last executing test programs: 34m24.242221016s ago: executing program 32 (id=103): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4ec}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) time(0x0) link(0x0, 0x0) 31m39.7079735s ago: executing program 4 (id=513): prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x00') pipe2$9p(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") timer_create(0x2, 0x0, &(0x7f0000000380)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/185, 0xb9) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r5, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendto$packet(r3, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 31m39.202519028s ago: executing program 4 (id=514): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a600000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 31m39.130663609s ago: executing program 33 (id=514): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a600000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 13m44.234707286s ago: executing program 34 (id=4061): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), 0x0}, 0x20) timer_create(0x3, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 11m20.271195827s ago: executing program 35 (id=4448): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xb) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) setfsgid(0x0) setfsgid(0x0) r6 = syz_clone(0xa2042000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r7 = syz_open_procfs(r6, &(0x7f0000000040)='io\x00') pread64(r7, 0x0, 0x0, 0x4) 29.159952335s ago: executing program 5 (id=9963): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000280)='5', 0x1}], 0x1}, 0x4040005) 28.682964963s ago: executing program 6 (id=9987): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10, 0x0}, 0x40) 28.682817293s ago: executing program 6 (id=9988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x18, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getpgrp(0x0) 28.682128863s ago: executing program 6 (id=9989): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @multicast2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f0000000040)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r7}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000200)={r9}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$KDSIGACCEPT(r2, 0x5607, 0x3) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0xfffffffd}]}, {0x0, [0x61, 0x0, 0x30, 0x5f]}}, 0x0, 0x2a}, 0x28) 28.415321997s ago: executing program 5 (id=9992): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9e}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x7, 0x96, &(0x7f0000000580)=""/150, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x0, 0xa, 0x8}, 0x10, 0x9ec0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000006c0)=[{0x1, 0x3, 0x0, 0x8539d2d4c3d6247d}, {0x2, 0x3, 0xa, 0x4}, {0x5, 0x3, 0x10, 0x1}, {0x0, 0x2, 0x9, 0x4}], 0x10, 0x8}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0xaf84b4381f27b0f9, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a3aad2b0e1ac55f842b7db84b976254644d745ef9e150eae32eb8ea53b671002a7aee5b3cbcee737e4789ea5de148b9ff75e7b463f4f228d0ec3bbd42e3ef94d2017e92ec6c68e644700964fd48547238f5a97d8bc1e2d3230012f9f4cd962b2ebfe2e935eaa370e53da841dfc3666c706b25c92a7fe82ddea5d0fd89ea0cc4da4eb83b2e419fbcd35", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) clock_getres(0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0xc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010102020000102505a1a44000010203010902ae00010108b805090400900402060001052406000005240003000d240f0101000000100004000b6a241301d44bf44303657d50285d45"], 0x0) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffe}) setpriority(0x1, 0x0, 0x3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) 28.23811503s ago: executing program 3 (id=10002): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}]}}) 28.23788079s ago: executing program 3 (id=10003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) clock_getres(0xfffffffffffffffd, 0x0) 28.20901091s ago: executing program 3 (id=10004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 28.20867956s ago: executing program 3 (id=10005): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 28.160070011s ago: executing program 3 (id=10006): r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c450}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2710, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x0) 28.125348162s ago: executing program 8 (id=10009): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 28.115419411s ago: executing program 8 (id=10010): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000001440), 0x0}, 0x20) 27.877099376s ago: executing program 8 (id=10011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) stat(0x0, 0x0) 27.867312796s ago: executing program 6 (id=10013): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000640), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1164420, &(0x7f0000002100)={[], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) 27.829274726s ago: executing program 6 (id=10015): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x10}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 27.828815926s ago: executing program 8 (id=10016): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 27.776289547s ago: executing program 6 (id=10017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000015000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x0, 0xeb, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) socketpair(0x2, 0x80000, 0x31e9c1e0, &(0x7f0000000780)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000002c00", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.775805517s ago: executing program 8 (id=10019): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x3}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0xc0) 27.775566867s ago: executing program 8 (id=10020): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 27.753173237s ago: executing program 1 (id=10023): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 27.406758023s ago: executing program 1 (id=10024): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) lstat(0x0, 0x0) 27.361514433s ago: executing program 5 (id=10025): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f800000016003d1d000000000000000000000000000000000000ffffe00000027f00000100000000000000000000000000000000000006290000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000200000000000000000000000000000000320000002001000000000000000000000000000200000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000006b0b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in6=@empty}, [@srcaddr={0x14, 0xd, @in=@local}]}, 0x3c}}, 0x0) 27.361029784s ago: executing program 1 (id=10026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 27.346375034s ago: executing program 3 (id=10027): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000085000000050000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9e}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x7, 0x96, &(0x7f0000000580)=""/150, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x0, 0xa, 0x8}, 0x10, 0x9ec0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000006c0)=[{0x1, 0x3, 0x0, 0x8539d2d4c3d6247d}, {0x2, 0x3, 0xa, 0x4}, {0x5, 0x3, 0x10, 0x1}, {0x0, 0x2, 0x9, 0x4}], 0x10, 0x8}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0xaf84b4381f27b0f9, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a3aad2b0e1ac55f842b7db84b976254644d745ef9e150eae32eb8ea53b671002a7aee5b3cbcee737e4789ea5de148b9ff75e7b463f4f228d0ec3bbd42e3ef94d2017e92ec6c68e644700964fd48547238f5a97d8bc1e2d3230012f9f4cd962b2ebfe2e935eaa370e53da841dfc3666c706b25c92a7fe82ddea5d0fd89ea0cc4da4eb83b2e419fbcd35", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) clock_getres(0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0xc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010102020000102505a1a44000010203010902ae00010108b805090400900402060001052406000005240003000d240f0101000000100004000b6a241301d44bf44303657d50285d45"], 0x0) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffe}) setpriority(0x1, 0x0, 0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r10, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r5}, 0x38) 27.341061853s ago: executing program 5 (id=10028): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r0, 0x1) 27.325556824s ago: executing program 1 (id=10029): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x10da41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 27.315349574s ago: executing program 5 (id=10030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x3, 0xbf, 0x4, 0x3, 0x2, 0x0, 0x20, 0x1, 0x0, 0xee01}, {0x8001, 0x0, 0xffffffffffffffbd, 0x0, 0x6, 0x9, 0x9}, {0x0, 0x0, 0x5}, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xff, 0xb19}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 27.299414974s ago: executing program 1 (id=10031): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) umount2(&(0x7f0000000000)='./file0\x00', 0xa) 27.291132394s ago: executing program 5 (id=10032): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000340)=0xffdf, 0x4) 27.228221546s ago: executing program 1 (id=10033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) 12.581500524s ago: executing program 36 (id=10032): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000340)=0xffdf, 0x4) 12.550010474s ago: executing program 37 (id=10033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) 12.505761115s ago: executing program 38 (id=10020): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 12.428060626s ago: executing program 39 (id=10027): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000085000000050000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9e}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x7, 0x96, &(0x7f0000000580)=""/150, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x0, 0xa, 0x8}, 0x10, 0x9ec0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000006c0)=[{0x1, 0x3, 0x0, 0x8539d2d4c3d6247d}, {0x2, 0x3, 0xa, 0x4}, {0x5, 0x3, 0x10, 0x1}, {0x0, 0x2, 0x9, 0x4}], 0x10, 0x8}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0xaf84b4381f27b0f9, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a3aad2b0e1ac55f842b7db84b976254644d745ef9e150eae32eb8ea53b671002a7aee5b3cbcee737e4789ea5de148b9ff75e7b463f4f228d0ec3bbd42e3ef94d2017e92ec6c68e644700964fd48547238f5a97d8bc1e2d3230012f9f4cd962b2ebfe2e935eaa370e53da841dfc3666c706b25c92a7fe82ddea5d0fd89ea0cc4da4eb83b2e419fbcd35", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) clock_getres(0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0xc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010102020000102505a1a44000010203010902ae00010108b805090400900402060001052406000005240003000d240f0101000000100004000b6a241301d44bf44303657d50285d45"], 0x0) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffe}) setpriority(0x1, 0x0, 0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r10, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r5}, 0x38) 12.373340747s ago: executing program 40 (id=10017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000015000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x0, 0xeb, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) socketpair(0x2, 0x80000, 0x31e9c1e0, &(0x7f0000000780)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000002c00", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.636635087s ago: executing program 7 (id=10041): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 6.602825347s ago: executing program 7 (id=10042): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000001d00)=ANY=[@ANYBLOB='iocharset=cp850,errors=continue,errors=remount-ro,errors=remount-ro,allow_utime=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000002,umask=00000000000000000000003,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB="280ffa242dc35b1cdfcfe8d900"], 0x1, 0x1520, &(0x7f00000037c0)="$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") r0 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[5\xa9\x90\xc6md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eF\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb\n\x00\x00\x00jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%nN&\xf8#\x80z8Z\xd2}\xf5\xe4\xdf5\x9b\x01\xf8', 0x0) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) pwrite64(r0, &(0x7f0000000040)="ab", 0x1, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.478007479s ago: executing program 7 (id=10043): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/127, 0x45}], 0x1) 5.627688632s ago: executing program 7 (id=10048): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x40}}]}, 0xff, 0xbb8, &(0x7f0000000540)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000b00)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4011903010902230001046b40090904e44401ffe7bf0408240201bb03b610090507"], 0x0) 5.079473681s ago: executing program 2 (id=10051): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000300)={0x17c04, r1, 0x803, 0x80000001, 0x4, 0x800000008}) 5.026297102s ago: executing program 4 (id=10036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000300)={0x20, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 4.995888572s ago: executing program 4 (id=10052): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf8, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d70") 4.843813025s ago: executing program 2 (id=10053): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x1f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba5df485855", 0x0, 0x8000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 952.704745ms ago: executing program 4 (id=10056): syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000880)='./file1\x00', 0xc80, &(0x7f0000000300)=ANY=[], 0x1, 0x286, &(0x7f00000010c0)="$eJzs281OE18Yx/Efhf+fN6FVFAVjfKIb3UygXkFDIDE20SA1viQmg0y16dCSToOpMcLOrXdhQly6MzHeABuvwIU7Ni5ZGMcwU6FAjWACI/D9bOYhZ370nD6nzVl01u6/mS8XA6fo1pXqMHVJPVqXMkqpU7GO5jUV1f+r1bKuD+W/XLr74OGtXD4/OW02lZu5kTWzwcsfn798d+VTvf/e+8EP3VrNPF77lv26Orw6svZj5lkpsFJglWrdXJutVuvurO/ZXCkoO2Z3fM8NPCtVAq+2bbzoVxcWGuZW5gb6FmpeEJhbaVjZa1i9avVaw9ynbqlijuPYQJ/wJ4WV6Wk3l/QscLBqtZw7IWl010hhJZEJAQCARLU5/y9z/j8p9nD+Tx3aZHBANs7/j9q2kvM/AAAAAAAAAAAAAAAAAAAAAABHwXoYpsMwTP+6/idFT/iEzb97JfVJ6pd0StKApEFJaUkZSaclnZE0JOmspHOShiWdl3RB0kjL/0p6rdjt8Prf3fKqvQmuGK34/J9s9P9ka3lwt0eaf71YWCzE13g8V1RJvjyNKa3vUS+b4nrqZn5yzCIZXZxfauaXFgud2/PjSm9smHb58Thv2/Pd0b7bzGeV3thg7fLZtvkeXbvakneU1ucnqsrXXLQnt/Kvxs0mbud35Eej+447xza17Z/j/G48zu9jf+x4f7s02pXs2iEFjRdl1/e9GgXFcSje6p+YxtEvkv5mwmHYanrSMwEAAAAAAAAAAAAAAAAA7Mff/kIwXIrze7k56TUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDTzwAAAP//zORcow==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 952.190335ms ago: executing program 2 (id=10057): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x42842, 0x10e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./bus\x00', 0x50000, 0x0, 0x1, 0x0, &(0x7f00000007c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 951.965615ms ago: executing program 7 (id=10058): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000140), 0xfd, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x17e) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 861.487147ms ago: executing program 0 (id=10059): r0 = syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x7, 0x464f, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x1815, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x231a, 0x0, 0x0, 0x0, 0x0) 861.015086ms ago: executing program 2 (id=10060): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2e, &(0x7f0000000200)={@link_local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) 843.356757ms ago: executing program 4 (id=10061): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x4, 0x0, 0x70, 0x4}) 793.600698ms ago: executing program 2 (id=10062): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f0000005a00)=[{0x0}, {&(0x7f0000001400)=""/221, 0xdd}], 0x2}, 0x7}], 0x1, 0x32100, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 736.019069ms ago: executing program 0 (id=10064): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000050, &(0x7f00000000c0)={[{@errors_remount}, {@nodiscard}, {@data_err_ignore}, {@init_itable}, {@jqfmt_vfsv0}, {@resgid}, {@norecovery}, {@delalloc}, {@quota}]}, 0x10, 0x4e0, &(0x7f0000000400)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveC9F28lLdrdpLFt8KFWEPtUsNb3GpNNCNlkQ3bTNqFIiu8KIir45JMvgn+AIP0TRCjou1RRRFt98EFd2dnZ2sbdbEq3OyX5fGA6Z+Zs5vs9DTkzZ+awE8Cx9WFEXIuIsYg4HxGT+f40X6636292Pvf0yf3F9pJEq3Xrr0kk+b7usZJ8fSYi9iLiZER8/XrEt5L/j9vY2V1bqNWqW/l2pbm+WWns7F5YXV9Yqa5UN+bmZi/PX5m/ND8zlHZORcTVr/zxh9/72Vev/urzd39/+8/nvt1OayKvf74dA/Voz8EfLWX/F13jEbF1+EO80cbydalP/XfHRpgMAAADta/xPx4Rn8mu/ydjLLs6BQAAAI6S1pcm4l9JRAsAAAA4stJsDmySlvO5ABORpuVyZw7vJ+N0Wqs3mp9brm9vLHXmyk5FKV1erVVn8rnCU1FK2tuz+Rzb7vbFfdtzEfFORPxg8lS2XV6s15aKvvkBAAAAx8SZfeP/f0xm4/8TRecFAAAADNlU0QkAAAAAr53xPwAAABx9xv8AAABwpH3txo320uq+/3rpzs72Wv3OhaVqY628vr1YXqxvbZZX6vWV7Dv71gcdr1avb34hNrbvVZrVRrPS2Nm9vV7f3mjeXn3hFdgAAADACL3zwcPfJRGx98VT2dL2VtFJASORDKjPXhLyON/4wwgSAkZmrOgEgMKMF50AUJhS0QkAhRt0H6Dv5J1fDz8XAADg9Zj+VP/n/+4NwNGWFp0AADBynv/D8VV6cQbgpeIyAYrysQH1r/78v9V6qYQAAIChm8iWJC3nzwInIk3L5Yi3s9cClJLl1Vp1Jh8f/HaydKK9PZv9ZDJwzjAAAAAAAAAAAAAAAAAAAAAAAAAA0NFqJdECAAAAjrSI9E9J9m3+EdOTZyf23x94K/nnZLaOiLs/ufWjewvN5tZse//fnu1v/jjff7GIOxgAAADAft1xenccDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADD9PTJ/cXuMsq4f/lyREz1jP/ByWx1MkoRcfrvSYw/93NJRIwNIf7eg4h4t1f8pJ1WTEUni17xTxUYP42IM0OID8fZw3b/c63X318aH2br3n9/4/nyqvr3f2l0+7+xPv3P24eM8d6jX1T6xn8Q8d547/6nGz/pE/+jQ8b/5jd2d/vVtX4aMd3z/JO8EKvSXN+sNHZ2L6yuL6xUV6obc3Ozl+evzF+an6ksr9aq+b89Y3z/07/8z0HtP90n/tSA9p89ZPv//ejek090iqVe8c991Pv8+26f+Gl+7vtsXm7XT3fLe53y897/+W/eP6j9S33a/+z33+NE24557pDtP3/zO48P+VEAYAQaO7trC7VadeuVCsM6zksW0iggqMJrKpx4M9JQ6BQO6jWS0XVQAADA0Pzvor/oTAAAAAAAAAAAAAAAAAAAAOD4GsXXie2PuVdMUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvTfAAAA///tT9il") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x2000}], 0x1) 727.246569ms ago: executing program 0 (id=10065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 638.34795ms ago: executing program 0 (id=10066): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) close(0x4) 637.38479ms ago: executing program 7 (id=10067): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f0000009305b77eb147"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x1, 0xffffffff, 0xffffffff, 0x2, 0x0, 0x44}) 625.61594ms ago: executing program 0 (id=10068): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x34, 0x0, 0x0) 556.604251ms ago: executing program 0 (id=10069): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x1, "dbc79ef4"}, @local=@item_4={0x3, 0x2, 0x2, "b6879791"}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) 249.314456ms ago: executing program 9 (id=10079): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 239.136906ms ago: executing program 9 (id=10080): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000000), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x105d, [{}, {0x0, 0x10000000000000}]}, 0xc9) 220.946286ms ago: executing program 9 (id=10081): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000004000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e900b70300000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1ff8d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002706870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83984e68a6d80a5f5222ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0007000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1f6428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000a034000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1ebbb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa5210b16eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122c00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3911050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x7000002}, 0x2c) 184.843507ms ago: executing program 9 (id=10082): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 67.114299ms ago: executing program 9 (id=10083): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 57.930489ms ago: executing program 9 (id=10084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='hrtimer_init\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 0s ago: executing program 2 (id=10085): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x1, 0x45, {0x45, 0x7, "f9d9855d539b05fb0f4526c99263e5d04046bd6e2bfec268b2368edc697a47e365f91576f8480041c6da7cf2c5a6516a69f346f27665c294e6d0be5c203fe45ffba21b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): =0x7ffc0000 [ 2038.258105][ T30] audit: type=1326 audit(2000001921.899:28622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.8.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2038.950189][T25545] sch_fq: defrate 4294967295 ignored. [ 2039.471837][T25557] __nla_validate_parse: 5 callbacks suppressed [ 2039.471855][T25557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7364'. [ 2039.768391][T25612] netlink: 'syz.6.7388': attribute type 1 has an invalid length. [ 2039.799485][T25621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7391'. [ 2039.941591][T25655] syz.5.7407[25655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2039.941660][T25655] syz.5.7407[25655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2040.181125][T25695] netlink: 11 bytes leftover after parsing attributes in process `syz.5.7425'. [ 2040.411015][T25689] sch_fq: defrate 4294967295 ignored. [ 2040.578033][T25730] netlink: 'syz.5.7441': attribute type 4 has an invalid length. [ 2040.612112][T25734] netlink: 'syz.3.7444': attribute type 8 has an invalid length. [ 2040.644828][T25740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7445'. [ 2040.680599][T25746] 9pnet: Insufficient options for proto=fd [ 2041.486888][T25761] sch_fq: defrate 4294967295 ignored. [ 2041.747840][T25767] sch_fq: defrate 4294967295 ignored. [ 2042.103515][T25774] sch_fq: defrate 4294967295 ignored. [ 2042.117097][T25781] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7461'. [ 2042.438392][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2042.453511][T25793] sch_fq: defrate 4294967295 ignored. [ 2042.552333][ T30] kauditd_printk_skb: 451 callbacks suppressed [ 2042.552347][ T30] audit: type=1326 audit(2000001926.920:29074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25770 comm="syz.3.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78ef582929 code=0x7fc00000 [ 2042.659194][ T30] audit: type=1326 audit(2000001927.038:29075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25811 comm="syz.3.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2042.684067][ T30] audit: type=1326 audit(2000001927.038:29076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25811 comm="syz.3.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2042.708319][ T30] audit: type=1326 audit(2000001927.048:29077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25811 comm="syz.3.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2042.733782][ T30] audit: type=1326 audit(2000001927.048:29078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25811 comm="syz.3.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2042.757704][ T30] audit: type=1326 audit(2000001927.048:29079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25811 comm="syz.3.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2042.781657][ T30] audit: type=1326 audit(2000001927.048:29080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25811 comm="syz.3.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2042.805686][ T30] audit: type=1326 audit(2000001927.048:29081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25811 comm="syz.3.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2042.829950][ T30] audit: type=1326 audit(2000001927.048:29082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25811 comm="syz.3.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2042.853675][ T30] audit: type=1326 audit(2000001927.048:29083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25811 comm="syz.3.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78ef581290 code=0x7ffc0000 [ 2042.997815][T25829] ------------[ cut here ]------------ [ 2043.003317][T25829] Please remove unsupported % in format string [ 2043.009734][T25829] WARNING: CPU: 0 PID: 25829 at lib/vsprintf.c:2667 format_decode+0xcfe/0x1520 [ 2043.018722][T25829] Modules linked in: [ 2043.022630][T25829] CPU: 0 PID: 25829 Comm: syz.8.7481 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 2043.034051][T25829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2043.044180][T25829] RIP: 0010:format_decode+0xcfe/0x1520 [ 2043.049657][T25829] Code: 78 04 01 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 10 08 00 00 41 0f be 36 48 c7 c7 a0 99 64 85 e8 c2 64 2f 02 <0f> 0b e9 d6 fc ff ff 48 8b 4d c0 80 e1 07 38 c1 0f 8c 47 f3 ff ff [ 2043.069353][T25829] RSP: 0018:ffffc900024277f8 EFLAGS: 00010246 [ 2043.075458][T25829] RAX: be573387a6229000 RBX: 00000000ffffffdb RCX: 0000000000080000 [ 2043.083478][T25829] RDX: ffffc90005f4b000 RSI: 0000000000003772 RDI: 0000000000003773 [ 2043.091483][T25829] RBP: ffffc90002427868 R08: dffffc0000000000 R09: fffff52000484e4d [ 2043.099461][T25829] R10: fffff52000484e4d R11: 1ffff92000484e4c R12: 1ffff92000484f45 [ 2043.107734][T25829] R13: ffff0000ffffff00 R14: ffffc90002427a2c R15: ffff0a00ffffff00 [ 2043.115738][T25829] FS: 00007fc25cd446c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2043.125265][T25829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2043.132138][T25829] CR2: 00007fc25cd43f98 CR3: 000000010eed8000 CR4: 00000000003526b0 [ 2043.140178][T25829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2043.148218][T25829] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2043.156229][T25829] Call Trace: [ 2043.159533][T25829] [ 2043.162460][T25829] bstr_printf+0xc2/0xef0 [ 2043.166839][T25829] ? slab_post_alloc_hook+0x4f/0x2b0 [ 2043.172140][T25829] ? kmem_cache_alloc+0xf7/0x260 [ 2043.177175][T25829] bpf_trace_printk+0x106/0x250 [ 2043.182034][T25829] ? bpf_probe_write_user+0xf0/0xf0 [ 2043.187398][T25829] bpf_prog_12183cdb1cd51dab+0x2e/0x868 [ 2043.193081][T25829] bpf_test_run+0x537/0x8d0 [ 2043.197609][T25829] ? convert___skb_to_skb+0x4f0/0x4f0 [ 2043.203065][T25829] ? eth_get_headlen+0x1f0/0x1f0 [ 2043.208020][T25829] ? convert___skb_to_skb+0x41/0x4f0 [ 2043.213351][T25829] ? bpf_prog_test_run_skb+0x99b/0x1150 [ 2043.218901][T25829] bpf_prog_test_run_skb+0x9ec/0x1150 [ 2043.224329][T25829] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 2043.230236][T25829] bpf_prog_test_run+0x3d5/0x620 [ 2043.235278][T25829] ? bpf_prog_query+0x230/0x230 [ 2043.240166][T25829] ? selinux_bpf+0xce/0xf0 [ 2043.244578][T25829] ? security_bpf+0x82/0xa0 [ 2043.249064][T25829] __sys_bpf+0x52c/0x730 [ 2043.253320][T25829] ? bpf_link_show_fdinfo+0x310/0x310 [ 2043.258778][T25829] ? __kasan_check_write+0x14/0x20 [ 2043.263880][T25829] ? switch_fpu_return+0x15d/0x2c0 [ 2043.269015][T25829] __x64_sys_bpf+0x7c/0x90 [ 2043.273431][T25829] x64_sys_call+0x4b9/0x9a0 [ 2043.278035][T25829] do_syscall_64+0x4c/0xa0 [ 2043.282448][T25829] ? clear_bhb_loop+0x50/0xa0 [ 2043.287237][T25829] ? clear_bhb_loop+0x50/0xa0 [ 2043.291949][T25829] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2043.297858][T25829] RIP: 0033:0x7fc25e6db929 [ 2043.302275][T25829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2043.321931][T25829] RSP: 002b:00007fc25cd44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2043.330384][T25829] RAX: ffffffffffffffda RBX: 00007fc25e902fa0 RCX: 00007fc25e6db929 [ 2043.338381][T25829] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 2043.346374][T25829] RBP: 00007fc25e75db39 R08: 0000000000000000 R09: 0000000000000000 [ 2043.354368][T25829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2043.362357][T25829] R13: 0000000000000000 R14: 00007fc25e902fa0 R15: 00007ffd356cf218 [ 2043.370362][T25829] [ 2043.373378][T25829] ---[ end trace 7e6ca3469f9e5646 ]--- [ 2043.647899][T25872] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 2043.928114][T25873] sch_fq: defrate 4294967295 ignored. [ 2044.432141][T25912] netlink: 'syz.1.7518': attribute type 3 has an invalid length. [ 2044.654927][T25952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7537'. [ 2044.873992][T25980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7549'. [ 2045.385576][T26001] sch_fq: defrate 4294967295 ignored. [ 2045.643817][T26034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7573'. [ 2045.709373][T26046] netlink: 'syz.1.7579': attribute type 4 has an invalid length. [ 2045.764419][T26058] 9pnet: Insufficient options for proto=fd [ 2045.792371][T26062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7587'. [ 2046.111446][T26069] sch_fq: defrate 4294967295 ignored. [ 2046.284458][T26085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7597'. [ 2046.293538][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7597'. [ 2046.303024][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7597'. [ 2046.877683][T26132] sch_fq: defrate 4294967295 ignored. [ 2047.194621][T26181] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7641'. [ 2047.208124][T26182] overlayfs: missing 'lowerdir' [ 2047.228336][ T30] kauditd_printk_skb: 955 callbacks suppressed [ 2047.228350][ T30] audit: type=1326 audit(2000001931.930:30039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.6.7644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2047.268501][ T30] audit: type=1326 audit(2000001931.973:30040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.6.7644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2047.297699][ T30] audit: type=1326 audit(2000001931.973:30041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.6.7644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2047.321985][ T30] audit: type=1326 audit(2000001931.973:30042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.6.7644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2047.355128][ T30] audit: type=1326 audit(2000001931.973:30043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26185 comm="syz.6.7644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2047.421631][T26208] netlink: 71 bytes leftover after parsing attributes in process `syz.6.7655'. [ 2047.432559][ T30] audit: type=1326 audit(2000001932.155:30044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26209 comm="syz.3.7656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78ef582929 code=0x0 [ 2047.510630][ T30] audit: type=1326 audit(2000001932.241:30045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26203 comm="syz.1.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7fc00000 [ 2047.919220][ T30] audit: type=1326 audit(2000001932.670:30046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26152 comm="syz.8.7628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2047.944407][T26222] sch_fq: defrate 4294967295 ignored. [ 2047.953634][T26225] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7662'. [ 2048.191330][ T30] audit: type=1326 audit(2000001932.970:30047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26203 comm="syz.1.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73c0638929 code=0x7fc00000 [ 2048.266286][ T30] audit: type=1326 audit(2000001933.056:30048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26255 comm="syz.1.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2048.711790][T26285] sch_fq: defrate 4294967295 ignored. [ 2048.732528][T26292] futex_wake_op: syz.8.7692 tries to shift op by -1; fix this program [ 2049.230061][T26308] sch_fq: defrate 4294967295 ignored. [ 2049.257189][T26311] overlayfs: missing 'lowerdir' [ 2049.346804][T26333] __nla_validate_parse: 2 callbacks suppressed [ 2049.346823][T26333] netlink: 277 bytes leftover after parsing attributes in process `syz.6.7711'. [ 2049.833426][T26352] sch_fq: defrate 4294967295 ignored. [ 2049.868373][T26356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7719'. [ 2050.110043][T26391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7732'. [ 2050.229746][T26396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7734'. [ 2050.371341][T26412] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7741'. [ 2050.774104][T26432] sch_fq: defrate 4294967295 ignored. [ 2051.153961][T26459] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 2051.405554][T26511] 9pnet: Insufficient options for proto=fd [ 2051.719643][T26517] sch_fq: defrate 4294967295 ignored. [ 2051.729972][T26524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7792'. [ 2051.848204][T26543] xt_hashlimit: size too large, truncated to 1048576 [ 2051.902046][T26548] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7801'. [ 2051.922561][T26548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7801'. [ 2051.941456][ T30] kauditd_printk_skb: 472 callbacks suppressed [ 2051.941470][ T30] audit: type=1326 audit(2000001936.993:30521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26549 comm="syz.6.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2051.990613][ T30] audit: type=1326 audit(2000001937.036:30522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26549 comm="syz.6.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2052.031898][ T30] audit: type=1326 audit(2000001937.036:30523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26549 comm="syz.6.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2052.057465][T26554] tmpfs: Unknown parameter '9' [ 2052.074643][ T30] audit: type=1326 audit(2000001937.036:30524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26549 comm="syz.6.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2052.108867][ T30] audit: type=1326 audit(2000001937.036:30525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26549 comm="syz.6.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2052.140494][ T30] audit: type=1326 audit(2000001937.036:30526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26549 comm="syz.6.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2052.140666][T26558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7808'. [ 2052.244010][ T30] audit: type=1326 audit(2000001937.036:30527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26549 comm="syz.6.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2052.318168][ T30] audit: type=1326 audit(2000001937.036:30528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26549 comm="syz.6.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2052.546207][ T30] audit: type=1326 audit(2000001937.036:30529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26549 comm="syz.6.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52c8681290 code=0x7ffc0000 [ 2052.571973][T26567] sch_fq: defrate 4294967295 ignored. [ 2052.577731][ T30] audit: type=1326 audit(2000001937.036:30530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26549 comm="syz.6.7804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52c8681290 code=0x7ffc0000 [ 2052.936724][T26581] sch_fq: defrate 4294967295 ignored. [ 2053.310265][T26600] sch_fq: defrate 4294967295 ignored. [ 2053.927671][T26642] sch_fq: defrate 4294967295 ignored. [ 2054.325192][T26664] sch_fq: defrate 4294967295 ignored. [ 2054.348418][T26669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7855'. [ 2054.667197][T26685] sch_fq: defrate 4294967295 ignored. [ 2054.858416][T26709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7871'. [ 2055.219531][T26713] sch_fq: defrate 4294967295 ignored. [ 2055.469992][T26727] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7878'. [ 2055.515346][T26735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7882'. [ 2055.805496][T26741] sch_fq: defrate 4294967295 ignored. [ 2056.620617][ T30] kauditd_printk_skb: 421 callbacks suppressed [ 2056.620632][ T30] audit: type=1326 audit(2000001942.014:30952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26747 comm="syz.1.7886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73c0638929 code=0x7fc00000 [ 2056.661614][ T30] audit: type=1326 audit(2000001942.057:30953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.1.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2056.685477][ T30] audit: type=1326 audit(2000001942.057:30954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.1.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2056.709531][ T30] audit: type=1326 audit(2000001942.067:30955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.1.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2056.734703][ T30] audit: type=1326 audit(2000001942.067:30956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.1.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2056.759764][ T30] audit: type=1326 audit(2000001942.067:30957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.1.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2056.787246][ T30] audit: type=1326 audit(2000001942.067:30958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.1.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2056.811757][ T30] audit: type=1326 audit(2000001942.067:30959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.1.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2056.843374][ T30] audit: type=1326 audit(2000001942.067:30960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.1.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2056.887461][ T30] audit: type=1326 audit(2000001942.067:30961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.1.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2057.191836][T26803] sch_fq: defrate 4294967295 ignored. [ 2057.737067][T26842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7926'. [ 2058.324047][T26859] sch_fq: defrate 4294967295 ignored. [ 2058.539585][T26873] syz.3.7937[26873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2058.539639][T26873] syz.3.7937[26873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2058.560247][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7938'. [ 2058.938287][T26879] sch_fq: defrate 4294967295 ignored. [ 2059.056895][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7949'. [ 2059.491882][T26928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7962'. [ 2060.006954][T26951] sch_fq: defrate 4294967295 ignored. [ 2060.019539][T26960] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7974'. [ 2060.030896][T26962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7975'. [ 2060.397303][T26989] xt_hashlimit: size too large, truncated to 1048576 [ 2060.537997][T26996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7990'. [ 2061.145128][T27039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8010'. [ 2061.285973][ T30] kauditd_printk_skb: 831 callbacks suppressed [ 2061.285988][ T30] audit: type=1326 audit(2000001947.013:31793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27012 comm="syz.1.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73c05d4b19 code=0x7ffc0000 [ 2061.325898][ T30] audit: type=1326 audit(2000001947.024:31794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27012 comm="syz.1.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73c05d4b19 code=0x7ffc0000 [ 2061.349940][ T30] audit: type=1326 audit(2000001947.024:31795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27012 comm="syz.1.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73c05d4b19 code=0x7ffc0000 [ 2061.418623][ T30] audit: type=1326 audit(2000001947.024:31796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27012 comm="syz.1.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73c05d4b19 code=0x7ffc0000 [ 2061.470964][ T30] audit: type=1326 audit(2000001947.024:31797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27012 comm="syz.1.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73c05d4b19 code=0x7ffc0000 [ 2061.494805][ T30] audit: type=1326 audit(2000001947.024:31798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27012 comm="syz.1.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73c05d4b19 code=0x7ffc0000 [ 2061.528756][ T30] audit: type=1326 audit(2000001947.024:31799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27012 comm="syz.1.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73c05d4b19 code=0x7ffc0000 [ 2061.596433][ T30] audit: type=1326 audit(2000001947.024:31800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27012 comm="syz.1.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73c05d4b19 code=0x7ffc0000 [ 2061.655243][ T30] audit: type=1326 audit(2000001947.024:31801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27012 comm="syz.1.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73c05d4b19 code=0x7ffc0000 [ 2061.705414][ T30] audit: type=1326 audit(2000001947.024:31802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27012 comm="syz.1.7998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73c05d4b19 code=0x7ffc0000 [ 2061.870781][T27080] 9pnet: Insufficient options for proto=fd [ 2062.377439][T27120] device wireguard1 entered promiscuous mode [ 2062.411343][T27127] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8049'. [ 2062.617174][T27171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8070'. [ 2062.687187][T27175] syz.5.8072[27175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2062.687264][T27175] syz.5.8072[27175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2063.042475][T27198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8082'. [ 2063.302676][T27219] syz.6.8091[27219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2063.302807][T27219] syz.6.8091[27219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2063.487144][T27247] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8105'. [ 2063.695363][T27269] overlayfs: failed to clone lowerpath [ 2063.744413][T27278] __nla_validate_parse: 1 callbacks suppressed [ 2063.744433][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8119'. [ 2063.798212][T27293] syz.5.8127[27293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2063.798291][T27293] syz.5.8127[27293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2063.966399][T27330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8144'. [ 2064.212741][T27333] sch_fq: defrate 4294967295 ignored. [ 2064.218246][T27319] sch_fq: defrate 4294967295 ignored. [ 2064.303182][T27346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8148'. [ 2064.578551][T27356] sch_fq: defrate 4294967295 ignored. [ 2065.038989][T27390] sch_fq: defrate 4294967295 ignored. [ 2065.442171][T27394] sch_fq: defrate 4294967295 ignored. [ 2065.658669][T27433] SELinux: Context : is not valid (left unmapped). [ 2065.675450][T27435] futex_wake_op: syz.6.8190 tries to shift op by -1; fix this program [ 2065.996517][T27441] sch_fq: defrate 4294967295 ignored. [ 2066.261272][ T30] kauditd_printk_skb: 1045 callbacks suppressed [ 2066.261286][ T30] audit: type=1326 audit(2000001952.355:32848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27406 comm="syz.3.8177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78ef582929 code=0x7fc00000 [ 2066.292741][ T30] audit: type=1326 audit(2000001952.398:32849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27412 comm="syz.5.8180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc36c129929 code=0x7fc00000 [ 2066.338901][T27457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8199'. [ 2066.359912][ T30] audit: type=1326 audit(2000001952.463:32850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27423 comm="syz.8.8185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2066.389136][ T30] audit: type=1326 audit(2000001952.463:32851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27423 comm="syz.8.8185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2066.414373][ T30] audit: type=1326 audit(2000001952.463:32852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27423 comm="syz.8.8185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2066.441944][ T30] audit: type=1326 audit(2000001952.463:32853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27423 comm="syz.8.8185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2066.474089][ T30] audit: type=1326 audit(2000001952.463:32854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27423 comm="syz.8.8185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2066.504185][ T30] audit: type=1326 audit(2000001952.463:32855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27423 comm="syz.8.8185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2066.535173][ T30] audit: type=1326 audit(2000001952.463:32856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27423 comm="syz.8.8185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2066.563479][ T30] audit: type=1326 audit(2000001952.463:32857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27423 comm="syz.8.8185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2066.694365][T27480] sch_fq: defrate 4294967295 ignored. [ 2067.119801][T27488] sch_fq: defrate 4294967295 ignored. [ 2067.300850][T27516] overlayfs: failed to clone upperpath [ 2067.706959][T27543] sch_fq: defrate 4294967295 ignored. [ 2067.913091][T27550] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8240'. [ 2067.942926][T27554] syz.1.8242[27554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2067.942984][T27554] syz.1.8242[27554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2067.956477][T27554] incfs: Options parsing error. -22 [ 2067.973323][T27554] incfs: mount failed -22 [ 2067.987019][T27556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8243'. [ 2068.567153][T27565] sch_fq: defrate 4294967295 ignored. [ 2068.651751][T27582] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8254'. [ 2068.731002][T27591] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8258'. [ 2068.920490][T27612] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8268'. [ 2069.005526][T27633] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8276'. [ 2069.352691][T27640] sch_fq: defrate 4294967295 ignored. [ 2069.486448][T27656] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8289'. [ 2069.548924][T27668] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8294'. [ 2069.571941][T27671] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8295'. [ 2069.589780][T27671] device bridge_slave_0 entered promiscuous mode [ 2069.864914][T27695] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8305'. [ 2070.155700][T27737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8325'. [ 2070.374216][T27729] sch_fq: defrate 4294967295 ignored. [ 2070.483827][T27761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8346'. [ 2070.847980][T27769] sch_fq: defrate 4294967295 ignored. [ 2070.934324][ T30] kauditd_printk_skb: 452 callbacks suppressed [ 2070.934339][ T30] audit: type=1326 audit(2000001957.376:33310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27786 comm="syz.1.8349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2070.990277][ T30] audit: type=1326 audit(2000001957.376:33311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27786 comm="syz.1.8349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2071.014247][ T30] audit: type=1326 audit(2000001957.408:33312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27786 comm="syz.1.8349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2071.042663][ T30] audit: type=1326 audit(2000001957.408:33313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27786 comm="syz.1.8349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2071.073172][ T30] audit: type=1326 audit(2000001957.408:33314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27786 comm="syz.1.8349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2071.102919][ T30] audit: type=1326 audit(2000001957.408:33315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27786 comm="syz.1.8349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2071.133988][ T30] audit: type=1326 audit(2000001957.408:33316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27786 comm="syz.1.8349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2071.158084][ T30] audit: type=1326 audit(2000001957.408:33317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27786 comm="syz.1.8349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2071.208099][ T30] audit: type=1326 audit(2000001957.408:33318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27786 comm="syz.1.8349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2071.238200][ T30] audit: type=1326 audit(2000001957.408:33319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27786 comm="syz.1.8349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73c0637290 code=0x7ffc0000 [ 2071.423274][T27844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2071.762133][T27864] sch_fq: defrate 4294967295 ignored. [ 2072.734830][T27937] sch_fq: defrate 4294967295 ignored. [ 2073.261303][T27983] xt_hashlimit: size too large, truncated to 1048576 [ 2073.328974][T27996] __nla_validate_parse: 5 callbacks suppressed [ 2073.328993][T27996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8444'. [ 2073.422648][T28002] tmpfs: Bad value for 'gid' [ 2073.498417][T28009] device batadv_slave_1 entered promiscuous mode [ 2073.505424][T28008] device batadv_slave_1 left promiscuous mode [ 2073.784697][T28048] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 2074.269609][T28057] sch_fq: defrate 4294967295 ignored. [ 2074.798638][T28104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8492'. [ 2075.132767][T28114] sch_fq: defrate 4294967295 ignored. [ 2075.490717][T28130] sch_fq: defrate 4294967295 ignored. [ 2075.637410][ T30] kauditd_printk_skb: 784 callbacks suppressed [ 2075.637425][ T30] audit: type=1326 audit(2000001962.418:34104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28138 comm="syz.5.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36c129929 code=0x7fc00000 [ 2075.811972][ T30] audit: type=1326 audit(2000001962.600:34105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28147 comm="syz.8.8509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2075.874981][ T30] audit: type=1326 audit(2000001962.676:34106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28161 comm="syz.3.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2075.898854][ T30] audit: type=1326 audit(2000001962.676:34107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28161 comm="syz.3.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2075.926465][ T30] audit: type=1326 audit(2000001962.676:34108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28161 comm="syz.3.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2075.950148][ T30] audit: type=1326 audit(2000001962.676:34109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28161 comm="syz.3.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2075.981869][ T30] audit: type=1326 audit(2000001962.676:34110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28161 comm="syz.3.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2076.005914][ T30] audit: type=1326 audit(2000001962.676:34111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28161 comm="syz.3.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2076.031838][ T30] audit: type=1326 audit(2000001962.676:34112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28161 comm="syz.3.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2076.056067][ T30] audit: type=1326 audit(2000001962.676:34113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28161 comm="syz.3.8515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2076.854121][T28200] sch_fq: defrate 4294967295 ignored. [ 2077.259794][T28225] sch_fq: defrate 4294967295 ignored. [ 2078.454301][T28270] sch_fq: defrate 4294967295 ignored. [ 2078.529792][ T26] kernel write not supported for file bpf-prog (pid: 26 comm: kworker/1:0) [ 2079.047199][T28343] netlink: 'syz.8.8591': attribute type 2 has an invalid length. [ 2079.358713][T28346] sch_fq: defrate 4294967295 ignored. [ 2079.433660][T28354] netlink: 'syz.1.8595': attribute type 3 has an invalid length. [ 2079.495211][T28362] syz.1.8599[28362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2079.495290][T28362] syz.1.8599[28362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2079.552220][T28366] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8601'. [ 2079.803511][T28388] xt_hashlimit: size too large, truncated to 1048576 [ 2080.120750][T28408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8619'. [ 2080.389181][ T30] kauditd_printk_skb: 664 callbacks suppressed [ 2080.389199][ T30] audit: type=1326 audit(2000001967.503:34778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28371 comm="syz.5.8604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc36c129929 code=0x7fc00000 [ 2080.460992][T28433] futex_wake_op: syz.5.8631 tries to shift op by 36; fix this program [ 2080.671506][ T30] audit: type=1326 audit(2000001967.814:34779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.8.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2080.716940][ T30] audit: type=1326 audit(2000001967.846:34780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.8.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2080.720525][T28483] syz.6.8656[28483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2080.741010][T28483] syz.6.8656[28483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2080.772200][ T30] audit: type=1326 audit(2000001967.846:34781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.8.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2080.836721][ T30] audit: type=1326 audit(2000001967.846:34782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.8.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2080.880380][T28497] netlink: 312 bytes leftover after parsing attributes in process `syz.3.8662'. [ 2080.896757][ T30] audit: type=1326 audit(2000001967.846:34783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.8.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2080.932484][ T30] audit: type=1326 audit(2000001967.846:34784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.8.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2080.956996][ T30] audit: type=1326 audit(2000001967.846:34785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.8.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2080.980736][ T30] audit: type=1326 audit(2000001967.846:34786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.8.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2081.006809][ T30] audit: type=1326 audit(2000001967.846:34787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.8.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2081.266414][T28510] sch_fq: defrate 4294967295 ignored. [ 2081.336198][T28525] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 2081.407380][T28537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8678'. [ 2081.460369][T28539] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8679'. [ 2081.580254][T28553] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 2082.463689][T28609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8709'. [ 2082.826187][T28637] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8720'. [ 2083.294191][T28676] sch_fq: defrate 4294967295 ignored. [ 2084.394679][T28699] sch_fq: defrate 4294967295 ignored. [ 2084.548207][T28720] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8755'. [ 2084.568174][T28722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8757'. [ 2084.759467][T28763] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8777'. [ 2084.770335][T28761] incfs: Options parsing error. -22 [ 2084.775599][T28761] incfs: mount failed -22 [ 2084.849023][T28779] xt_hashlimit: size too large, truncated to 1048576 [ 2086.044305][ T30] kauditd_printk_skb: 565 callbacks suppressed [ 2086.044322][ T30] audit: type=1326 audit(2000000005.385:35353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28837 comm="syz.1.8813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2086.097531][ T30] audit: type=1326 audit(2000000005.385:35354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28837 comm="syz.1.8813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2086.121550][ T30] audit: type=1326 audit(2000000005.385:35355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28837 comm="syz.1.8813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2086.147643][ T30] audit: type=1326 audit(2000000005.385:35356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28837 comm="syz.1.8813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2086.171560][ T30] audit: type=1326 audit(2000000005.385:35357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28837 comm="syz.1.8813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2086.195359][ T30] audit: type=1326 audit(2000000005.385:35358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28837 comm="syz.1.8813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2086.219020][ T30] audit: type=1326 audit(2000000005.385:35359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28837 comm="syz.1.8813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2086.282235][ T30] audit: type=1326 audit(2000000005.385:35360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28837 comm="syz.1.8813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2086.326316][ T30] audit: type=1326 audit(2000000005.385:35361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28837 comm="syz.1.8813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2086.362443][ T30] audit: type=1326 audit(2000000005.385:35362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28837 comm="syz.1.8813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73c0637290 code=0x7ffc0000 [ 2087.120736][T28914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8846'. [ 2087.934293][T28958] sch_fq: defrate 4294967295 ignored. [ 2088.034416][T28981] xt_bpf: check failed: parse error [ 2088.798222][T29014] sch_fq: defrate 4294967295 ignored. [ 2088.920306][T29045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8903'. [ 2088.940937][T29047] tipc: Enabling of bearer rejected, already enabled [ 2088.986345][T29054] 9pnet: Insufficient options for proto=fd [ 2089.322602][T29096] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29096 comm=syz.6.8927 [ 2089.427168][T29113] overlayfs: conflicting options: metacopy=on,redirect_dir=off [ 2089.649616][T29114] sch_fq: defrate 4294967295 ignored. [ 2090.037661][T29138] sch_fq: defrate 4294967295 ignored. [ 2090.185711][T29164] overlayfs: failed to clone upperpath [ 2090.741411][T29222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8982'. [ 2090.895418][ T30] kauditd_printk_skb: 878 callbacks suppressed [ 2090.895433][ T30] audit: type=1326 audit(2000000010.600:36241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29246 comm="syz.5.8994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36c129929 code=0x7ffc0000 [ 2090.932639][ T30] audit: type=1326 audit(2000000010.600:36242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29246 comm="syz.5.8994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36c129929 code=0x7ffc0000 [ 2090.957363][ T30] audit: type=1326 audit(2000000010.600:36243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29246 comm="syz.5.8994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36c129929 code=0x7ffc0000 [ 2090.983085][ T30] audit: type=1326 audit(2000000010.600:36244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29246 comm="syz.5.8994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36c129929 code=0x7ffc0000 [ 2091.008787][ T30] audit: type=1326 audit(2000000010.621:36245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29246 comm="syz.5.8994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36c129929 code=0x7ffc0000 [ 2091.034368][ T30] audit: type=1326 audit(2000000010.643:36246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29246 comm="syz.5.8994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36c129929 code=0x7ffc0000 [ 2091.067741][ T30] audit: type=1326 audit(2000000010.653:36247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29246 comm="syz.5.8994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36c129929 code=0x7ffc0000 [ 2091.095632][ T30] audit: type=1326 audit(2000000010.653:36248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29246 comm="syz.5.8994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36c129929 code=0x7ffc0000 [ 2091.102771][T29260] 9pnet: Insufficient options for proto=fd [ 2091.120161][ T30] audit: type=1326 audit(2000000010.653:36249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29246 comm="syz.5.8994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36c129929 code=0x7ffc0000 [ 2091.160851][ T30] audit: type=1326 audit(2000000010.653:36250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29246 comm="syz.5.8994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc36c129929 code=0x7ffc0000 [ 2091.231344][T29284] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3 [ 2091.260752][T29292] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2091.276701][T29292] FAT-fs (loop7): unable to read boot sector [ 2091.973261][T29341] sch_fq: defrate 4294967295 ignored. [ 2092.721291][T29417] sch_fq: defrate 4294967295 ignored. [ 2093.909655][T29476] sch_fq: defrate 4294967295 ignored. [ 2094.097547][T29491] syz.8.9107[29491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2094.097613][T29491] syz.8.9107[29491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2094.119613][T29493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29493 comm=syz.8.9108 [ 2094.144017][T29493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=29493 comm=syz.8.9108 [ 2094.428887][T29531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9127'. [ 2094.766747][T29547] sch_fq: defrate 4294967295 ignored. [ 2095.216206][T29562] sch_fq: defrate 4294967295 ignored. [ 2095.310508][T29575] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9145'. [ 2095.720339][ T30] kauditd_printk_skb: 425 callbacks suppressed [ 2095.720354][ T30] audit: type=1326 audit(2000000015.771:36676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29596 comm="syz.6.9155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7fc00000 [ 2095.770629][T29604] syz.3.9158[29604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2095.770684][T29604] syz.3.9158[29604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2095.876896][T29620] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2095.924435][T29626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9169'. [ 2095.981112][ T30] audit: type=1326 audit(2000000016.050:36677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.8.9175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2096.007135][ T30] audit: type=1326 audit(2000000016.050:36678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.8.9175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2096.031144][ T30] audit: type=1326 audit(2000000016.050:36679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.8.9175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2096.061809][ T30] audit: type=1326 audit(2000000016.050:36680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.8.9175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2096.086279][ T30] audit: type=1326 audit(2000000016.050:36681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.8.9175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2096.114120][ T30] audit: type=1326 audit(2000000016.050:36682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.8.9175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2096.138255][ T30] audit: type=1326 audit(2000000016.050:36683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.8.9175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2096.162288][ T30] audit: type=1326 audit(2000000016.050:36684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.8.9175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2096.186183][ T30] audit: type=1326 audit(2000000016.072:36685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.8.9175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2096.752223][T29717] syz.8.9208[29717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2096.752272][T29717] syz.8.9208[29717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2096.781182][T29719] tmpfs: Unknown parameter 'roo' [ 2097.380996][T29767] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9228'. [ 2097.547821][T29798] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9243'. [ 2097.597277][T29809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9249'. [ 2097.773793][T29836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9260'. [ 2097.949513][T29853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9267'. [ 2098.361649][T29867] sch_fq: defrate 4294967295 ignored. [ 2098.393486][T29876] syz.3.9277[29876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2098.393566][T29876] syz.3.9277[29876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2098.398254][T29878] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9278'. [ 2098.514344][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2099.198514][T29923] sch_fq: defrate 4294967295 ignored. [ 2099.768761][T29969] /dev/loop0: Can't open blockdev [ 2099.881678][T16230] kernel write not supported for file bpf-prog (pid: 16230 comm: kworker/0:0) [ 2100.255764][T29994] sch_fq: defrate 4294967295 ignored. [ 2100.297518][T30009] syz.8.9334[30009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2100.297629][T30009] syz.8.9334[30009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2100.390443][ T30] kauditd_printk_skb: 632 callbacks suppressed [ 2100.390458][ T30] audit: type=1326 audit(2000000002.027:37318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30008 comm="syz.6.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2100.456847][ T30] audit: type=1326 audit(2000000002.027:37319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30008 comm="syz.6.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2100.480802][ T30] audit: type=1326 audit(2000000002.027:37320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30008 comm="syz.6.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2100.504961][ T30] audit: type=1326 audit(2000000002.027:37321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30008 comm="syz.6.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2100.529817][ T30] audit: type=1326 audit(2000000002.027:37322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30008 comm="syz.6.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2100.559578][ T30] audit: type=1326 audit(2000000002.027:37323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30008 comm="syz.6.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2100.583711][ T30] audit: type=1326 audit(2000000002.027:37324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30008 comm="syz.6.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2100.607897][ T30] audit: type=1326 audit(2000000002.027:37325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30008 comm="syz.6.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2100.642383][ T30] audit: type=1326 audit(2000000002.027:37326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30008 comm="syz.6.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2100.666401][ T30] audit: type=1326 audit(2000000002.027:37327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30008 comm="syz.6.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2100.673818][T30041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9349'. [ 2101.222357][T30077] sch_fq: defrate 4294967295 ignored. [ 2101.585324][T30123] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9386'. [ 2102.123919][T30183] sch_fq: defrate 4294967295 ignored. [ 2102.320033][T30230] xt_hashlimit: size too large, truncated to 1048576 [ 2103.047881][T30278] sch_fq: defrate 4294967295 ignored. [ 2104.015621][T30327] sch_fq: defrate 4294967295 ignored. [ 2104.115825][T30340] xt_hashlimit: size too large, truncated to 1048576 [ 2104.326498][T30357] 9pnet: Insufficient options for proto=fd [ 2105.381926][T30431] sch_fq: defrate 4294967295 ignored. [ 2105.387762][T30434] sch_fq: defrate 4294967295 ignored. [ 2105.510731][ T30] kauditd_printk_skb: 585 callbacks suppressed [ 2105.510745][ T30] audit: type=1326 audit(2000000007.521:37913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30455 comm="syz.1.9537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2105.549691][ T30] audit: type=1326 audit(2000000007.531:37914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30455 comm="syz.1.9537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2105.586014][ T30] audit: type=1326 audit(2000000007.553:37915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30455 comm="syz.1.9537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2105.645088][ T30] audit: type=1326 audit(2000000007.553:37916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30455 comm="syz.1.9537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2105.698726][ T30] audit: type=1326 audit(2000000007.553:37917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30455 comm="syz.1.9537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2105.874945][T30471] sch_fq: defrate 4294967295 ignored. [ 2105.882423][T30474] sch_fq: defrate 4294967295 ignored. [ 2105.897058][ T30] audit: type=1326 audit(2000000007.553:37918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30455 comm="syz.1.9537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2106.069549][ T30] audit: type=1326 audit(2000000007.553:37919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30455 comm="syz.1.9537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2106.093991][ T30] audit: type=1326 audit(2000000007.553:37920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30455 comm="syz.1.9537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0638929 code=0x7ffc0000 [ 2106.354126][T30496] sit: Src spoofed 0.0.0.0/2002:0:400:0:ff03::80 -> 0.0.0.0/2042::fb:ffff:ff00:0 [ 2106.405261][ T30] audit: type=1326 audit(2000000008.475:37921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30508 comm="syz.3.9560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2106.435280][ T30] audit: type=1326 audit(2000000008.508:37922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30508 comm="syz.3.9560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2106.810813][T30525] sch_fq: defrate 4294967295 ignored. [ 2106.827752][T30522] sch_fq: defrate 4294967295 ignored. [ 2107.319491][T30550] xt_hashlimit: size too large, truncated to 1048576 [ 2107.725248][T30568] sch_fq: defrate 4294967295 ignored. [ 2107.813390][T30567] sch_fq: defrate 4294967295 ignored. [ 2108.219160][T30595] sch_fq: defrate 4294967295 ignored. [ 2108.429893][T30628] syz.3.9612[30628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2108.429970][T30628] syz.3.9612[30628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2108.473517][T30630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9614'. [ 2109.033034][T30639] sch_fq: defrate 4294967295 ignored. [ 2109.081827][T30661] syz.6.9627[30661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2109.081906][T30661] syz.6.9627[30661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2109.107482][T30667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9630'. [ 2109.128777][T30667] device batadv_slave_1 entered promiscuous mode [ 2109.974193][T30715] 9pnet: Insufficient options for proto=fd [ 2110.704352][T30753] fq_change: 1 callbacks suppressed [ 2110.704380][T30753] sch_fq: defrate 4294967295 ignored. [ 2110.717222][T30756] sch_fq: defrate 4294967295 ignored. [ 2110.934017][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 2110.934033][ T30] audit: type=1326 audit(2000000013.336:38084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30697 comm="syz.8.9643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2111.005640][ T30] audit: type=1326 audit(2000000013.336:38085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30697 comm="syz.8.9643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7ffc0000 [ 2111.084359][ T30] audit: type=1326 audit(2000000013.432:38086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30763 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2111.144229][ T30] audit: type=1326 audit(2000000013.432:38087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30763 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2111.175585][ T30] audit: type=1326 audit(2000000013.454:38088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30763 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2111.199891][ T30] audit: type=1326 audit(2000000013.454:38089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30763 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2111.225035][ T30] audit: type=1326 audit(2000000013.454:38090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30763 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2111.249353][ T30] audit: type=1326 audit(2000000013.454:38091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30763 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2111.276062][ T30] audit: type=1326 audit(2000000013.454:38092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30763 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2111.305609][ T30] audit: type=1326 audit(2000000013.454:38093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30763 comm="syz.3.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ef582929 code=0x7ffc0000 [ 2111.417975][T30762] overlayfs: failed to clone upperpath [ 2111.741085][T30792] sch_fq: defrate 4294967295 ignored. [ 2112.202204][T30821] sch_fq: defrate 4294967295 ignored. [ 2112.256016][T30826] xt_hashlimit: max too large, truncated to 1048576 [ 2113.267704][T30886] sch_fq: defrate 4294967295 ignored. [ 2113.338632][T30898] futex_wake_op: syz.3.9728 tries to shift op by -1; fix this program [ 2114.586263][T30957] sch_fq: defrate 4294967295 ignored. [ 2115.145224][T30989] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2115.156226][T30989] FAT-fs (loop7): unable to read boot sector [ 2115.186589][T30993] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3 [ 2115.592141][T31008] sch_fq: defrate 4294967295 ignored. [ 2115.920070][ T30] kauditd_printk_skb: 2468 callbacks suppressed [ 2115.920084][ T30] audit: type=1326 audit(2000000004.355:40562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30981 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2115.952653][T31018] sch_fq: defrate 4294967295 ignored. [ 2115.953012][ T30] audit: type=1326 audit(2000000004.355:40563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30981 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2115.981809][ T30] audit: type=1326 audit(2000000004.355:40564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30981 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2116.005628][ T30] audit: type=1326 audit(2000000004.355:40565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30981 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2116.029691][ T30] audit: type=1326 audit(2000000004.355:40566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30981 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2116.056876][ T30] audit: type=1326 audit(2000000004.355:40567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30981 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2116.085853][ T30] audit: type=1326 audit(2000000004.355:40568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30981 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2116.110085][ T30] audit: type=1326 audit(2000000004.388:40569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30981 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2116.142741][T31039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9787'. [ 2116.152191][ T30] audit: type=1326 audit(2000000004.388:40570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30981 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2116.180912][ T30] audit: type=1326 audit(2000000004.388:40571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30981 comm="syz.8.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25e6db929 code=0x7fc00000 [ 2116.303605][T31058] overlayfs: failed to clone upperpath [ 2116.700320][T31064] sch_fq: defrate 4294967295 ignored. [ 2116.919594][T31075] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9801'. [ 2116.989363][T31078] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 2117.000008][T31078] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 2117.225059][T31099] ip_tunnel: non-ECT from 172.20.20.35 with TOS=0x3 [ 2117.731737][T31129] sch_fq: defrate 4294967295 ignored. [ 2117.831730][T31138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9828'. [ 2118.018512][T31159] syz.8.9836[31159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2118.018623][T31159] syz.8.9836[31159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2118.536731][T31197] futex_wake_op: syz.6.9852 tries to shift op by 32; fix this program [ 2118.676300][T31213] 9pnet: Insufficient options for proto=fd [ 2118.983210][T31220] sch_fq: defrate 4294967295 ignored. [ 2119.137231][T31247] xt_hashlimit: max too large, truncated to 1048576 [ 2119.448345][T31250] sch_fq: defrate 4294967295 ignored. [ 2119.614841][T31273] overlayfs: failed to resolve './file1': -2 [ 2119.638537][T31277] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 2120.106005][T31334] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9913'. [ 2120.138289][T31342] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9917'. [ 2120.147916][T31341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31341 comm=syz.8.9916 [ 2120.165086][T31344] Illegal XDP return value 2497587720, expect packet loss! [ 2120.483411][T31351] futex_wake_op: syz.3.9921 tries to shift op by -1; fix this program [ 2120.495568][T31349] sch_fq: defrate 4294967295 ignored. [ 2120.601508][ T30] kauditd_printk_skb: 521 callbacks suppressed [ 2120.601522][ T30] audit: type=1326 audit(2000000009.377:41093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31313 comm="syz.6.9905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52c8682929 code=0x7fc00000 [ 2120.663288][ T30] audit: type=1326 audit(2000000009.441:41094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2120.689622][ T30] audit: type=1326 audit(2000000009.441:41095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2120.713594][ T30] audit: type=1326 audit(2000000009.462:41096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2120.752390][ T30] audit: type=1326 audit(2000000009.462:41097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2120.782923][ T30] audit: type=1326 audit(2000000009.462:41098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2120.815883][ T30] audit: type=1326 audit(2000000009.462:41099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2120.841514][ T30] audit: type=1326 audit(2000000009.462:41100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2120.865497][ T30] audit: type=1326 audit(2000000009.473:41101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2120.895001][ T30] audit: type=1326 audit(2000000009.473:41102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31376 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52c8682929 code=0x7ffc0000 [ 2120.983104][T31401] 9pnet: Insufficient options for proto=fd [ 2121.885439][T31426] sch_fq: defrate 4294967295 ignored. [ 2122.093318][T31456] overlayfs: failed to resolve './file1': -2 [ 2122.667549][T31499] sch_fq: defrate 4294967295 ignored. [ 2122.915979][T31536] xt_hashlimit: max too large, truncated to 1048576 [ 2122.981513][T31540] SELinux: Context system_u:object_r:load_policy_exec_t:s0 is not valid (left unmapped). [ 2123.231868][T31545] sch_fq: defrate 4294967295 ignored. [ 2123.364841][T31572] netlink: 'syz.1.10022': attribute type 6 has an invalid length. [ 2139.068467][T31600] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.075578][T31600] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.083330][T31600] device bridge_slave_0 entered promiscuous mode [ 2139.104654][T31600] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.111754][T31600] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.119340][T31600] device bridge_slave_1 entered promiscuous mode [ 2139.132627][T31604] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.139883][T31604] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.147323][T31604] device bridge_slave_0 entered promiscuous mode [ 2139.153703][ C0] ------------[ cut here ]------------ [ 2139.153710][ C0] refcount_t: addition on 0; use-after-free. [ 2139.153777][ C0] WARNING: CPU: 0 PID: 31604 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 2139.153800][ C0] Modules linked in: [ 2139.153808][ C0] CPU: 0 PID: 31604 Comm: syz-executor Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 2139.153819][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2139.153826][ C0] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 2139.153839][ C0] Code: 04 01 48 c7 c7 a0 f2 62 85 e8 58 ae 50 02 0f 0b eb df e8 ff c8 1c ff c6 05 0a f0 99 04 01 48 c7 c7 e0 f1 62 85 e8 3c ae 50 02 <0f> 0b eb c3 e8 e3 c8 1c ff c6 05 ef ef 99 04 01 48 c7 c7 40 f2 62 [ 2139.153853][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 2139.153862][ C0] RAX: ec0269765325d000 RBX: 0000000000000002 RCX: ffff8881260a13c0 [ 2139.153870][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 2139.153876][ C0] RBP: ffffc900000079f0 R08: dffffc0000000000 R09: ffffed103ee04e93 [ 2139.153884][ C0] R10: ffffed103ee04e93 R11: 1ffff1103ee04e92 R12: ffff88811ecf9008 [ 2139.153891][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffc90000007ba0 [ 2139.153898][ C0] FS: 000055558836b500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2139.153907][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2139.153914][ C0] CR2: 00007ff4b839a58a CR3: 000000012640b000 CR4: 00000000003506b0 [ 2139.153923][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2139.153928][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2139.153935][ C0] Call Trace: [ 2139.153938][ C0] [ 2139.153942][ C0] tipc_crypto_xmit+0x1938/0x2400 [ 2139.153956][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 2139.153965][ C0] ? __copy_skb_header+0x437/0x600 [ 2139.153976][ C0] tipc_bearer_xmit_skb+0x226/0x360 [ 2139.153987][ C0] ? __skb_clone+0x47a/0x790 [ 2139.153995][ C0] ? tipc_bearer_mtu+0x160/0x160 [ 2139.154005][ C0] ? skb_clone+0x202/0x360 [ 2139.154013][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2139.154024][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2139.154033][ C0] ? _find_next_bit+0x106/0x200 [ 2139.154045][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2139.154054][ C0] call_timer_fn+0x38/0x290 [ 2139.154066][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2139.154075][ C0] __run_timers+0x639/0x9a0 [ 2139.154087][ C0] ? calc_index+0x200/0x200 [ 2139.154097][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 2139.154108][ C0] run_timer_softirq+0x6a/0xf0 [ 2139.154119][ C0] handle_softirqs+0x250/0x560 [ 2139.154131][ C0] __irq_exit_rcu+0x52/0xf0 [ 2139.154140][ C0] irq_exit_rcu+0x9/0x10 [ 2139.154149][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2139.154160][ C0] [ 2139.154163][ C0] [ 2139.154167][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2139.154177][ C0] RIP: 0010:console_unlock+0xc4e/0x1010 [ 2139.154187][ C0] Code: 38 4c 89 f6 48 81 e6 00 02 00 00 31 ff e8 4a 8c 17 00 49 81 e6 00 02 00 00 75 07 e8 fc 87 17 00 eb 06 e8 f5 87 17 00 fb 89 d8 <0a> 44 24 17 a8 01 74 0e e8 e5 87 17 00 85 db 74 19 e9 18 03 00 00 [ 2139.154195][ C0] RSP: 0018:ffffc90000b16640 EFLAGS: 00000293 [ 2139.154203][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881260a13c0 [ 2139.154209][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 2139.154215][ C0] RBP: ffffc90000b168b0 R08: 0000000000000004 R09: 0000000000000003 [ 2139.154221][ C0] R10: fffff52000162cb8 R11: 1ffff92000162cb8 R12: 0000000000000046 [ 2139.154227][ C0] R13: dffffc0000000000 R14: 0000000000000200 R15: ffffffff86a158e8 [ 2139.154239][ C0] ? vprintk_emit+0x300/0x300 [ 2139.154249][ C0] ? _raw_spin_lock+0xe0/0xe0 [ 2139.154262][ C0] ? __printk_safe_exit+0x9/0x20 [ 2139.154292][ C0] ? console_trylock+0x137/0x1a0 [ 2139.154301][ C0] ? __kasan_check_write+0x14/0x20 [ 2139.154312][ C0] ? veth_fix_features+0x48/0x90 [ 2139.154324][ C0] ? veth_get_stats64+0xc60/0xc60 [ 2139.154334][ C0] vprintk_emit+0x13f/0x300 [ 2139.154342][ C0] ? vprintk_store+0x12f0/0x12f0 [ 2139.154353][ C0] vprintk_default+0x26/0x30 [ 2139.154361][ C0] vprintk+0x7a/0x80 [ 2139.154370][ C0] _printk+0xcc/0x110 [ 2139.154381][ C0] ? load_image+0x3a0/0x3a0 [ 2139.154392][ C0] ? kernfs_add_one+0x528/0x650 [ 2139.154402][ C0] ? __kasan_check_read+0x11/0x20 [ 2139.154412][ C0] __dev_set_promiscuity+0x1d5/0x5e0 [ 2139.154425][ C0] dev_set_promiscuity+0x50/0xf0 [ 2139.154436][ C0] nbp_update_port_count+0x1b8/0x2c0 [ 2139.154448][ C0] br_add_if+0x621/0x10b0 [ 2139.154456][ C0] ? 0xffffffffa002a000 [ 2139.154466][ C0] br_add_slave+0x2c/0x40 [ 2139.154475][ C0] do_setlink+0xd6b/0x3990 [ 2139.154485][ C0] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 2139.154495][ C0] ? __stack_depot_save+0x34/0x480 [ 2139.154506][ C0] ? __kasan_slab_alloc+0x69/0xf0 [ 2139.154515][ C0] ? x64_sys_call+0x178/0x9a0 [ 2139.154524][ C0] ? do_syscall_64+0x4c/0xa0 [ 2139.154534][ C0] ? __kasan_kmalloc+0xec/0x110 [ 2139.154542][ C0] ? rtnl_newlink+0x11a/0x17b0 [ 2139.154551][ C0] ? rtnetlink_rcv_msg+0x9e4/0xb90 [ 2139.154560][ C0] ? __nla_validate_parse+0x1dd5/0x2750 [ 2139.154573][ C0] ? __nla_validate+0x60/0x60 [ 2139.154584][ C0] ? mutex_is_locked+0x12/0x40 [ 2139.154594][ C0] rtnl_newlink+0x13fa/0x17b0 [ 2139.154604][ C0] ? rtnl_newlink+0x3a1/0x17b0 [ 2139.154612][ C0] ? rtnl_setlink+0x400/0x400 [ 2139.154622][ C0] ? __kasan_check_write+0x14/0x20 [ 2139.154631][ C0] ? __switch_to+0x51d/0xe20 [ 2139.154646][ C0] ? _raw_spin_trylock_bh+0x130/0x130 [ 2139.154662][ C0] ? is_bpf_text_address+0x177/0x190 [ 2139.154674][ C0] ? __mutex_lock_slowpath+0xe/0x10 [ 2139.154684][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2139.154694][ C0] ? ns_capable+0x8c/0xf0 [ 2139.154703][ C0] ? netlink_net_capable+0x125/0x160 [ 2139.154714][ C0] ? rtnl_setlink+0x400/0x400 [ 2139.154722][ C0] rtnetlink_rcv_msg+0x9e4/0xb90 [ 2139.154732][ C0] ? rtnetlink_bind+0x80/0x80 [ 2139.154741][ C0] ? memcpy+0x56/0x70 [ 2139.154750][ C0] ? avc_has_perm_noaudit+0x2f4/0x460 [ 2139.154761][ C0] ? arch_stack_walk+0xee/0x140 [ 2139.154773][ C0] ? avc_denied+0x1b0/0x1b0 [ 2139.154782][ C0] ? stack_trace_save+0x98/0xe0 [ 2139.154792][ C0] ? avc_has_perm+0x158/0x240 [ 2139.154801][ C0] ? avc_has_perm_noaudit+0x460/0x460 [ 2139.154810][ C0] ? do_syscall_64+0x4c/0xa0 [ 2139.154819][ C0] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 2139.154831][ C0] netlink_rcv_skb+0x1e0/0x430 [ 2139.154840][ C0] ? rtnetlink_bind+0x80/0x80 [ 2139.154849][ C0] ? netlink_ack+0xb60/0xb60 [ 2139.154860][ C0] ? __netlink_lookup+0x387/0x3b0 [ 2139.154871][ C0] rtnetlink_rcv+0x1c/0x20 [ 2139.154879][ C0] netlink_unicast+0x87c/0xa40 [ 2139.154890][ C0] netlink_sendmsg+0x86a/0xb70 [ 2139.154901][ C0] ? netlink_getsockopt+0x530/0x530 [ 2139.154912][ C0] ? security_socket_sendmsg+0x82/0xa0 [ 2139.154924][ C0] __sys_sendto+0x423/0x580 [ 2139.154933][ C0] ? __ia32_sys_getpeername+0x90/0x90 [ 2139.154944][ C0] ? __fput+0x63f/0x8b0 [ 2139.154954][ C0] ? unlock_page_memcg+0x130/0x130 [ 2139.154965][ C0] ? ____fput+0x15/0x20 [ 2139.154975][ C0] __x64_sys_sendto+0xe5/0x100 [ 2139.154984][ C0] x64_sys_call+0x178/0x9a0 [ 2139.154992][ C0] do_syscall_64+0x4c/0xa0 [ 2139.155000][ C0] ? clear_bhb_loop+0x50/0xa0 [ 2139.155009][ C0] ? clear_bhb_loop+0x50/0xa0 [ 2139.155017][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2139.155027][ C0] RIP: 0033:0x7feb98dcb763 [ 2139.155035][ C0] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d e1 4d 1f 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24 [ 2139.155043][ C0] RSP: 002b:00007fff98cfdfe8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 2139.155052][ C0] RAX: ffffffffffffffda RBX: 00007feb99b1f620 RCX: 00007feb98dcb763 [ 2139.155059][ C0] RDX: 0000000000000028 RSI: 00007feb99b1f670 RDI: 0000000000000003 [ 2139.155065][ C0] RBP: 0000000000000001 R08: 00007fff98cfe004 R09: 000000000000000c [ 2139.155071][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 2139.155077][ C0] R13: 0000000000000000 R14: 00007feb99b1f670 R15: 0000000000000000 [ 2139.155085][ C0] [ 2139.155089][ C0] ---[ end trace 7e6ca3469f9e5647 ]--- [ 2139.155101][ C0] ------------[ cut here ]------------ [ 2139.155105][ C0] refcount_t: underflow; use-after-free. [ 2139.155155][ C0] WARNING: CPU: 0 PID: 31604 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 2139.155170][ C0] Modules linked in: [ 2139.155174][ C0] CPU: 0 PID: 31604 Comm: syz-executor Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 2139.155185][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2139.155190][ C0] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 2139.155202][ C0] Code: 04 01 48 c7 c7 e0 f1 62 85 e8 3c ae 50 02 0f 0b eb c3 e8 e3 c8 1c ff c6 05 ef ef 99 04 01 48 c7 c7 40 f2 62 85 e8 20 ae 50 02 <0f> 0b eb a7 e8 c7 c8 1c ff c6 05 d0 ef 99 04 01 48 c7 c7 80 f1 62 [ 2139.155209][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 2139.155217][ C0] RAX: ec0269765325d000 RBX: 0000000000000003 RCX: ffff8881260a13c0 [ 2139.155224][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 2139.155229][ C0] RBP: ffffc900000079f0 R08: dffffc0000000000 R09: ffffed103ee04e93 [ 2139.155236][ C0] R10: ffffed103ee04e93 R11: 1ffff1103ee04e92 R12: ffff88811ecf9008 [ 2139.155243][ C0] R13: dffffc0000000000 R14: 0000000000000003 R15: 00000000c0000000 [ 2139.155250][ C0] FS: 000055558836b500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2139.155258][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2139.155265][ C0] CR2: 00007ff4b839a58a CR3: 000000012640b000 CR4: 00000000003506b0 [ 2139.155278][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2139.155284][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2139.155290][ C0] Call Trace: [ 2139.155293][ C0] [ 2139.155296][ C0] tipc_crypto_xmit+0x1a82/0x2400 [ 2139.155308][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 2139.155318][ C0] ? __copy_skb_header+0x437/0x600 [ 2139.155327][ C0] tipc_bearer_xmit_skb+0x226/0x360 [ 2139.155336][ C0] ? __skb_clone+0x47a/0x790 [ 2139.155344][ C0] ? tipc_bearer_mtu+0x160/0x160 [ 2139.155354][ C0] ? skb_clone+0x202/0x360 [ 2139.155363][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2139.155373][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2139.155383][ C0] ? _find_next_bit+0x106/0x200 [ 2139.155394][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2139.155403][ C0] call_timer_fn+0x38/0x290 [ 2139.155413][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2139.155423][ C0] __run_timers+0x639/0x9a0 [ 2139.155434][ C0] ? calc_index+0x200/0x200 [ 2139.155444][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 2139.155454][ C0] run_timer_softirq+0x6a/0xf0 [ 2139.155464][ C0] handle_softirqs+0x250/0x560 [ 2139.155475][ C0] __irq_exit_rcu+0x52/0xf0 [ 2139.155484][ C0] irq_exit_rcu+0x9/0x10 [ 2139.155493][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2139.155503][ C0] [ 2139.155506][ C0] [ 2139.155509][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2139.155518][ C0] RIP: 0010:console_unlock+0xc4e/0x1010 [ 2139.155527][ C0] Code: 38 4c 89 f6 48 81 e6 00 02 00 00 31 ff e8 4a 8c 17 00 49 81 e6 00 02 00 00 75 07 e8 fc 87 17 00 eb 06 e8 f5 87 17 00 fb 89 d8 <0a> 44 24 17 a8 01 74 0e e8 e5 87 17 00 85 db 74 19 e9 18 03 00 00 [ 2139.155535][ C0] RSP: 0018:ffffc90000b16640 EFLAGS: 00000293 [ 2139.155542][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881260a13c0 [ 2139.155549][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 2139.155554][ C0] RBP: ffffc90000b168b0 R08: 0000000000000004 R09: 0000000000000003 [ 2139.155561][ C0] R10: fffff52000162cb8 R11: 1ffff92000162cb8 R12: 0000000000000046 [ 2139.155567][ C0] R13: dffffc0000000000 R14: 0000000000000200 R15: ffffffff86a158e8 [ 2139.155578][ C0] ? vprintk_emit+0x300/0x300 [ 2139.155587][ C0] ? _raw_spin_lock+0xe0/0xe0 [ 2139.155599][ C0] ? __printk_safe_exit+0x9/0x20 [ 2139.155608][ C0] ? console_trylock+0x137/0x1a0 [ 2139.155617][ C0] ? __kasan_check_write+0x14/0x20 [ 2139.155627][ C0] ? veth_fix_features+0x48/0x90 [ 2139.155637][ C0] ? veth_get_stats64+0xc60/0xc60 [ 2139.155647][ C0] vprintk_emit+0x13f/0x300 [ 2139.155656][ C0] ? vprintk_store+0x12f0/0x12f0 [ 2139.155665][ C0] vprintk_default+0x26/0x30 [ 2139.155674][ C0] vprintk+0x7a/0x80 [ 2139.155682][ C0] _printk+0xcc/0x110 [ 2139.155692][ C0] ? load_image+0x3a0/0x3a0 [ 2139.155702][ C0] ? kernfs_add_one+0x528/0x650 [ 2139.155712][ C0] ? __kasan_check_read+0x11/0x20 [ 2139.155721][ C0] __dev_set_promiscuity+0x1d5/0x5e0 [ 2139.155733][ C0] dev_set_promiscuity+0x50/0xf0 [ 2139.155743][ C0] nbp_update_port_count+0x1b8/0x2c0 [ 2139.155753][ C0] br_add_if+0x621/0x10b0 [ 2139.155762][ C0] ? 0xffffffffa002a000 [ 2139.155770][ C0] br_add_slave+0x2c/0x40 [ 2139.155779][ C0] do_setlink+0xd6b/0x3990 [ 2139.155788][ C0] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 2139.155798][ C0] ? __stack_depot_save+0x34/0x480 [ 2139.155808][ C0] ? __kasan_slab_alloc+0x69/0xf0 [ 2139.155816][ C0] ? x64_sys_call+0x178/0x9a0 [ 2139.155825][ C0] ? do_syscall_64+0x4c/0xa0 [ 2139.155833][ C0] ? __kasan_kmalloc+0xec/0x110 [ 2139.155842][ C0] ? rtnl_newlink+0x11a/0x17b0 [ 2139.155850][ C0] ? rtnetlink_rcv_msg+0x9e4/0xb90 [ 2139.155860][ C0] ? __nla_validate_parse+0x1dd5/0x2750 [ 2139.155871][ C0] ? __nla_validate+0x60/0x60 [ 2139.155882][ C0] ? mutex_is_locked+0x12/0x40 [ 2139.155891][ C0] rtnl_newlink+0x13fa/0x17b0 [ 2139.155901][ C0] ? rtnl_newlink+0x3a1/0x17b0 [ 2139.155909][ C0] ? rtnl_setlink+0x400/0x400 [ 2139.155918][ C0] ? __kasan_check_write+0x14/0x20 [ 2139.155927][ C0] ? __switch_to+0x51d/0xe20 [ 2139.155941][ C0] ? _raw_spin_trylock_bh+0x130/0x130 [ 2139.155957][ C0] ? is_bpf_text_address+0x177/0x190 [ 2139.155967][ C0] ? __mutex_lock_slowpath+0xe/0x10 [ 2139.155977][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2139.155988][ C0] ? ns_capable+0x8c/0xf0 [ 2139.155996][ C0] ? netlink_net_capable+0x125/0x160 [ 2139.156006][ C0] ? rtnl_setlink+0x400/0x400 [ 2139.156014][ C0] rtnetlink_rcv_msg+0x9e4/0xb90 [ 2139.156024][ C0] ? rtnetlink_bind+0x80/0x80 [ 2139.156033][ C0] ? memcpy+0x56/0x70 [ 2139.156042][ C0] ? avc_has_perm_noaudit+0x2f4/0x460 [ 2139.156050][ C0] ? arch_stack_walk+0xee/0x140 [ 2139.156061][ C0] ? avc_denied+0x1b0/0x1b0 [ 2139.156070][ C0] ? stack_trace_save+0x98/0xe0 [ 2139.156080][ C0] ? avc_has_perm+0x158/0x240 [ 2139.156089][ C0] ? avc_has_perm_noaudit+0x460/0x460 [ 2139.156098][ C0] ? do_syscall_64+0x4c/0xa0 [ 2139.156106][ C0] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 2139.156117][ C0] netlink_rcv_skb+0x1e0/0x430 [ 2139.156126][ C0] ? rtnetlink_bind+0x80/0x80 [ 2139.156135][ C0] ? netlink_ack+0xb60/0xb60 [ 2139.156146][ C0] ? __netlink_lookup+0x387/0x3b0 [ 2139.156156][ C0] rtnetlink_rcv+0x1c/0x20 [ 2139.156164][ C0] netlink_unicast+0x87c/0xa40 [ 2139.156175][ C0] netlink_sendmsg+0x86a/0xb70 [ 2139.156186][ C0] ? netlink_getsockopt+0x530/0x530 [ 2139.156197][ C0] ? security_socket_sendmsg+0x82/0xa0 [ 2139.156208][ C0] __sys_sendto+0x423/0x580 [ 2139.156217][ C0] ? __ia32_sys_getpeername+0x90/0x90 [ 2139.156227][ C0] ? __fput+0x63f/0x8b0 [ 2139.156237][ C0] ? unlock_page_memcg+0x130/0x130 [ 2139.156246][ C0] ? ____fput+0x15/0x20 [ 2139.156255][ C0] __x64_sys_sendto+0xe5/0x100 [ 2139.156264][ C0] x64_sys_call+0x178/0x9a0 [ 2139.156279][ C0] do_syscall_64+0x4c/0xa0 [ 2139.156287][ C0] ? clear_bhb_loop+0x50/0xa0 [ 2139.156295][ C0] ? clear_bhb_loop+0x50/0xa0 [ 2139.156304][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2139.156313][ C0] RIP: 0033:0x7feb98dcb763 [ 2139.156320][ C0] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d e1 4d 1f 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24 [ 2139.156328][ C0] RSP: 002b:00007fff98cfdfe8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 2139.156338][ C0] RAX: ffffffffffffffda RBX: 00007feb99b1f620 RCX: 00007feb98dcb763 [ 2139.156344][ C0] RDX: 0000000000000028 RSI: 00007feb99b1f670 RDI: 0000000000000003 [ 2139.156350][ C0] RBP: 0000000000000001 R08: 00007fff98cfe004 R09: 000000000000000c [ 2139.156356][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 2139.156362][ C0] R13: 0000000000000000 R14: 00007feb99b1f670 R15: 0000000000000000 [ 2139.156370][ C0] [ 2139.156373][ C0] ---[ end trace 7e6ca3469f9e5648 ]--- [ 2139.461170][ C0] ------------[ cut here ]------------ [ 2139.461179][ C0] refcount_t: saturated; leaking memory. [ 2139.461245][ C0] WARNING: CPU: 0 PID: 31604 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 2139.461268][ C0] Modules linked in: [ 2139.461276][ C0] CPU: 0 PID: 31604 Comm: syz-executor Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 2139.461287][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2139.461293][ C0] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 2139.461306][ C0] Code: 04 01 48 c7 c7 80 f1 62 85 e8 04 ae 50 02 0f 0b eb 8b e8 ab c8 1c ff c6 05 b5 ef 99 04 01 48 c7 c7 80 f1 62 85 e8 e8 ad 50 02 <0f> 0b e9 6c ff ff ff e8 8c c8 1c ff c6 05 9a ef 99 04 01 48 c7 c7 [ 2139.461315][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 2139.461323][ C0] RAX: ec0269765325d000 RBX: 0000000000000001 RCX: ffff8881260a13c0 [ 2139.461331][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 2139.461337][ C0] RBP: ffffc900000079f0 R08: dffffc0000000000 R09: ffffed103ee04e93 [ 2139.461344][ C0] R10: ffffed103ee04e93 R11: 1ffff1103ee04e92 R12: ffff88811ecf9008 [ 2139.461352][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90000007ba0 [ 2139.461359][ C0] FS: 000055558836b500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2139.461367][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2139.461374][ C0] CR2: 00007ff4b839a58a CR3: 000000012640b000 CR4: 00000000003506b0 [ 2139.461384][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2139.461389][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2139.461395][ C0] Call Trace: [ 2139.461398][ C0] [ 2139.461402][ C0] tipc_crypto_xmit+0x1938/0x2400 [ 2139.461417][ C0] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 2139.461427][ C0] ? __copy_skb_header+0x437/0x600 [ 2139.461444][ C0] tipc_bearer_xmit_skb+0x226/0x360 [ 2139.461454][ C0] ? __skb_clone+0x47a/0x790 [ 2139.461463][ C0] ? tipc_bearer_mtu+0x160/0x160 [ 2139.461472][ C0] ? skb_clone+0x202/0x360 [ 2139.461482][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2139.461492][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2139.461502][ C0] ? _find_next_bit+0x106/0x200 [ 2139.461513][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2139.461522][ C0] call_timer_fn+0x38/0x290 [ 2139.461534][ C0] ? tipc_disc_init_msg+0x600/0x600 [ 2139.461544][ C0] __run_timers+0x639/0x9a0 [ 2139.461555][ C0] ? calc_index+0x200/0x200 [ 2139.461565][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 2139.461576][ C0] run_timer_softirq+0x6a/0xf0 [ 2139.461586][ C0] handle_softirqs+0x250/0x560 [ 2139.461598][ C0] __irq_exit_rcu+0x52/0xf0 [ 2139.461608][ C0] irq_exit_rcu+0x9/0x10 [ 2139.461617][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2139.461628][ C0] [ 2139.461631][ C0] [ 2139.461635][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2139.461645][ C0] RIP: 0010:console_unlock+0xc4e/0x1010 [ 2139.461655][ C0] Code: 38 4c 89 f6 48 81 e6 00 02 00 00 31 ff e8 4a 8c 17 00 49 81 e6 00 02 00 00 75 07 e8 fc 87 17 00 eb 06 e8 f5 87 17 00 fb 89 d8 <0a> 44 24 17 a8 01 74 0e e8 e5 87 17 00 85 db 74 19 e9 18 03 00 00 [ 2139.461663][ C0] RSP: 0018:ffffc90000b16640 EFLAGS: 00000293 [ 2139.461671][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881260a13c0 [ 2139.461677][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 2139.461683][ C0] RBP: ffffc90000b168b0 R08: 0000000000000004 R09: 0000000000000003 [ 2139.461689][ C0] R10: fffff52000162cb8 R11: 1ffff92000162cb8 R12: 00000000000000df [ 2139.461696][ C0] R13: dffffc0000000000 R14: 0000000000000200 R15: ffffffff86a158e8 [ 2139.461708][ C0] ? vprintk_emit+0x300/0x300 [ 2139.461718][ C0] ? _raw_spin_lock+0xe0/0xe0 [ 2139.461731][ C0] ? __printk_safe_exit+0x9/0x20 [ 2139.461740][ C0] ? console_trylock+0x137/0x1a0 [ 2139.461749][ C0] ? __kasan_check_write+0x14/0x20 [ 2139.461761][ C0] ? veth_fix_features+0x48/0x90 [ 2139.461772][ C0] ? veth_get_stats64+0xc60/0xc60 [ 2139.461782][ C0] vprintk_emit+0x13f/0x300 [ 2139.461790][ C0] ? vprintk_store+0x12f0/0x12f0 [ 2139.461800][ C0] vprintk_default+0x26/0x30 [ 2139.461809][ C0] vprintk+0x7a/0x80 [ 2139.461817][ C0] _printk+0xcc/0x110 [ 2139.461828][ C0] ? load_image+0x3a0/0x3a0 [ 2139.461838][ C0] ? kernfs_add_one+0x528/0x650 [ 2139.461849][ C0] ? __kasan_check_read+0x11/0x20 [ 2139.461858][ C0] __dev_set_promiscuity+0x1d5/0x5e0 [ 2139.461871][ C0] dev_set_promiscuity+0x50/0xf0 [ 2139.461881][ C0] nbp_update_port_count+0x1b8/0x2c0 [ 2139.461892][ C0] br_add_if+0x621/0x10b0 [ 2139.461901][ C0] ? 0xffffffffa002a000 [ 2139.461910][ C0] br_add_slave+0x2c/0x40 [ 2139.461919][ C0] do_setlink+0xd6b/0x3990 [ 2139.461929][ C0] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 2139.461939][ C0] ? __stack_depot_save+0x34/0x480 [ 2139.461950][ C0] ? __kasan_slab_alloc+0x69/0xf0 [ 2139.461959][ C0] ? x64_sys_call+0x178/0x9a0 [ 2139.461969][ C0] ? do_syscall_64+0x4c/0xa0 [ 2139.461978][ C0] ? __kasan_kmalloc+0xec/0x110 [ 2139.461986][ C0] ? rtnl_newlink+0x11a/0x17b0 [ 2139.461995][ C0] ? rtnetlink_rcv_msg+0x9e4/0xb90 [ 2139.462004][ C0] ? __nla_validate_parse+0x1dd5/0x2750 [ 2139.462020][ C0] ? __nla_validate+0x60/0x60 [ 2139.462031][ C0] ? mutex_is_locked+0x12/0x40 [ 2139.462041][ C0] rtnl_newlink+0x13fa/0x17b0 [ 2139.462051][ C0] ? rtnl_newlink+0x3a1/0x17b0 [ 2139.462059][ C0] ? rtnl_setlink+0x400/0x400 [ 2139.462068][ C0] ? __kasan_check_write+0x14/0x20 [ 2139.462078][ C0] ? __switch_to+0x51d/0xe20 [ 2139.462093][ C0] ? _raw_spin_trylock_bh+0x130/0x130 [ 2139.462109][ C0] ? is_bpf_text_address+0x177/0x190 [ 2139.462120][ C0] ? __mutex_lock_slowpath+0xe/0x10 [ 2139.462130][ C0] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2139.462141][ C0] ? ns_capable+0x8c/0xf0 [ 2139.462150][ C0] ? netlink_net_capable+0x125/0x160 [ 2139.462160][ C0] ? rtnl_setlink+0x400/0x400 [ 2139.462168][ C0] rtnetlink_rcv_msg+0x9e4/0xb90 [ 2139.462178][ C0] ? rtnetlink_bind+0x80/0x80 [ 2139.462187][ C0] ? memcpy+0x56/0x70 [ 2139.462196][ C0] ? avc_has_perm_noaudit+0x2f4/0x460 [ 2139.462206][ C0] ? arch_stack_walk+0xee/0x140 [ 2139.462218][ C0] ? avc_denied+0x1b0/0x1b0 [ 2139.462227][ C0] ? stack_trace_save+0x98/0xe0 [ 2139.462242][ C0] ? avc_has_perm+0x158/0x240 [ 2139.462251][ C0] ? avc_has_perm_noaudit+0x460/0x460 [ 2139.462260][ C0] ? do_syscall_64+0x4c/0xa0 [ 2139.462269][ C0] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 2139.462280][ C0] netlink_rcv_skb+0x1e0/0x430 [ 2139.462290][ C0] ? rtnetlink_bind+0x80/0x80 [ 2139.462299][ C0] ? netlink_ack+0xb60/0xb60 [ 2139.462309][ C0] ? __netlink_lookup+0x387/0x3b0 [ 2139.462320][ C0] rtnetlink_rcv+0x1c/0x20 [ 2139.462328][ C0] netlink_unicast+0x87c/0xa40 [ 2139.462339][ C0] netlink_sendmsg+0x86a/0xb70 [ 2139.462350][ C0] ? netlink_getsockopt+0x530/0x530 [ 2139.462360][ C0] ? security_socket_sendmsg+0x82/0xa0 [ 2139.462372][ C0] __sys_sendto+0x423/0x580 [ 2139.462381][ C0] ? __ia32_sys_getpeername+0x90/0x90 [ 2139.462392][ C0] ? __fput+0x63f/0x8b0 [ 2139.462402][ C0] ? unlock_page_memcg+0x130/0x130 [ 2139.462413][ C0] ? ____fput+0x15/0x20 [ 2139.462422][ C0] __x64_sys_sendto+0xe5/0x100 [ 2139.462431][ C0] x64_sys_call+0x178/0x9a0 [ 2139.462440][ C0] do_syscall_64+0x4c/0xa0 [ 2139.462448][ C0] ? clear_bhb_loop+0x50/0xa0 [ 2139.462456][ C0] ? clear_bhb_loop+0x50/0xa0 [ 2139.462465][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2139.462474][ C0] RIP: 0033:0x7feb98dcb763 [ 2139.462484][ C0] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d e1 4d 1f 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24 [ 2139.462492][ C0] RSP: 002b:00007fff98cfdfe8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 2139.462502][ C0] RAX: ffffffffffffffda RBX: 00007feb99b1f620 RCX: 00007feb98dcb763 [ 2139.462508][ C0] RDX: 0000000000000028 RSI: 00007feb99b1f670 RDI: 0000000000000003 [ 2139.462514][ C0] RBP: 0000000000000001 R08: 00007fff98cfe004 R09: 000000000000000c [ 2139.462520][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 2139.462526][ C0] R13: 0000000000000000 R14: 00007feb99b1f670 R15: 0000000000000000 [ 2139.462534][ C0] [ 2139.462537][ C0] ---[ end trace 7e6ca3469f9e5649 ]--- [ 2141.557502][T31605] bridge0: port 1(bridge_slave_0) entered blocking state [ 2141.564534][T31605] bridge0: port 1(bridge_slave_0) entered disabled state [ 2141.572200][T31605] device bridge_slave_0 entered promiscuous mode [ 2141.582688][T31604] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.589789][T31604] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.597234][T31604] device bridge_slave_1 entered promiscuous mode [ 2141.607363][T31605] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.614674][T31605] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.622009][T31605] device bridge_slave_1 entered promiscuous mode [ 2141.642878][T31606] bridge0: port 1(bridge_slave_0) entered blocking state [ 2141.649915][T31606] bridge0: port 1(bridge_slave_0) entered disabled state [ 2141.657463][T31606] device bridge_slave_0 entered promiscuous mode [ 2141.665830][T31606] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.673023][T31606] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.680568][T31606] device bridge_slave_1 entered promiscuous mode [ 2141.751688][T31607] bridge0: port 1(bridge_slave_0) entered blocking state [ 2141.758860][T31607] bridge0: port 1(bridge_slave_0) entered disabled state [ 2141.766583][T31607] device bridge_slave_0 entered promiscuous mode [ 2141.784138][T31607] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.791425][T31607] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.798906][T31607] device bridge_slave_1 entered promiscuous mode [ 2141.925471][T14443] tipc: Disabling bearer [ 2141.930867][T14443] tipc: Disabling bearer [ 2141.935919][T14443] tipc: Left network mode [ 2141.952204][T31606] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.959268][T31606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2141.982555][T14443] tipc: Disabling bearer [ 2141.988084][T14443] tipc: Disabling bearer [ 2141.993158][T14443] tipc: Left network mode [ 2142.006109][T14443] tipc: Disabling bearer [ 2142.011150][T14443] tipc: Left network mode [ 2142.023839][T14443] tipc: Disabling bearer [ 2142.029135][T14443] tipc: Disabling bearer [ 2142.034774][T14443] tipc: Left network mode [ 2142.042223][T31607] bridge0: port 2(bridge_slave_1) entered blocking state [ 2142.049271][T31607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2142.056599][T31607] bridge0: port 1(bridge_slave_0) entered blocking state [ 2142.063638][T31607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2142.074291][T14443] tipc: Left network mode [ 2142.104769][ T2196] bridge0: port 2(bridge_slave_1) entered disabled state [ 2142.113088][ T2196] bridge0: port 1(bridge_slave_0) entered disabled state [ 2142.120543][ T2196] bridge0: port 2(bridge_slave_1) entered disabled state [ 2142.128853][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2142.136576][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2142.143995][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2142.152557][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2142.160863][ T2196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2142.167912][ T2196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2142.176980][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2142.185440][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state [ 2142.192481][ T2196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2142.210626][T14443] ------------[ cut here ]------------ [ 2142.216106][T14443] refcount_t: saturated; leaking memory. [ 2142.221845][T14443] WARNING: CPU: 0 PID: 14443 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 2142.231495][T14443] Modules linked in: [ 2142.235376][T14443] CPU: 0 PID: 14443 Comm: kworker/u4:5 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 2142.247137][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2142.257394][T14443] Workqueue: netns cleanup_net [ 2142.262172][T14443] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 2142.268510][T14443] Code: 04 01 48 c7 c7 40 f2 62 85 e8 20 ae 50 02 0f 0b eb a7 e8 c7 c8 1c ff c6 05 d0 ef 99 04 01 48 c7 c7 80 f1 62 85 e8 04 ae 50 02 <0f> 0b eb 8b e8 ab c8 1c ff c6 05 b5 ef 99 04 01 48 c7 c7 80 f1 62 [ 2142.288249][T14443] RSP: 0000:ffffc90000fc77c0 EFLAGS: 00010246 [ 2142.294342][T14443] RAX: 96d9117951000d00 RBX: 0000000000000000 RCX: ffff88810fc1a780 [ 2142.302293][T14443] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2142.310391][T14443] RBP: ffffc90000fc77d0 R08: dffffc0000000000 R09: fffff520001f8e45 [ 2142.318391][T14443] R10: fffff520001f8e45 R11: 1ffff920001f8e44 R12: 1ffff920001f8f04 [ 2142.326609][T14443] R13: ffff88811fa2808c R14: 0000000000000000 R15: 0000000000000cc0 [ 2142.334606][T14443] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2142.343657][T14443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2142.350318][T14443] CR2: 00007ffe9cbb5f28 CR3: 000000010d2bb000 CR4: 00000000003506a0 [ 2142.358303][T14443] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2142.366449][T14443] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2142.374653][T14443] Call Trace: [ 2142.378049][T14443] [ 2142.380977][T14443] nf_nat_masq_schedule+0x439/0x4c0 [ 2142.386164][T14443] ? __kasan_check_write+0x14/0x20 [ 2142.391336][T14443] ? nf_nat_masq_schedule+0x4c0/0x4c0 [ 2142.396796][T14443] ? masq_device_event+0xd0/0xd0 [ 2142.401720][T14443] ? nfqnl_rcv_dev_event+0x441/0x470 [ 2142.407118][T14443] ? __kasan_check_read+0x11/0x20 [ 2142.412252][T14443] masq_device_event+0x9b/0xd0 [ 2142.417269][T14443] raw_notifier_call_chain+0x90/0x100 [ 2142.422647][T14443] dev_close_many+0x32d/0x4d0 [ 2142.427383][T14443] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 2142.434210][T14443] ? __dev_open+0x4c0/0x4c0 [ 2142.438701][T14443] ? _raw_spin_lock_irq+0x8f/0xe0 [ 2142.443778][T14443] ? _raw_spin_lock_irqsave+0x110/0x110 [ 2142.449330][T14443] ? __kasan_check_read+0x11/0x20 [ 2142.454457][T14443] unregister_netdevice_many+0x44c/0x1990 [ 2142.460174][T14443] ? alloc_netdev_mqs+0xc90/0xc90 [ 2142.465263][T14443] ? unregister_netdevice_queue+0x1aa/0x360 [ 2142.471265][T14443] ? list_netdevice+0x4c0/0x4c0 [ 2142.476104][T14443] ip6gre_exit_batch_net+0x5a5/0x5f0 [ 2142.481394][T14443] ? ip6gre_init_net+0x340/0x340 [ 2142.486341][T14443] ? ip6gre_init_net+0x340/0x340 [ 2142.491386][T14443] cleanup_net+0x602/0xad0 [ 2142.495832][T14443] ? ops_init+0x4a0/0x4a0 [ 2142.500173][T14443] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 2142.505541][T14443] process_one_work+0x6be/0xba0 [ 2142.510479][T14443] worker_thread+0xa59/0x1200 [ 2142.515168][T14443] kthread+0x411/0x500 [ 2142.519268][T14443] ? worker_clr_flags+0x190/0x190 [ 2142.524437][T14443] ? kthread_blkcg+0xd0/0xd0 [ 2142.529140][T14443] ret_from_fork+0x1f/0x30 [ 2142.533553][T14443] [ 2142.536599][T14443] ---[ end trace 7e6ca3469f9e564a ]--- [ 2142.603310][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2142.612314][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2142.627513][T31606] device veth0_vlan entered promiscuous mode [ 2142.642774][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2142.651433][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2142.659748][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2142.667833][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2142.675324][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2142.684024][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2142.692447][ T2196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2142.699496][ T2196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2142.706949][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2142.715398][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2142.723652][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state [ 2142.730675][ T2196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2142.738350][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2142.746830][ T2196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2142.753880][ T2196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2142.761282][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2142.769531][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state [ 2142.776545][ T2196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2142.784061][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2142.792055][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2142.800133][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2142.807739][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2142.815139][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2142.823407][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2142.831597][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2142.839502][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2142.847088][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2142.866926][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2142.875227][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2142.883442][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2142.891100][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2142.898489][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2142.907090][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2142.915382][ T2196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2142.922447][ T2196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2142.929921][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2142.938025][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2142.946466][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2142.965969][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2142.974236][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2142.982314][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2142.991016][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2142.999574][ T2196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2143.006627][ T2196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2143.014130][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2143.022770][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2143.030984][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state [ 2143.037989][ T2196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2143.045501][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2143.054087][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2143.062306][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state [ 2143.069347][ T2196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2143.076851][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2143.104685][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2143.112824][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2143.129520][T31607] device veth0_vlan entered promiscuous mode [ 2143.151872][T31606] device veth1_macvtap entered promiscuous mode [ 2143.160003][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2143.168183][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2143.176700][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2143.184535][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2143.192862][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2143.201420][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2143.209877][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2143.218050][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2143.226511][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2143.234400][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2143.242713][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2143.250821][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2143.258975][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2143.267170][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2143.275685][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2143.284110][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2143.292008][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2143.299905][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2143.307489][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2143.319848][T31607] device veth1_macvtap entered promiscuous mode [ 2143.337056][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2143.345500][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2143.354166][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2143.362739][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2143.371801][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2143.380342][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2143.390595][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2143.399076][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2143.410235][T31605] device veth0_vlan entered promiscuous mode [ 2143.416639][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2143.425055][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2143.446062][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2143.454688][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2143.469536][T31604] device veth0_vlan entered promiscuous mode [ 2143.479013][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2143.487439][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2143.495518][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2143.503190][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2143.510951][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2143.518643][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2143.526990][T31600] device veth0_vlan entered promiscuous mode [ 2143.540525][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2143.614762][ T30] kauditd_printk_skb: 273 callbacks suppressed [ 2143.614778][ T30] audit: type=1400 audit(2000000547.071:41376): avc: denied { mounton } for pid=31606 comm="syz-executor" path="/root/syzkaller.UTIxXO/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2143.625218][T31600] device veth1_macvtap entered promiscuous mode [ 2143.691598][ T30] audit: type=1400 audit(2000000547.071:41377): avc: denied { mounton } for pid=31606 comm="syz-executor" path="/root/syzkaller.UTIxXO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2143.734207][T31604] device veth1_macvtap entered promiscuous mode [ 2143.748420][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2143.756470][ T30] audit: type=1400 audit(2000000547.082:41378): avc: denied { mounton } for pid=31606 comm="syz-executor" path="/root/syzkaller.UTIxXO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=109342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2143.757083][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2143.784413][ T30] audit: type=1400 audit(2000000547.104:41379): avc: denied { mounton } for pid=31607 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2143.793490][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2143.815928][ T30] audit: type=1400 audit(2000000547.104:41380): avc: denied { mounton } for pid=31607 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2143.824422][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2143.848061][ T30] audit: type=1400 audit(2000000547.125:41381): avc: denied { write } for pid=31607 comm="syz-executor" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2143.906033][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2144.034302][T31629] sch_fq: defrate 4294967295 ignored. [ 2144.041160][T31605] device veth1_macvtap entered promiscuous mode [ 2144.084835][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2144.092864][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2144.101287][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2144.111961][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2144.120858][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2144.139258][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2144.148797][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2144.157462][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2144.165715][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2144.174206][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2144.182624][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2144.192462][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2144.201182][T20446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2144.347283][T14443] bridge0: port 1(gretap0) entered disabled state [ 2144.377468][T14443] device gretap0 left promiscuous mode [ 2144.384552][T14443] bridge0: port 1(gretap0) entered disabled state [ 2144.556384][T31640] loop7: detected capacity change from 0 to 256 [ 2144.598095][T31640] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 2144.657350][T14443] device batadv_slave_0 left promiscuous mode [ 2144.663840][T14443] bridge0: port 2(batadv_slave_0) entered disabled state [ 2144.677266][T14443] device veth0_vlan left promiscuous mode [ 2144.684055][T14443] device veth0_vlan left promiscuous mode [ 2144.690344][T14443] device veth0_vlan left promiscuous mode [ 2144.697275][T14443] device veth1_macvtap left promiscuous mode [ 2145.518148][T31661] loop7: detected capacity change from 0 to 4096 [ 2145.545443][T31661] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,inlinecrypt,min_batch_time=0x0000000000000005,max_batch_time=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 2145.816042][T21932] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 2146.040251][T21932] usb 8-1: Using ep0 maxpacket: 32 [ 2146.066266][ T30] audit: type=1326 audit(2000000549.700:41382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.0.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867f23f929 code=0x7ffc0000 [ 2146.107840][ T30] audit: type=1326 audit(2000000549.732:41383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.0.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867f23f929 code=0x7ffc0000 [ 2146.136844][ T30] audit: type=1326 audit(2000000549.732:41384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.0.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f867f23f929 code=0x7ffc0000 [ 2146.151769][T21932] usb 8-1: config 4 has an invalid interface number: 228 but max is 0 [ 2146.168677][ T30] audit: type=1326 audit(2000000549.732:41385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.0.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867f23f929 code=0x7ffc0000 [ 2146.189500][T21932] usb 8-1: config 4 has no interface number 0 [ 2146.198471][T21932] usb 8-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 202, changing to 11 [ 2146.221245][T21932] usb 8-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 50603, setting to 1024 [ 2146.242761][T21932] usb 8-1: config 4 interface 228 has no altsetting 0 [ 2146.404668][T21932] usb 8-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 2146.422396][T21932] usb 8-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 2146.430564][T21932] usb 8-1: Product: syz [ 2146.450447][T21932] usb 8-1: Manufacturer: syz [ 2146.455132][T21932] usb 8-1: SerialNumber: syz [ 2146.488504][T31661] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2146.506480][ T303] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2150.190563][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 2150.190578][ T30] audit: type=1400 audit(2000000554.131:41422): avc: denied { write } for pid=31685 comm="syz.9.10055" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2150.194109][T31688] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 2150.286065][T31694] loop7: detected capacity change from 0 to 512 [ 2150.290937][T31695] bridge0: port 3(syz_tun) entered blocking state [ 2150.299335][T31695] bridge0: port 3(syz_tun) entered disabled state [ 2150.306336][T31695] device syz_tun entered promiscuous mode [ 2150.312322][T31695] bridge0: port 3(syz_tun) entered blocking state [ 2150.318755][T31695] bridge0: port 3(syz_tun) entered forwarding state [ 2150.346220][T21932] usb 8-1: invalid MIDI in EP 0 [ 2150.360353][T21932] snd-usb-audio: probe of 8-1:4.228 failed with error -22 [ 2150.373114][T21932] usb 8-1: USB disconnect, device number 5 [ 2150.382400][T31694] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2150.403458][T31694] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2150.441721][ T30] audit: type=1400 audit(2000000554.399:41423): avc: denied { write } for pid=31693 comm="syz.7.10058" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2150.475299][ T30] audit: type=1400 audit(2000000554.399:41424): avc: denied { add_name } for pid=31693 comm="syz.7.10058" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2150.502851][ T30] audit: type=1400 audit(2000000554.399:41425): avc: denied { create } for pid=31693 comm="syz.7.10058" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2150.538993][ T30] audit: type=1400 audit(2000000554.399:41426): avc: denied { read write } for pid=31693 comm="syz.7.10058" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2150.581330][ T30] audit: type=1400 audit(2000000554.399:41427): avc: denied { open } for pid=31693 comm="syz.7.10058" path="/5/bus/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2150.605013][ T30] audit: type=1400 audit(2000000554.399:41428): avc: denied { link } for pid=31693 comm="syz.7.10058" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2150.627887][ T30] audit: type=1400 audit(2000000554.453:41429): avc: denied { bind } for pid=31712 comm="syz.0.10066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2150.653402][ T303] usb 5-1: device not accepting address 3, error -71 [ 2150.653473][ T30] audit: type=1326 audit(2000000554.485:41430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31714 comm="syz.0.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867f23f929 code=0x7ffc0000 [ 2150.684092][ T30] audit: type=1326 audit(2000000554.496:41431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31714 comm="syz.0.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867f23f929 code=0x7ffc0000 [ 2150.849165][T18684] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2150.923721][T21932] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 2150.998337][ T303] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2151.077806][T31750] serio: Serial port ptm0 [ 2151.167772][T14443] ================================================================== [ 2151.175935][T14443] BUG: KASAN: use-after-free in inet_twsk_purge+0x223/0x670 [ 2151.183206][T14443] Read of size 4 at addr ffff88811fa2808c by task kworker/u4:5/14443 [ 2151.184727][T18684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2151.191251][T14443] [ 2151.191270][T14443] CPU: 0 PID: 14443 Comm: kworker/u4:5 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 2151.191292][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2151.201156][T18684] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 2151.203312][T14443] Workqueue: netns cleanup_net [ 2151.203334][T14443] Call Trace: [ 2151.203341][T14443] [ 2151.203349][T14443] __dump_stack+0x21/0x30 [ 2151.215540][T18684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.224901][T14443] dump_stack_lvl+0xee/0x150 [ 2151.224930][T14443] ? show_regs_print_info+0x20/0x20 [ 2151.224944][T14443] ? load_image+0x3a0/0x3a0 [ 2151.224962][T14443] ? locks_free_lock_context+0x42/0x70 [ 2151.224979][T14443] print_address_description+0x7f/0x2c0 [ 2151.224993][T14443] ? inet_twsk_purge+0x223/0x670 [ 2151.225006][T14443] kasan_report+0xf1/0x140 [ 2151.225020][T14443] ? inet_twsk_purge+0x223/0x670 [ 2151.225034][T14443] kasan_check_range+0x280/0x290 [ 2151.225047][T14443] __kasan_check_read+0x11/0x20 [ 2151.225061][T14443] inet_twsk_purge+0x223/0x670 [ 2151.236028][T18684] usb 1-1: config 0 descriptor?? [ 2151.238814][T14443] ? __inet_twsk_schedule+0x130/0x130 [ 2151.238841][T14443] ? sock_release+0x111/0x140 [ 2151.326836][T14443] ? tcpv6_net_exit+0x80/0x80 [ 2151.331502][T14443] tcpv6_net_exit_batch+0x1a/0x20 [ 2151.336510][T14443] cleanup_net+0x602/0xad0 [ 2151.340909][T14443] ? ops_init+0x4a0/0x4a0 [ 2151.345218][T14443] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 2151.350574][T14443] process_one_work+0x6be/0xba0 [ 2151.355419][T14443] worker_thread+0xa59/0x1200 [ 2151.360087][T14443] kthread+0x411/0x500 [ 2151.364136][T14443] ? worker_clr_flags+0x190/0x190 [ 2151.369143][T14443] ? kthread_blkcg+0xd0/0xd0 [ 2151.373717][T14443] ret_from_fork+0x1f/0x30 [ 2151.378115][T14443] [ 2151.381112][T14443] [ 2151.383415][T14443] Allocated by task 282: [ 2151.387668][T14443] __kasan_slab_alloc+0xbd/0xf0 [ 2151.392534][T14443] slab_post_alloc_hook+0x4f/0x2b0 [ 2151.397639][T14443] kmem_cache_alloc+0xf7/0x260 [ 2151.402420][T14443] copy_net_ns+0x145/0x5c0 [ 2151.406824][T14443] create_new_namespaces+0x3a2/0x660 [ 2151.412095][T14443] unshare_nsproxy_namespaces+0x120/0x170 [ 2151.417797][T14443] ksys_unshare+0x4ac/0x7b0 [ 2151.422327][T14443] __x64_sys_unshare+0x38/0x40 [ 2151.427264][T14443] x64_sys_call+0x442/0x9a0 [ 2151.431757][T14443] do_syscall_64+0x4c/0xa0 [ 2151.436157][T14443] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2151.442047][T14443] [ 2151.444374][T14443] Freed by task 14443: [ 2151.448440][T14443] kasan_set_track+0x4a/0x70 [ 2151.453018][T14443] kasan_set_free_info+0x23/0x40 [ 2151.457939][T14443] ____kasan_slab_free+0x125/0x160 [ 2151.463043][T14443] __kasan_slab_free+0x11/0x20 [ 2151.467784][T14443] slab_free_freelist_hook+0xc2/0x190 [ 2151.473140][T14443] kmem_cache_free+0x100/0x320 [ 2151.477883][T14443] cleanup_net+0xa2d/0xad0 [ 2151.482278][T14443] process_one_work+0x6be/0xba0 [ 2151.487112][T14443] worker_thread+0xa59/0x1200 [ 2151.491778][T14443] kthread+0x411/0x500 [ 2151.495831][T14443] ret_from_fork+0x1f/0x30 [ 2151.500228][T14443] [ 2151.502541][T14443] Last potentially related work creation: [ 2151.508235][T14443] kasan_save_stack+0x3a/0x60 [ 2151.512904][T14443] __kasan_record_aux_stack+0xd2/0x100 [ 2151.518340][T14443] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2151.524126][T14443] insert_work+0x51/0x310 [ 2151.528437][T14443] __queue_work+0x8e5/0xc60 [ 2151.532922][T14443] queue_work_on+0xd2/0x140 [ 2151.537401][T14443] xfrm_policy_hash_rebuild+0x4f/0x60 [ 2151.542751][T14443] xfrm_set_spdinfo+0x3f6/0x5e0 [ 2151.547580][T14443] xfrm_user_rcv_msg+0x45c/0x6e0 [ 2151.552499][T14443] netlink_rcv_skb+0x1e0/0x430 [ 2151.557250][T14443] xfrm_netlink_rcv+0x72/0x90 [ 2151.561910][T14443] netlink_unicast+0x87c/0xa40 [ 2151.566655][T14443] netlink_sendmsg+0x86a/0xb70 [ 2151.571399][T14443] ____sys_sendmsg+0x5a2/0x8c0 [ 2151.576141][T14443] ___sys_sendmsg+0x1f0/0x260 [ 2151.580813][T14443] __x64_sys_sendmsg+0x1e2/0x2a0 [ 2151.586102][T14443] x64_sys_call+0x4b/0x9a0 [ 2151.590498][T14443] do_syscall_64+0x4c/0xa0 [ 2151.594893][T14443] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2151.600804][T14443] [ 2151.603107][T14443] Second to last potentially related work creation: [ 2151.609668][T14443] kasan_save_stack+0x3a/0x60 [ 2151.614333][T14443] __kasan_record_aux_stack+0xd2/0x100 [ 2151.619780][T14443] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2151.625702][T14443] insert_work+0x51/0x310 [ 2151.630016][T14443] __queue_work+0x8e5/0xc60 [ 2151.634506][T14443] queue_work_on+0xd2/0x140 [ 2151.638990][T14443] xfrm_hash_grow_check+0xd7/0x140 [ 2151.644080][T14443] xfrm_state_find+0x26a0/0x2a70 [ 2151.648994][T14443] xfrm_resolve_and_create_bundle+0x626/0x28d0 [ 2151.655127][T14443] xfrm_lookup_with_ifid+0xa3e/0x2120 [ 2151.660625][T14443] xfrm_lookup_route+0x3c/0x170 [ 2151.665497][T14443] ip6_dst_lookup_flow+0x9b/0xc0 [ 2151.670421][T14443] rawv6_sendmsg+0xc07/0x16d0 [ 2151.675083][T14443] inet_sendmsg+0xa5/0xc0 [ 2151.679391][T14443] ____sys_sendmsg+0x5a2/0x8c0 [ 2151.684147][T14443] ___sys_sendmsg+0x1f0/0x260 [ 2151.688816][T14443] __sys_sendmmsg+0x278/0x480 [ 2151.693475][T14443] __x64_sys_sendmmsg+0xa0/0xb0 [ 2151.698310][T14443] x64_sys_call+0x6c6/0x9a0 [ 2151.702796][T14443] do_syscall_64+0x4c/0xa0 [ 2151.707191][T14443] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2151.713064][T14443] [ 2151.715365][T14443] The buggy address belongs to the object at ffff88811fa28000 [ 2151.715365][T14443] which belongs to the cache net_namespace of size 3968 [ 2151.729740][T14443] The buggy address is located 140 bytes inside of [ 2151.729740][T14443] 3968-byte region [ffff88811fa28000, ffff88811fa28f80) [ 2151.743082][T14443] The buggy address belongs to the page: [ 2151.748702][T14443] page:ffffea00047e8a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811fa2e000 pfn:0x11fa28 [ 2151.760223][T14443] head:ffffea00047e8a00 order:3 compound_mapcount:0 compound_pincount:0 [ 2151.768524][T14443] flags: 0x4000000000010200(slab|head|zone=1) [ 2151.774586][T14443] raw: 4000000000010200 0000000000000000 0000000100000001 ffff8881001c4a80 [ 2151.783149][T14443] raw: ffff88811fa2e000 0000000080080004 00000001ffffffff 0000000000000000 [ 2151.791705][T14443] page dumped because: kasan: bad access detected [ 2151.798092][T14443] page_owner tracks the page as allocated [ 2151.803782][T14443] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 282, ts 21885865611, free_ts 21780630781 [ 2151.822771][T14443] post_alloc_hook+0x192/0x1b0 [ 2151.827523][T14443] prep_new_page+0x1c/0x110 [ 2151.832004][T14443] get_page_from_freelist+0x2cc5/0x2d50 [ 2151.837533][T14443] __alloc_pages+0x18f/0x440 [ 2151.842101][T14443] new_slab+0xa1/0x4d0 [ 2151.846147][T14443] ___slab_alloc+0x381/0x810 [ 2151.850715][T14443] __slab_alloc+0x49/0x90 [ 2151.855022][T14443] kmem_cache_alloc+0x138/0x260 [ 2151.859849][T14443] copy_net_ns+0x145/0x5c0 [ 2151.864251][T14443] create_new_namespaces+0x3a2/0x660 [ 2151.869518][T14443] unshare_nsproxy_namespaces+0x120/0x170 [ 2151.875216][T14443] ksys_unshare+0x4ac/0x7b0 [ 2151.879702][T14443] __x64_sys_unshare+0x38/0x40 [ 2151.884534][T14443] x64_sys_call+0x442/0x9a0 [ 2151.889014][T14443] do_syscall_64+0x4c/0xa0 [ 2151.893407][T14443] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2151.899281][T14443] page last free stack trace: [ 2151.904026][T14443] free_unref_page_prepare+0x542/0x550 [ 2151.909465][T14443] free_unref_page+0xa2/0x550 [ 2151.914122][T14443] free_compound_page+0x78/0xa0 [ 2151.918950][T14443] __put_compound_page+0x77/0xb0 [ 2151.923876][T14443] __put_page+0xbc/0xe0 [ 2151.928101][T14443] skb_release_data+0x3d3/0xa10 [ 2151.932931][T14443] __kfree_skb+0x50/0x70 [ 2151.937151][T14443] tcp_recvmsg_locked+0x14ac/0x2640 [ 2151.942329][T14443] tcp_recvmsg+0x21b/0x720 [ 2151.946738][T14443] inet_recvmsg+0x134/0x470 [ 2151.951218][T14443] sock_read_iter+0x2a2/0x340 [ 2151.955961][T14443] vfs_read+0x68b/0xbe0 [ 2151.960092][T14443] ksys_read+0x140/0x240 [ 2151.964322][T14443] __x64_sys_read+0x7b/0x90 [ 2151.968806][T14443] x64_sys_call+0x96d/0x9a0 [ 2151.973304][T14443] do_syscall_64+0x4c/0xa0 [ 2151.977698][T14443] [ 2151.980005][T14443] Memory state around the buggy address: [ 2151.985609][T14443] ffff88811fa27f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2151.993647][T14443] ffff88811fa28000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2152.001686][T14443] >ffff88811fa28080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2152.009722][T14443] ^ [ 2152.014029][T14443] ffff88811fa28100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2152.022075][T14443] ffff88811fa28180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2152.030115][T14443] ================================================================== [ 2152.038164][T14443] Disabling lock debugging due to kernel taint [ 2152.047495][T18684] itetech 0003:258A:6A88.0042: ignoring exceeding usage max [ 2152.055885][T18684] itetech 0003:258A:6A88.0042: ignoring exceeding usage max [ 2152.064210][T18684] itetech 0003:258A:6A88.0042: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0 [ 2152.126154][T21932] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2152.137383][T21932] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2152.147378][T21932] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2152.160476][T21932] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2152.169608][T21932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.178401][T21932] usb 8-1: config 0 descriptor?? [ 2152.200725][T16230] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2152.219379][ T303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2152.230924][ T303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2152.240902][ T303] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2152.253846][ T303] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2152.263009][ T303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.274515][T10796] usb 1-1: USB disconnect, device number 2 [ 2152.280911][ T303] usb 5-1: config 0 descriptor?? [ 2152.424367][T16230] usb 3-1: Using ep0 maxpacket: 16 [ 2152.536187][T16230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2152.547152][T16230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2152.556937][T16230] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 2152.566006][T16230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.574691][T16230] usb 3-1: config 0 descriptor?? [ 2152.621061][T21932] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 2152.628685][T21932] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 2152.636164][T21932] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 2152.643579][T21932] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 2152.650993][T21932] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 2152.658574][T21932] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 2152.667701][T21932] plantronics 0003:047F:FFFF.0043: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2152.733121][ T303] plantronics 0003:047F:FFFF.0044: unknown main item tag 0xd [ 2152.741370][ T303] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 2152.750619][ T303] plantronics 0003:047F:FFFF.0044: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2152.882003][ T26] usb 8-1: USB disconnect, device number 6 [ 2152.928437][ T303] usb 5-1: USB disconnect, device number 4 [ 2153.003046][T16230] apple 0003:05AC:024B.0045: item fetching failed at offset 2/69 [ 2153.010898][T16230] apple 0003:05AC:024B.0045: parse failed [ 2153.016656][T16230] apple: probe of 0003:05AC:024B.0045 failed with error -22 [ 2153.194898][ T303] usb 3-1: USB disconnect, device number 15