105] commit_merge+0x441/0x740 [ 421.761765][T22105] vma_expand+0x211/0x360 [ 421.766112][T22105] vma_merge_new_range+0x2cf/0x3e0 [ 421.771255][T22105] mmap_region+0x887/0x16e0 [ 421.775771][T22105] do_mmap+0x718/0xb60 [ 421.779844][T22105] vm_mmap_pgoff+0x133/0x290 [ 421.784447][T22105] ksys_mmap_pgoff+0xd0/0x330 [ 421.789150][T22105] x64_sys_call+0x1884/0x2d60 [ 421.793856][T22105] do_syscall_64+0xc9/0x1c0 [ 421.798376][T22105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.804293][T22105] [ 421.806616][T22105] read to 0xffff88810437a260 of 8 bytes by task 22105 on cpu 1: [ 421.814256][T22105] mtree_range_walk+0x1b4/0x460 [ 421.819122][T22105] mas_walk+0x16e/0x320 [ 421.823374][T22105] lock_vma_under_rcu+0x95/0x260 [ 421.828334][T22105] exc_page_fault+0x150/0x650 [ 421.833028][T22105] asm_exc_page_fault+0x26/0x30 [ 421.837904][T22105] [ 421.840221][T22105] value changed: 0x00007f923fec4fff -> 0x00007f923fea3fff [ 421.847324][T22105] [ 421.849650][T22105] Reported by Kernel Concurrency Sanitizer on: [ 421.855800][T22105] CPU: 1 UID: 0 PID: 22105 Comm: syz.2.5044 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 421.866567][T22105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 421.876618][T22105] ================================================================== [ 421.886648][T22111] loop1: detected capacity change from 0 to 256 [ 421.894294][T22111] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.