last executing test programs: 2.157564763s ago: executing program 4 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x25dfdbfb}, 0x20}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCGETA(r1, 0x5433, 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$inet_dccp(0x2, 0x6, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xd814, 0x80, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000305000000004100000000000000", @ANYRES32=r3, @ANYBLOB="00000000400002001400128009000100766574680000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.157354583s ago: executing program 4 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000001a40)={r0, &(0x7f0000001b00), 0x0}, 0x20) 2.064367113s ago: executing program 4 (id=228): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) fcntl$getflags(r0, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="020a0600060000002abd7000ffdbdf2504001743"], 0x30}}, 0x44880) r5 = syz_clone(0x9e8c0400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpgrp(r5) io_setup(0x7ff, &(0x7f0000000600)=0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f00000000c0)="01", 0x400000}]) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0xc, &(0x7f0000000b80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x800e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = msgget$private(0x0, 0x0) msgrcv(r10, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) prlimit64(r6, 0x9, 0x0, 0x0) msgsnd(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000000000000ee9f68fdc7084c3b740ea807869796c706f60f6d05316344ca55b70f38b502972f4adcaf6d735074983b72802eebde27019c1553b0106663"], 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x80000000000000}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=""/29, 0x1d) 1.497862118s ago: executing program 4 (id=234): memfd_secret(0x0) 1.466272688s ago: executing program 0 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10082, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x840000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x22) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000540)={@private2}, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000540)={@private2}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x5a) (async) connect$unix(0xffffffffffffffff, 0x0, 0x5a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000008c0)='./file1\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x3, 0x7e5, &(0x7f0000000e00)="$eJzs3U9oHOfZAPBnFNmWFT4Tvu/DNcZxJnYKNjjKSk4URA7JZjWSJ1ntit1VsCklMbUcjOUk2A3UPtTxpaWlpfTUY5pDL+2p9NJSaG9tT4X2WughEOghaWmhh5bQLTOzsiXrr23ZDuH3E9G8O/PMvM+82syzY2lmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIpDFdq40n0cxbC6fTjTWmO+25TZYvb+/Xqyab9BuRFP/FyEgcqGYd+P9bi/cX347EoerVoRgpJiNx7dH9j73wf8NDy+tvktBOG15v5pWr1y6eXVpavPwAE7kPvv3LVS9/NBrbHNnZrJV32/lcfTZL8247nZqcrD1zaqabzuTNrHum28vm0kYnq/fanfRY43g6PjV1Ms3GzrQXWrPT9WaWDlczn396olabTF8Zm8/qnW679cwrY93GqbzZzFuz5YrF4iLm+eKN+GreS3tZfS5Nz19YWjy5OqW9a5IsgsZXzfm0v/LVoace++jdD/9xYXFiq92dqE1MjI9PTIxPPjf13PO12vCaGbXbxJqIB/qm5TNoh4/gcPeGBvU/mpFHKxbidKTrfjViOjrRjrkNlg8s1/8vPvPX32/W78r6X1X5oUMHbi0+GGX9P1y9OrxR/a/63r1ng5zu11dpb9H7lbga1+JinI2lWIrFuHxf+ku2iji07W0N7Wxms5FFK/LoRjvymIt6OScdzEljKiZjMmrxepyKmehGGjORRzOy6MaZ6EYvsvId1YhOZFGPXrSjE2kci0YcjzTGYyqm4mSkkcVYnIl2LEQrZmM66uVWzseFctxP3pbX/q+/8Ys3//DR++VPazlofLMhfi+iDPr7JkHqP/dux4/hcLf6y/UfAAAA+NxKyn99L87/d8XjZWsmb2Zf2mKt4eLbew8mQwAAAOBelb/5P1RMdhWt3esG/WTXA84KAAAA2ElJeY1dEhGj8UTVWr5cqvawcwMAAAB2Rvn7/8PFZDTiejnD+T8AAAB8zrz2s0Gjusf+yM177H64fI/d7vye5Fd/i05nV3Jj/vRTyaV6EV6/9Ei13mDSL+2JiN7MwSQGNxQstzU5fO3R4vVwIzuULN/98tM91fST8vvB4ZsJrb7X/0t7q7lJkmyRwC1FAvsGe1FMhiKiehXfiSermCfPVdNzg7jBHYlHZ/JmNtZoN18Yj3p931AvO917960LX4ty97/VmtuXxPkLS4tjX3l76VyZy41iKzcuDfZ3zX0Ub8+lHIyqx/5gBOLx9e9uvKvIpTbod7Tqt7Zy/4eu7CsaQ3fQ5zfiSBVzZLSajq7e/5Giz/GxjfZ+tNq/8TV7Prz2jbVpFkejvNbk6LGycfTYOllMbJZFMRYTK7MYDMKdjcXRKmZ1FvFYRLz/5PXT//xNO8lObpXFyXvMAuBhOR+PV8erVVXo31U57xf1v9PZtTtW1Z1qze0e5ZKyly2e5LP96v6v/iZH9GNVzLHq88TwwXXqSm2dI/o7F9757eCI/uyPf/DDLx/+3U/vuq6PLIfsLddLBmNVZrF3kMW1QUhnV/Ldm5WkqqofFPM/2LDfbnMiKYbwka9eeif2X7l67ekLl86+ufjm4lsTEycna8/Was8lyeCH1y8/Mag9AKzjSByuCvmGz9jZ4Ck85QeAqnY/u9lZ9SOR/O/NPykoauLbsRTn4kR5tUFEPLF+v6Mr/gzhxBZnraMrnvByYv2zupuxuyMGsRO3Yv8c68aOrni8zC1f+P79/HkAwINwZIs6vGH9X3HufmKL8+7Vtfx4FXt8OYONazkAcH9knU+S0d43k04nn399fGpqvN47laWdduPVtJNPz2Zp3uplnRiut2azdL7T7rUb7WbReC2fzrppd2F+vt3ppTPtTjrf7uanyye/p4NHv3ezuXqrlze6882s3s3SRrvVqzd66XTebaTzCy838+6prFOu3J3PGvlM3qj38nYr7bYXOo1sLE27WbYiMJ/OWr18Ji+arXS+k8/VOzciorkwl6XTWbfRyed77WqDy33lrZl2Z67c7F/2PezRBoDPhitXr108u7S0eLlo9Pv9/uVVc7Zq/Gk7wRv3PuLGwgDwENyq0h//z+3LXnw4KQEAAAAAAAAAAAAAALe5o6v9ttPYu1nMf/r9/p1tcGSzmP71iLWLkju7inFvbBGzezBUOzxQD6RxY0e2MxTrjfO9N57Yoe0kGy9648UXL260+svXD5zaXhdb/J9yvXwAwuBS1/c+3v3z71WLXrqr3Rm687X+GBF30Vc/2SQm+g/3yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa/03AAD///H/cVg=") (async) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000008c0)='./file1\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x3, 0x7e5, &(0x7f0000000e00)="$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") openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES16=r2]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000f0000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace', 0x109d01, 0x27) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace', 0x109d01, 0x27) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.451965868s ago: executing program 4 (id=238): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) write$binfmt_aout(r1, &(0x7f0000001640)=ANY=[], 0x5ea) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r2, 0x80000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r6}, 0x18) r7 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001ec0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000001900], 0xff00, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000001865013b9a35d3ef89acbd85cdd00b2b55a800"/144]}, 0x108) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r3}, 0x20) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000800), 0x122801, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) pwrite64(r13, &(0x7f0000000600)="a4b2", 0x2, 0x10007) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x14, &(0x7f00000004c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff9}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc6, 0x0, 0x0, 0x0, 0xfffffffa}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1c, &(0x7f0000000280)=""/28, 0x41000, 0x40, '\x00', r9, 0x25, r10, 0x8, &(0x7f00000006c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x7, 0x7fffffff, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000840)=[r5, r11, r4, r2, r5, r2, r4, r12, r13], &(0x7f0000000880)=[{0x0, 0x2, 0x10}, {0x5, 0x5, 0x4, 0x3}, {0x2, 0x3, 0xe, 0xc}], 0x10, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r8, 0x0, 0x2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4810) preadv(r15, &(0x7f0000000240), 0x0, 0x0, 0x0) 1.393854919s ago: executing program 0 (id=239): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 1.114718s ago: executing program 0 (id=242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0x10, 0x2, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000300)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100003042abd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="178f08289736ee0e75", @ANYRES32=r4, @ANYBLOB="1c0012800b0001006970766c616e00000c000280060002000000000008000a00", @ANYRES32=r5, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4850) flock(0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000240), 0x0}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) 1.025366692s ago: executing program 0 (id=247): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = gettid() r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) readv(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r4, &(0x7f00000000c0)=""/4092, 0xffc) pread64(r4, &(0x7f00000013c0)=""/208, 0xd0, 0x800) read$hiddev(r4, &(0x7f0000001200)=""/246, 0xf6) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000500)=[{&(0x7f0000000040)=""/123, 0x7b}], 0x1, 0x2000000, 0x0) sendmsg$rds(r3, 0x0, 0x4004) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10000) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$pppoe(0x18, 0x1, 0x0) capset(&(0x7f0000003100)={0x20071026, r2}, &(0x7f0000003140)={0x0, 0x0, 0x9, 0xffff7fff, 0x9, 0x80000001}) connect$pppoe(r9, &(0x7f00000004c0)={0x18, 0x0, {0x1, @random="dffcc2101e34", 'vcan0\x00'}}, 0x1e) sendmmsg$sock(r9, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000880), 0x2}}], 0x34000, 0x81) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 993.973452ms ago: executing program 0 (id=248): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000200000000001c0412800b0001006d616373826300000c000280050003000d0000008d2fad9e95b901f6064bdf9f29022b383111b3a58673553cefec3c97d7cf2658af3a0feb9878572a78e75a598222773a1be0895ad0dc8198a241bf0f"], 0x3c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = gettid() r3 = syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x8002) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r4, &(0x7f00000000c0)=""/4092, 0xffc) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') sendmsg$rds(r3, &(0x7f00000030c0)={&(0x7f00000010c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001300)=""/164, 0xa4}, {&(0x7f0000001180)=""/85, 0x55}, {&(0x7f00000014c0)=""/168, 0xa8}, {&(0x7f0000001580)=""/152, 0x98}, {&(0x7f0000001100)=""/60, 0x3c}, {&(0x7f0000001640)=""/28, 0x1c}, {&(0x7f0000003180)=""/63, 0x3f}], 0x7, &(0x7f0000002f00)=[@zcopy_cookie={0x18}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001740)=""/147, 0x93}, &(0x7f0000001800), 0x32}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}, @rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001840)=""/234, 0xea}, &(0x7f0000001a80)=[{&(0x7f0000001940)=""/218, 0xda}, {&(0x7f0000001a40)=""/47, 0x2f}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x3, 0x44, 0xffff}}, @rdma_dest={0x18, 0x114, 0x2, {0x5, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001ac0)=""/235, 0xeb}, &(0x7f0000001bc0), 0x40}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0x7}, {&(0x7f0000001c00)=""/36, 0x24}, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/235, 0xeb}, {&(0x7f0000001c40)=""/130, 0x82}], 0x2, 0x8, 0x4a}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x7}, &(0x7f0000002e80)=0x7, &(0x7f0000002ec0), 0x100000000, 0x0, 0x4, 0x3, 0x0, 0xa}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xfff}], 0x1a8}, 0x4004) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10000) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$pppoe(0x18, 0x1, 0x0) capset(&(0x7f0000003100)={0x20071026, r2}, &(0x7f0000003140)={0x0, 0x0, 0x9, 0xffff7fff, 0x9, 0x80000001}) connect$pppoe(r6, &(0x7f00000004c0)={0x18, 0x0, {0x1, @random="dffcc2101e34", 'vcan0\x00'}}, 0x1e) sendmmsg$sock(r6, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000880), 0x2}}], 0x34000, 0x81) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 780.462833ms ago: executing program 2 (id=253): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000001f8c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000f00)={0x1d, r1, 0x2, {0x0, 0x1, 0x2}, 0x1}, 0x18) bind$can_j1939(r0, &(0x7f000001f900)={0x1d, r1, 0x0, {0x2, 0xf0, 0x2}, 0x2}, 0x18) 727.485233ms ago: executing program 2 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000001980)=""/4096, 0x1000}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2404c836}, 0xc094) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) syz_open_dev$usbfs(0x0, 0x201, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) socket(0x1, 0x803, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x21}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x4, 0x81, 0x68}}, 0xf0}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 696.108854ms ago: executing program 3 (id=259): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = gettid() r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) readv(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r4, &(0x7f00000000c0)=""/4092, 0xffc) pread64(r4, &(0x7f00000013c0)=""/208, 0xd0, 0x800) read$hiddev(r4, &(0x7f0000001200)=""/246, 0xf6) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000500)=[{&(0x7f0000000040)=""/123, 0x7b}], 0x1, 0x2000000, 0x0) sendmsg$rds(r3, &(0x7f00000030c0)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001300)=""/164, 0xa4}, {&(0x7f0000001180)=""/85, 0x55}, {&(0x7f00000014c0)=""/168, 0xa8}, {&(0x7f0000001580)=""/152, 0x98}, {&(0x7f0000001100)=""/60, 0x3c}, {&(0x7f0000001640)=""/28, 0x1c}, {&(0x7f0000003180)=""/63, 0x3f}], 0x7, &(0x7f0000002f00)=[@zcopy_cookie={0x18}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001740)=""/147, 0x93}, &(0x7f0000001800), 0x32}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}, @rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001840)=""/234, 0xea}, &(0x7f0000001a80)=[{&(0x7f0000001940)=""/218, 0xda}, {&(0x7f0000001a40)=""/47, 0x2f}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x3, 0x44, 0xffff}}, @rdma_dest={0x18, 0x114, 0x2, {0x5, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001ac0)=""/235, 0xeb}, &(0x7f0000001bc0), 0x40}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0x7}, {&(0x7f0000001c00)=""/36, 0x24}, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/235, 0xeb}, {&(0x7f0000001c40)=""/130, 0x82}], 0x2, 0x8, 0x4a}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x7}, &(0x7f0000002e80)=0x7, &(0x7f0000002ec0), 0x100000000, 0x0, 0x4, 0x3, 0x0, 0xa}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xfff}], 0x1a8}, 0x4004) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10000) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$pppoe(0x18, 0x1, 0x0) capset(&(0x7f0000003100)={0x20071026, r2}, &(0x7f0000003140)={0x0, 0x0, 0x9, 0xffff7fff, 0x9, 0x80000001}) connect$pppoe(r9, &(0x7f00000004c0)={0x18, 0x0, {0x1, @random="dffcc2101e34", 'vcan0\x00'}}, 0x1e) sendmmsg$sock(r9, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000880), 0x2}}], 0x34000, 0x81) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 678.383644ms ago: executing program 2 (id=261): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 675.016934ms ago: executing program 3 (id=262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000001980)=""/4096, 0x1000}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_tid_address(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2404c836}, 0xc094) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r10}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_dev$usbfs(0x0, 0x201, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) socket(0x1, 0x803, 0x0) 623.939554ms ago: executing program 2 (id=263): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="10208100", 0x40, 0x8051, &(0x7f0000000400)={0x11, 0x8100, r1}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000dca113896172a3fdbe8dba67e2c1b44a94defa68aeeecb4711c052271fc4e2dede535fabd268a70a2cc53f3865acde33688bc2aade0503cf2c13d956cd014f995b7061e101c8d596f13eddae01cf672d", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f0000000040)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000062a20000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) unshare(0x2040400) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000780)={r6, &(0x7f0000000500), &(0x7f00000005c0)=""/139}, 0x20) r7 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r10}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) 581.448185ms ago: executing program 3 (id=264): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x60}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 580.739675ms ago: executing program 3 (id=265): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000440)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000002c0)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x9, [@enum={0xc, 0x9, 0x0, 0x6, 0x4, [{0x9, 0x900000}, {0xa, 0x7}, {0xc, 0x9}, {0xb, 0x7}, {0x0, 0x5}, {0xa, 0x2}, {0x7, 0xa9c}, {0x5, 0x2}, {0x5, 0xffff}]}, @typedef={0x7}, @var={0xa, 0x0, 0x0, 0xe, 0x3}, @fwd={0x2}, @ptr={0x7, 0x0, 0x0, 0x2, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x5}, {0x0, 0x3}, {0xb, 0x2}]}, @enum={0xa, 0x3, 0x0, 0x6, 0x4, [{0xc, 0x1}, {0xf, 0xa}, {0x2}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x5f, 0x61, 0x30]}}, &(0x7f0000000f80)=""/4096, 0xf1, 0x1000, 0x0, 0xf7e, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r7 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r7, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0) r8 = open(&(0x7f0000000200)='./bus\x00', 0x44800, 0x0) r9 = dup3(r8, r7, 0x0) finit_module(r9, 0x0, 0x200000000000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011"], 0x129) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="08030000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000200008000000008000a00", @ANYRES32=r12, @ANYBLOB="140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0xaf36698d040a68eb, 0x70bd05, 0x25dfdbff, {0x0, 0x0, 0x0, r12, 0x4c00, 0x10000}}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x40) 571.712155ms ago: executing program 2 (id=267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000001080)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x2, 0x56, 0xa3, 0x5, 0x2, 0x6, 0x4, 0x2c8, 0x40, 0x38c, 0x1, 0x2, 0x38, 0x4, 0x8, 0xfffe}, [{0x5, 0x0, 0x40, 0x7ff, 0x4, 0x2000000000000000, 0x1000000, 0x2}, {0x4, 0xb1d, 0x800, 0x1, 0x2, 0x6, 0x55f, 0x73}, {0x60000000, 0x7, 0x0, 0x6f8, 0x5, 0x6, 0x10, 0x80000000}, {0x5, 0x5, 0x7, 0xffffffffffffffff, 0x10000, 0xfffffffffffffff6, 0x8, 0x4}], "41542a8ad4777e60a47b", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x62a) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 513.296825ms ago: executing program 4 (id=268): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000080)={'wlan1\x00', 0x1000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xfc}}, 0x0) timer_create(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x10727, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0xffffff2f, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x8002, 0x2, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x7, 0x0, &(0x7f00000001c0)=0x0) timer_getoverrun(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b15d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x44040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xc6ed4000) syz_open_dev$tty1(0xc, 0x4, 0x1) 508.428115ms ago: executing program 2 (id=270): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYRES64], 0x3, 0x2ab, &(0x7f0000000b80)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x3, 0x3}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121e040, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000903, r6, &(0x7f00000004c0)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r9 = dup2(r8, r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x10000, 0x9, 0x0, 0x800, r9, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x2, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000001a40)={r10, &(0x7f0000001b00), 0x0}, 0x20) 330.939127ms ago: executing program 1 (id=271): r0 = socket$inet6(0x10, 0x2, 0x6) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) 295.982107ms ago: executing program 1 (id=272): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x19, 0x9, 0xb4, 0x92, 0x0, 0x2, 0x13, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x8, 0x100, 0x9, 0x3, 0x1, 0x2, 0x0, 0x0, 0x7ff, 0x0, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='\'!m/\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000c5000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x2}}]}, 0x13c}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0x0, 0x100, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x6, 0x4) 255.447727ms ago: executing program 1 (id=273): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = gettid() r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) readv(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r4, &(0x7f00000000c0)=""/4092, 0xffc) pread64(r4, &(0x7f00000013c0)=""/208, 0xd0, 0x800) read$hiddev(r4, &(0x7f0000001200)=""/246, 0xf6) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000500)=[{&(0x7f0000000040)=""/123, 0x7b}], 0x1, 0x2000000, 0x0) sendmsg$rds(r3, &(0x7f00000030c0)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001300)=""/164, 0xa4}, {&(0x7f0000001180)=""/85, 0x55}, {&(0x7f00000014c0)=""/168, 0xa8}, {&(0x7f0000001580)=""/152, 0x98}, {&(0x7f0000001100)=""/60, 0x3c}, {&(0x7f0000001640)=""/28, 0x1c}, {&(0x7f0000003180)=""/63, 0x3f}], 0x7, &(0x7f0000002f00)=[@zcopy_cookie={0x18}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001740)=""/147, 0x93}, &(0x7f0000001800), 0x32}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}, @rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001840)=""/234, 0xea}, &(0x7f0000001a80)=[{&(0x7f0000001940)=""/218, 0xda}, {&(0x7f0000001a40)=""/47, 0x2f}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x3, 0x44, 0xffff}}, @rdma_dest={0x18, 0x114, 0x2, {0x5, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001ac0)=""/235, 0xeb}, &(0x7f0000001bc0), 0x40}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0x7}, {&(0x7f0000001c00)=""/36, 0x24}, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/235, 0xeb}, {&(0x7f0000001c40)=""/130, 0x82}], 0x2, 0x8, 0x4a}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x7}, &(0x7f0000002e80)=0x7, &(0x7f0000002ec0), 0x100000000, 0x0, 0x4, 0x3, 0x0, 0xa}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xfff}], 0x1a8}, 0x4004) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10000) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$pppoe(0x18, 0x1, 0x0) capset(&(0x7f0000003100)={0x20071026, r2}, &(0x7f0000003140)={0x0, 0x0, 0x9, 0xffff7fff, 0x9, 0x80000001}) connect$pppoe(r9, &(0x7f00000004c0)={0x18, 0x0, {0x1, @random="dffcc2101e34", 'vcan0\x00'}}, 0x1e) sendmmsg$sock(r9, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000880), 0x2}}], 0x34000, 0x81) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 254.968177ms ago: executing program 1 (id=274): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 136.046648ms ago: executing program 0 (id=275): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0xffffffff}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000380)=""/32, 0x20}, {&(0x7f0000000780)=""/198, 0xc6}], 0x5, &(0x7f0000000480)=""/62, 0x3e}, 0x10102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001f40)={&(0x7f0000000900)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x4004004) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbb2bb3b00000000000008060001080006040001aaaaaaaaaaaa0a010100aaaaaaaaaa0ce00000022095a73d6f6f910db9d6aef121cdf075aaf78490f689b4cff80cbcbc06ad9f0fc78797347f0c4e815a54059728e8e14ab0be71577b26b6dafb4620a602b34726b177f5f9b8a34b2e7201d12d5413c7424125302685e5ddced335cd640587aaf5a9f5d7147ff4ac9cd925e150ce26b0d5c041aff83bfbc34ff295cda8b2c740625f48ec3d759c6693faf0c01d9d05083ec388e8791be801f0d1ecac8d66a62129658a3d9692da2be9a4dbdc40c1ae1294bfb081d1d3d2b0d8af0e68a54f811a1ee87e442e13bff14f0449ffed41d0cf70a73e990d2b1e4de791637cd1a01a91a139f9a145"], &(0x7f0000000300)={0x1, 0x2, [0x48c, 0x2eb, 0x222, 0xa1e]}) getgroups(0x5, &(0x7f0000000880)=[0x0, 0x0, 0xee01, 0xee01, 0xffffffffffffffff]) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000b80)=[r3, 0xffffffffffffffff, r4, r5, 0x0]) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 135.506628ms ago: executing program 1 (id=276): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x60}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 134.976418ms ago: executing program 3 (id=277): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfe, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 13.353589ms ago: executing program 1 (id=278): r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r3 = dup3(r2, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r5) close(0x4) recvmmsg$unix(r3, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=279): syz_usb_connect$cdc_ecm(0x4, 0x60, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x48, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0xf3, 0xc0, 0xfc, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x60, {{0xb, 0x24, 0x6, 0x0, 0x0, "a700dd343778"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xea, 0x40, 0x1}, [@acm={0x4, 0x24, 0x2, 0xc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3b, 0xd, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x2, 0xd4}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xb, 0x9, 0x7, 0x8, 0x80}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x9, 0xe4e}]}, 0x7, [{0xda, &(0x7f0000000100)=@string={0xda, 0x3, "f6dd5bff353e085b8403a8cb1597f3c9b2928810b516e0de1e4a70e209c5736513e00ff0649f29dac7f726894578d6555d0ab2ba7c956ba8979fe70d05ccaf173f08e1c99a979fcd37eef555a8b0488e23a0c4100e2a66cfd846b841cb8b3715ab15187ccbed39dda6c0854d9a3c0a3b1aeddb4c5db8626df033a173e896c0cf85dd20b94070947f909eb37aafba25b9124bed1ca582823684183e6024138f1adf2c1daeb00595b384f5a6411dd62693b7a577b62e4b826b07603c11c2138c9cbdbc58d9b8cddaab42d675bb39db0363fd7057e52687bc82"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xe94c6393a53c18f9}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40c}}, {0xe, &(0x7f0000000300)=@string={0xe, 0x3, "a57ff872c6cd2cf096a49806"}}, {0x6a, &(0x7f0000000340)=@string={0x6a, 0x3, "a1a03b9ddbac4f1f33f11eb27a7591aaff64d71ab9f99b4372a29c6f2a2b6d61915b6aafc6c4ea07deea7fce49ea7d417b0a8cbbd68c6f939c63deb7eb8c3375fa6526f88c554879dd4557831e3db74b84825f268918f22bda3e0160e42a506718a0b98f8cb24e84"}}]}) (async, rerun: 32) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xc0, 0xb, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x4, 0x7, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x1b1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0xfd, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0x5, 0x2, 0x4, 0x40, 0xb}, 0x8, &(0x7f00000004c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1803}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1001}}, {0x73, &(0x7f00000005c0)=@string={0x73, 0x3, "8918514f8badefdeed6ad9b9f3208b07f3aef3b617c3a18f9cc73be2429860a1f070b3f27f32138e5b33246a0508dd17ebec81e5fc5dfc7ee4949c03aba7b055cade56545c09405d37c9b8ccc47bc871433c34df1d73f653e00763cf542d891ea3f194e9f5e06748f6be03006fbc13f837"}}, {0x80, &(0x7f0000000640)=@string={0x80, 0x3, "f761f1ccf55dd910c2531820643f8667d64cfbe6d7ba21c12818f0bf1c47f24847f287efb636b35ec7de947223a9dd19fb07e070b3cb0dcf556b30df98be8888b1e96ae08cb189c39133229226b442acd1325f69c2c59879ee593e6f7216189fc887f7a8092994005f798a449ced1fd21182412240cac7157830d74a2087"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc07}}]}) (async, rerun: 32) r0 = syz_usb_connect(0x5, 0x25d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x7, 0xf8, 0xee, 0x10, 0x4b3, 0x454b, 0xffd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24b, 0x1, 0x9, 0x80, 0x0, 0x3, [{{0x9, 0x4, 0xbd, 0x8a, 0xd, 0x1f, 0x85, 0x2f, 0x63, [], [{{0x9, 0x5, 0x4, 0x10, 0x0, 0x9, 0x4, 0xa2}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x4, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x7}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x5, 0x8, 0xc}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x0, 0xcd, 0x4, [@generic={0xcd, 0x7, "bf402a06aefd6e12a6bec1e3a9ef54ee4494fb30acb27e57dd4bb0015fc5206457aea3d38ef9bd880db0dedc5133cfef19a1cd9ea95e72a534011cbb9235004a91f3c8fd2fe06af44cda9b49e8859dd4569116e6b09aec0446841c474465d7595e0374f1b9fbb2bfef1bb1e3a01dfececf753022d560ad66f49d2106984b728e9985a7eba26883acce6d12580f2266de02f4ca3a909d6e069bf26ae5cdf6d7108acfc98e86eaf8ec94516d180e958baf4f297dc27704882468fab45999062cc037a7cb0ce2aaa452fbcdf6"}, @generic={0x32, 0x9, "fddcf675df4c2f618d2859c5716c222d8ad9de9c08a1900d229083dbfe0a67be599e75f1f0e478cc70fa0541ec9e4048"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0xbd, 0x1, 0x5}}, {{0x9, 0x5, 0x5, 0x4, 0x0, 0x97, 0x0, 0x11}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x2, 0x6}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x0, 0x0, 0xf7}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0xa, 0xd6, 0x4, [@generic={0x76, 0xf, "7c8792542b3a71bb421fd2bea0929709ee859aea2baeaa1fed1c867b372e6209b9f754a39175c51e8d6c785690a595f26fac91dc1b56859cd9604fc4c33f51bdaa9112e8669bdeb8f0123536a3a02440cede8d5ce3bd2b01e07690793bb90e103d265ccb7714e48a6e81e263e0da09e4ef786eef"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x0, 0x2, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xfff9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x1, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8}]}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x8, 0x3, 0x0, [@generic={0x33, 0xc, "11c26958acf3aa2290141eb4cbc3b117c186d4a8e355a1f50751dd246b12ea0ca7466657dbe8d6fce148e39e5f1c67a6d1"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x9, 0x6, 0x60}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x110, 0xf9, 0x4, 0x51, 0x40, 0xd}, 0x5, &(0x7f0000000a40)={0x5, 0xf, 0x5}, 0x4, [{0x8e, &(0x7f0000000a80)=@string={0x8e, 0x3, "3a8ce91292e9dc183a741010afaf16bb44c2602f0906b0e15be5aa650eb7cf499632045f6fc49f73c21aad51a6822b67188f59967d76bc5fc296385c0c7b118c4d3e08559762a8345fb4a7bc5ad5b4fda3282b1d6b3d5a60850ebaf759fa1b72123321620e75e3cf9fc7afb0fef51ee7fcfe44447932ffbc50284a2d2fbf051e4d16c950069f817dbef20180"}}, {0x9d, &(0x7f0000000b40)=@string={0x9d, 0x3, "79f9289b7f3d224fa6e561baf3af070e4b2593199af39401e0acbb70ec492eb2d1e6c71b4c2001f0244390111c2fb995f3b4601c7ce59784a93926508ac5ffcc52675c2385992f6527076d26000b99bb5d8b76edce3b754585ccfab7ddc041255d6f9bfab54eba39925d9fb2c9940bd191303280484310485d819bf09007fb0d5919568be97a81ae2de3bca18bcb6d41e19bc17ecdcaf032198f3c"}}, {0x63, &(0x7f0000000c00)=@string={0x63, 0x3, "4f221694a668409702e98bde0366e893196fcf27f7b1766dd3d35fb9d7f22670d8ac8a37fb42823d43a31f2b4a0e93b32edf370156069139359fa3cbf0937180fcc499d220aad5242afdc5ba3883d461f6731971cbd20470d136bbd7fdb3a5b1b1"}}, {0xff, &(0x7f0000000c80)=@string={0xff, 0x3, "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"}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000f40)={0x14, &(0x7f0000000e00)={0x20, 0xd, 0xd5, {0xd5, 0xa, "bb0ea8a60f62a4a864e9734c2e792739ea207b970f7c29b14f219b000fbdd9bfbc9be55380e42af1866a5f96520556f8b0d3800ee1642c158d29aa96e88fde8ffb753ab450dcd94cffa9039f8133bfe9730f3be2db1a716638ac3e2bb271c2f7fd092209fca312f920022253815bd4c585c2b20abda428d87f5924b9fa0719eeb69328b9300fad90499350d1c639c6fdb8e10d52cb2ff2a6eeef2cb1e96b0ba0f4f590bfd01c073f71ce127681840b51cd928847fb685ddc95841e182762c0ae5f51dd3a2e87ccb07728ee95c2aada0af4de9a"}}, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001100)={0x1c, &(0x7f0000000f80)={0x20, 0x11, 0xf0, "a57a066179c59bf0dac7b22b70da5d5aa7aece33b5d48ab4e940a598696e08e81a290ffada90443f50ecacdf3092e521051c3c5a3d41dba9bbf004866318cb05dab4ed180c40c38470cc71243aba9e79f41ebab577584363523d6406233c11d0ae8625c093217395fbb8e5b521f01783a4e1742cdbd58465ec516d0cc3c5e549980d84eb2a5b1c1d691c3455c13069bd6a8d08efa9b14a59fa04ff5f4ddce8407555006d822bb2009883c197090fadd5f1ed8a995473d756c5c5ddab4ef2e28994aedc9e9e4e04f184a0bec724f92979cf3f63eb0221bd41c35f4907b6f8b1d41eba39ba73cb3a1bb7fa7bf7efc8c910"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x8}}) (async, rerun: 64) syz_usb_connect$uac1(0x6, 0xf5, &(0x7f0000001140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x81, 0x40, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x5, 0x84, 0x3, 0x2, 0x80}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x2, 0xf9, 0x4ce, 0xb, 0xfb}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x307, 0x5, 0x2}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x5, 0x4, [0x2, 0x7, 0x5, 0x5], 0x5}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x4, "65f2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x84, 0xf8, '|~s'}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x1000, 0xf2, "f66fb7"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x0, 0x4, "62ad72"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0xe, 0x3, "a8a4583981bb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x8, 0xf8, {0x7, 0x25, 0x1, 0x0, 0x7, 0x104}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0xf32, 0x6}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x1, 0xff, "17", '^'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0x4, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xfb, 0x4, 0x77, {0x7, 0x25, 0x1, 0x2, 0x2, 0x5}}}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x250, 0x2, 0x4e, 0x1, 0x10, 0x5}, 0xb0, &(0x7f0000001280)={0x5, 0xf, 0xb0, 0x1, [@generic={0xab, 0x10, 0x3, "97fa0a954ce4180009fe92beb3704ac36c391c0549bb3494959e2bffd8894bf59e58ea0c10a8a2b190685317287d54e63b23786486250dbb2a5a351e0377ef149841ba93d5178f00cdde716e69523554e3cb8a6b6b5681a73f7850394326b2bb2acbd9960a8f3a10e06a86a17ca0bcda467a4935970571a10a0c36dfa6a5d71b2aa53a036177fa581ac0159e9562d4c78b872869782d2a740eab594b169dbdb3fc13c842c688e8b0"}]}, 0x9, [{0xe4, &(0x7f0000001340)=@string={0xe4, 0x3, "9e9842e591b6f9561f458c851b0cb45a76de7de5898f2e8f08c51c47cdc00fcf72cbf0be64fd2bec53396460a5ecb548fbf45aa39c7765df9852ada4078556462d1d49768ffd6adb5af95834954df77d20ce91e27ff2fe0fcd1b682b750d807d7700ed3192c371f713835180969ee1c316882adeda9086a3207ba500d690f19d01d5ebad5c71bd4158f5e01a844a4ac3568fed391fba24ea3cef6006d6b3928ba068f27b8c062714898483dfbcf0cba2251afd11be81da2341d1e15bc745d65c266c5732eafc98fd587d69ce1934b6ffefdd30edbfabe20a2815de773a8f148183a5"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0xc01}}, {0x50, &(0x7f0000001480)=@string={0x50, 0x3, "4e1f50c43da51b8c65611f1750888ce3d20f65b0105780583f22e886437edcb4f131c64a13f0981dea05e2ff4ef0c8d92b124a893e4f70e043c241c61d018afe07598098a52d8a7e3ec43658d10f"}}, {0xf0, &(0x7f0000001500)=@string={0xf0, 0x3, "b1a0217250c96cc3bd5735ada30a0f10f976468a4eef187605e95f0502902e1bdc9452d63e7c7df02c6496aaf38b48c364bbca753fbf790587f711910eb24ee647e9a067d6e1ef586a91857b51578ef1e663893dda7e628ba65e0a410d5eab0b681f73a78274f6e94eb11ee0cb92a75b133762fc10d8ea40159283159d7061166692531a17083d0eb7d7700c5aa0cf2151c5c4423ffaa53aaee8e5bce641b20ae52a00a85245d1f0c6536f13963e0604951be6c41535b028e61bc7722d83a155a5a8083086f7bce3c756c9d8c527f9c120dadb311663ce5cf866ae057e3191eda0908d39ceb4ef76840a5a27a77f"}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0xe8b6}}, {0xb3, &(0x7f0000001680)=@string={0xb3, 0x3, "7b5aacadb4e9b41651557417801673c8acaea93b5bd840484638bb916e7b12b7eaa5f95979dc656d0c85b649ab646a025bbb8e547a2f736aaccd3fec57b67ec3fa49daa18d3dde3bc188aa17368d01a79ebc0e2fda193a455abd85fe93a08e05dbccd9f901f2998083c404b7dd93ee4c101f5b0168f5c081cffdc466121ab37f33789e91712dab9dab5d895dd7469d4c3dd0f63d7321b4fd3bfd308f0369073005089ad364206377300ddf265a45c728c9"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x44d}}]}) (rerun: 64) syz_usb_connect$cdc_ecm(0x5, 0x81, &(0x7f0000001880)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0xff, 0xb0, 0x4, [{{0x9, 0x4, 0x0, 0x2c, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7ff, 0x401, 0x6}, [@country_functional={0x12, 0x24, 0x7, 0x4, 0xfff0, [0x70, 0x8, 0xfffa, 0x1, 0x3, 0x4]}, @ncm={0x6, 0x24, 0x1a, 0x9, 0xa}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xd7, 0x7, 0x4}, @obex={0x5, 0x24, 0x15, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x8, 0x3, 0xf}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7b, 0x3, 0x85}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x81, 0xe2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x2, 0x1}}}}}]}}]}}, &(0x7f0000001d00)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x250, 0x1, 0xb, 0x4, 0xff, 0x8}, 0x189, &(0x7f0000001980)={0x5, 0xf, 0x189, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x3, 0x4}, @ptm_cap={0x3}, @generic={0x6d, 0x10, 0xc, "8836e75e074735446ff733f63f47f8716699922f884ed4a22db2bcaf50e1d302c778106627c8d23e9cdbe44ab381cffd3fd5f1ca178d12d3f0da264c6b1db8cef1107668599de5c8f358a073965ff638a244be62d38d2efb714f8b77f11560174d1c621b12da0934ad7b"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x3, 0xf, 0x8, [0x3f00, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x0, 0x6191}, @generic={0xec, 0x10, 0x3, "7b4cf92fac6c52586ebeb41259136e4bfcd01a9f1229254c0ff4dae810ecdd48c3c480acc5403c409d632d1f06eafe89c40ee1781ef271c7a0ce0d2d913cd027cb74ee858c992a540b5614d6150d62f3d11d0d58750f32a6971a5e00069ab953ecca4811d27789bfc7cda0d65d0df64bc5e48be65379354624045db85746cd29065e657f5f7ef5f42f3de16b86aa0e9ff23139668994fedc313b80fca805f1419c9512234c5d073c4f904664dc34295b5c4e3fe0cd7f6b8f566d535aa84ec320b466a715fa662192a074343b30cd832382500280f20034ea89d41aa20d37a2094d5a7af3e5860d1c38"}]}, 0x4, [{0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xdf, &(0x7f0000001b80)=@string={0xdf, 0x3, "6eaf2d815d690554ef7981af73a817be0017357da39eed1512000364913c0808d50b7e9691f2348da6b385d4df2c557023f2d8897e1de863f68137a942847db3ea18abc47a42fca5ad36b30724db11f8b7e736d72c27d0ec620cbf979e49143a98ca1712e03c069162cd35dde02ccd7690191ee6adc62a7ad82d71f472354387eb4b46805e3d1709a887ca7fd408f9f521f43de4aedad1d71df64562e4386e8b18072bdb8d4428a1cb1a05d2e870805efbfb986f60c3ced04b33a3fe4be6f3f74f247f4cb6b70e361bd10540a701c0afcbbe41812185e06d7b3f9d4600"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0x3409}}]}) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d80)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0) (rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000002fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003000)=0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003040)=0xffffffffffffffff, 0x4) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003140)={{0x1, 0xffffffffffffffff}, &(0x7f00000030c0), &(0x7f0000003100)}, 0x20) (rerun: 64) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000031c0)=@generic={&(0x7f0000003180)='./file0\x00', 0x0, 0x10}, 0x18) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003200), 0x8) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003280)=@o_path={&(0x7f0000003240)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003340)={{0x1, 0xffffffffffffffff}, &(0x7f00000032c0), &(0x7f0000003300)='%pK \x00'}, 0x20) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x6, 0x25, &(0x7f0000001e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc2}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x25}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001f80)='GPL\x00', 0x4, 0x1000, &(0x7f0000001fc0)=""/4096, 0x41000, 0x40, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000003080)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003400)=[r5, r6, r7, r8, r9, r10], &(0x7f0000003440)=[{0x4, 0x2, 0x7, 0x4}, {0x4, 0x4, 0x8, 0x9}], 0x10, 0x4529, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000003580)={0x1, 0x0, &(0x7f0000003540)=[0xffffffffffffffff]}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003640)={{r2}, &(0x7f00000035c0), &(0x7f0000003600)=r7}, 0x20) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000003680), 0x402800, 0x0) (async) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000036c0)={0x10, 0x29, 0x1}) (async) sendmsg$nl_route(r7, &(0x7f00000037c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@ipv4_newnexthop={0x1c, 0x68, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0xf}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008020}, 0x1) (async) flock(r11, 0xe) setsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000003800)="e65411f46bce3f934c8ea55354d2c148d54f0f34c4863109af9e0ea8d09f713bc7ce069ef0eed147b818b3e95fc32ee76d8cbc5840e0395995f823c1b65d718a790d4819de", 0x45) (async) socket$unix(0x1, 0x5, 0x0) r12 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r12, &(0x7f0000003880)={{0x107, 0xe, 0x2, 0x1f7, 0x211, 0xe027, 0x1cf, 0x1}, "34ee5085dc9921307caddfa34d3c836e15b7527c6a69806878526e2349335726882f62c8a625a8980264fccc5bb2b4a8c2890f18859ff1f4f29f023a0ffc84b13d0ff2bcad0d7204e7a828ee125f9781e7bd6cc15120fc4b3d69efa67b4d5232e3042943d3f99622b9692b4576d7b9bc0605c2733fd5d56c416690df79ee7772df3df08fc8bb7af2f1", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6a9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004240)={0xccc15ac00acf19d8, 0x11, &(0x7f0000003f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004000)='syzkaller\x00', 0x80, 0xcd, &(0x7f0000004040)=""/205, 0x40f00, 0x70, '\x00', r3, 0x0, r2, 0x8, &(0x7f0000004140)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004180)={0x4, 0x6, 0x8, 0x400}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000041c0)=[r9, r2, r9, r7], &(0x7f0000004200)=[{0x2, 0x3, 0xe, 0x3}, {0x1, 0x4, 0x2, 0xc}, {0x0, 0x1, 0x0, 0xb}, {0x4, 0x5, 0x0, 0x9}], 0x10, 0x4, @void, @value}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$packet_int(r7, 0x107, 0x11, &(0x7f0000004300)=0xbefe, 0x4) kernel console output (not intermixed with test programs): 08] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.327977][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.339078][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.346156][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.372057][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.387189][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.394171][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.420075][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.432068][ T3302] team0: Port device team_slave_0 added [ 29.438100][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.445097][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.471118][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.485295][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.492225][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.518208][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.531366][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.538348][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.564249][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.575378][ T3302] team0: Port device team_slave_1 added [ 29.598822][ T3300] hsr_slave_0: entered promiscuous mode [ 29.604838][ T3300] hsr_slave_1: entered promiscuous mode [ 29.629655][ T3308] hsr_slave_0: entered promiscuous mode [ 29.635556][ T3308] hsr_slave_1: entered promiscuous mode [ 29.641442][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.649035][ T3308] Cannot create hsr debugfs directory [ 29.665967][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.672930][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.699131][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.710259][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.717253][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.743361][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.774309][ T3299] hsr_slave_0: entered promiscuous mode [ 29.780430][ T3299] hsr_slave_1: entered promiscuous mode [ 29.786254][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.793881][ T3299] Cannot create hsr debugfs directory [ 29.801642][ T3304] hsr_slave_0: entered promiscuous mode [ 29.807636][ T3304] hsr_slave_1: entered promiscuous mode [ 29.813373][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.820906][ T3304] Cannot create hsr debugfs directory [ 29.873267][ T3302] hsr_slave_0: entered promiscuous mode [ 29.879199][ T3302] hsr_slave_1: entered promiscuous mode [ 29.884979][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.892522][ T3302] Cannot create hsr debugfs directory [ 30.041163][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.051628][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.060084][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.072446][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.093024][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.102252][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.119013][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.132587][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.148598][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.157402][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.166073][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.178008][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.199577][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.215185][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.228803][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.237173][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.245753][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.271416][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.280131][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.288716][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.297441][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.307605][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.326649][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.333733][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.342478][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.349699][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.376182][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.410530][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.436595][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.451448][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.462414][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.476508][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.486079][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.493127][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.502301][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.514556][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.523056][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.530134][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.543298][ T1917] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.550376][ T1917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.559255][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.566366][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.575285][ T1917] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.582308][ T1917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.594931][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.602060][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.660175][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.694686][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.706347][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.722486][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.729565][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.739228][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.746317][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.784972][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.812933][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.835988][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.868270][ T3300] veth0_vlan: entered promiscuous mode [ 30.886104][ T3299] veth0_vlan: entered promiscuous mode [ 30.900546][ T3300] veth1_vlan: entered promiscuous mode [ 30.908065][ T3299] veth1_vlan: entered promiscuous mode [ 30.933134][ T3300] veth0_macvtap: entered promiscuous mode [ 30.957749][ T3308] veth0_vlan: entered promiscuous mode [ 30.964143][ T3300] veth1_macvtap: entered promiscuous mode [ 30.976639][ T3308] veth1_vlan: entered promiscuous mode [ 30.988803][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.007775][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.016609][ T3299] veth0_macvtap: entered promiscuous mode [ 31.024251][ T3302] veth0_vlan: entered promiscuous mode [ 31.037042][ T3300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.045759][ T3300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.054637][ T3300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.063601][ T3300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.074215][ T3299] veth1_macvtap: entered promiscuous mode [ 31.088495][ T3308] veth0_macvtap: entered promiscuous mode [ 31.097681][ T3302] veth1_vlan: entered promiscuous mode [ 31.106975][ T3308] veth1_macvtap: entered promiscuous mode [ 31.130161][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.140729][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.151812][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.166406][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.167859][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.191409][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.201283][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.211717][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.222426][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.231212][ T3302] veth0_macvtap: entered promiscuous mode [ 31.242143][ T3304] veth0_vlan: entered promiscuous mode [ 31.248764][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.259291][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.271236][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.278827][ T3302] veth1_macvtap: entered promiscuous mode [ 31.286432][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.296949][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.298504][ T3439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.306783][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.325893][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.336539][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.347999][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.356742][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.365513][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.374243][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.388486][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 31.388498][ T30] audit: type=1400 audit(1742024851.224:122): avc: denied { prog_load } for pid=3438 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.413464][ T30] audit: type=1400 audit(1742024851.224:123): avc: denied { bpf } for pid=3438 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.433701][ T30] audit: type=1400 audit(1742024851.224:124): avc: denied { perfmon } for pid=3438 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.454383][ T30] audit: type=1400 audit(1742024851.224:125): avc: denied { prog_run } for pid=3438 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.458582][ T3440] mmap: syz.2.3 (3440) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.474068][ T30] audit: type=1400 audit(1742024851.224:126): avc: denied { read write } for pid=3438 comm="syz.2.3" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 31.499294][ T3440] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 31.508378][ T30] audit: type=1400 audit(1742024851.224:127): avc: denied { open } for pid=3438 comm="syz.2.3" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 31.542311][ T30] audit: type=1400 audit(1742024851.274:128): avc: denied { view } for pid=3438 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 31.561449][ T30] audit: type=1400 audit(1742024851.274:129): avc: denied { write } for pid=3438 comm="syz.2.3" name="fib_trie" dev="proc" ino=4026532489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 31.566841][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.584727][ T30] audit: type=1400 audit(1742024851.324:130): avc: denied { map_create } for pid=3438 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.592741][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.611535][ T30] audit: type=1400 audit(1742024851.324:131): avc: denied { create } for pid=3438 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.620196][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.620225][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.662183][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.672740][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.682732][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.693218][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.703044][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.713494][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.724615][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.736711][ T3304] veth1_vlan: entered promiscuous mode [ 31.745801][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.756360][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.766248][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.776707][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.786565][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.796982][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.807611][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.817533][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.826389][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.835144][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.843846][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.883032][ T3304] veth0_macvtap: entered promiscuous mode [ 31.904488][ T3304] veth1_macvtap: entered promiscuous mode [ 31.919517][ T3446] loop0: detected capacity change from 0 to 1024 [ 31.934810][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.945266][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.955136][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.965576][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.975419][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.985869][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.995694][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.006263][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.017494][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.028800][ T3446] EXT4-fs: inline encryption not supported [ 32.054370][ T3446] ext4: Unknown parameter 'dont_hash' [ 32.109841][ T3446] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 32.110505][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.110526][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.110538][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.232553][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.242429][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.252875][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.262810][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.273251][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.285267][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.294843][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.303604][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.312293][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.321063][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.422791][ T3459] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.564618][ T3462] loop3: detected capacity change from 0 to 1024 [ 32.611950][ T3462] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 32.622868][ T3462] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 32.686619][ T3462] JBD2: no valid journal superblock found [ 32.692433][ T3462] EXT4-fs (loop3): Could not load journal inode [ 32.713210][ T3461] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7'. [ 32.730149][ T3451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 32.739024][ T3451] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2'. [ 32.750154][ T3451] vlan2: entered allmulticast mode [ 32.792691][ T3459] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.115403][ T3484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 33.124868][ T3486] loop0: detected capacity change from 0 to 512 [ 33.142681][ T3486] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 33.181155][ T3484] pim6reg: tun_chr_ioctl cmd 2150131490 [ 33.195621][ T3484] loop2: detected capacity change from 0 to 512 [ 33.205114][ T3484] journal_path: Lookup failure for './file0' [ 33.211111][ T3484] EXT4-fs: error: could not find journal device path [ 33.232807][ T3491] loop1: detected capacity change from 0 to 1024 [ 33.244445][ T3491] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 33.255374][ T3491] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 33.365880][ T3493] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15'. [ 33.381164][ T3493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'. [ 33.394808][ T3491] JBD2: no valid journal superblock found [ 33.400551][ T3491] EXT4-fs (loop1): Could not load journal inode [ 33.415374][ T3496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 33.528507][ T3498] loop0: detected capacity change from 0 to 128 [ 33.544864][ T3498] EXT4-fs: Ignoring removed nobh option [ 33.560424][ T3501] loop4: detected capacity change from 0 to 128 [ 33.572549][ T3498] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.573443][ T3501] EXT4-fs: Ignoring removed nobh option [ 33.590609][ T3498] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.694390][ T3498] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.736566][ T3507] FAULT_INJECTION: forcing a failure. [ 33.736566][ T3507] name failslab, interval 1, probability 0, space 0, times 1 [ 33.749277][ T3507] CPU: 1 UID: 0 PID: 3507 Comm: syz.0.20 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 33.749350][ T3507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 33.749361][ T3507] Call Trace: [ 33.749368][ T3507] [ 33.749375][ T3507] dump_stack_lvl+0xf2/0x150 [ 33.749460][ T3507] dump_stack+0x15/0x1a [ 33.749479][ T3507] should_fail_ex+0x24a/0x260 [ 33.749510][ T3507] should_failslab+0x8f/0xb0 [ 33.749548][ T3507] kmem_cache_alloc_noprof+0x52/0x320 [ 33.749568][ T3507] ? alloc_empty_file+0xd0/0x200 [ 33.749663][ T3507] ? alloc_mnt_ns+0x71/0x270 [ 33.749707][ T3507] alloc_empty_file+0xd0/0x200 [ 33.749730][ T3507] dentry_open+0x2d/0x90 [ 33.749819][ T3507] __se_sys_fsmount+0x613/0x740 [ 33.749853][ T3507] ? __bpf_trace_sys_enter+0x10/0x30 [ 33.749878][ T3507] __x64_sys_fsmount+0x43/0x50 [ 33.749961][ T3507] x64_sys_call+0x1c13/0x2dc0 [ 33.749985][ T3507] do_syscall_64+0xc9/0x1c0 [ 33.750014][ T3507] ? clear_bhb_loop+0x55/0xb0 [ 33.750039][ T3507] ? clear_bhb_loop+0x55/0xb0 [ 33.750116][ T3507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.750159][ T3507] RIP: 0033:0x7ff48e38d169 [ 33.750182][ T3507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.750278][ T3507] RSP: 002b:00007ff48c9f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 33.750298][ T3507] RAX: ffffffffffffffda RBX: 00007ff48e5a5fa0 RCX: 00007ff48e38d169 [ 33.750312][ T3507] RDX: 0000000000000088 RSI: 0000000000000000 RDI: 0000000000000006 [ 33.750384][ T3507] RBP: 00007ff48c9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 33.750394][ T3507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.750407][ T3507] R13: 0000000000000000 R14: 00007ff48e5a5fa0 R15: 00007fffac8cd068 [ 33.750426][ T3507] [ 33.752705][ T3501] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.956880][ T3509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 33.963394][ T3501] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.058662][ C1] hrtimer: interrupt took 67320 ns [ 34.068685][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.142878][ T3511] loop0: detected capacity change from 0 to 8192 [ 34.189973][ T3511] ======================================================= [ 34.189973][ T3511] WARNING: The mand mount option has been deprecated and [ 34.189973][ T3511] and is ignored by this kernel. Remove the mand [ 34.189973][ T3511] option from the mount to silence this warning. [ 34.189973][ T3511] ======================================================= [ 34.247433][ T3522] loop3: detected capacity change from 0 to 512 [ 34.255332][ T3522] EXT4-fs: Ignoring removed oldalloc option [ 34.262785][ T3511] process 'syz.0.21' launched './file2' with NULL argv: empty string added [ 34.282848][ T3522] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.296076][ T3522] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.313251][ T3511] syz.0.21: attempt to access beyond end of device [ 34.313251][ T3511] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 34.326521][ T3511] Buffer I/O error on dev loop0, logical block 57847, async page read [ 34.336840][ T3522] EXT4-fs (loop3): 1 truncate cleaned up [ 34.342796][ T3522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.364693][ T3524] loop4: detected capacity change from 0 to 1024 [ 34.380684][ T3530] netlink: 'syz.2.27': attribute type 2 has an invalid length. [ 34.381628][ T3511] 9pnet_virtio: no channels available for device  [ 34.430428][ T3524] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 34.444142][ T3533] netlink: 'syz.2.28': attribute type 13 has an invalid length. [ 34.486027][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.553258][ T3538] loop2: detected capacity change from 0 to 1024 [ 34.560062][ T3538] EXT4-fs: Ignoring removed oldalloc option [ 34.566125][ T3538] EXT4-fs: Ignoring removed bh option [ 34.586114][ T3539] FAULT_INJECTION: forcing a failure. [ 34.586114][ T3539] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.599357][ T3539] CPU: 0 UID: 0 PID: 3539 Comm: syz.3.30 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 34.599378][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 34.599432][ T3539] Call Trace: [ 34.599438][ T3539] [ 34.599445][ T3539] dump_stack_lvl+0xf2/0x150 [ 34.599516][ T3539] dump_stack+0x15/0x1a [ 34.599535][ T3539] should_fail_ex+0x24a/0x260 [ 34.599562][ T3539] should_fail+0xb/0x10 [ 34.599708][ T3539] should_fail_usercopy+0x1a/0x20 [ 34.599737][ T3539] _copy_from_user+0x1c/0xa0 [ 34.599754][ T3539] copy_msghdr_from_user+0x54/0x2a0 [ 34.599818][ T3539] ? __fget_files+0x17c/0x1c0 [ 34.599898][ T3539] __sys_sendmsg+0x13e/0x230 [ 34.599931][ T3539] __x64_sys_sendmsg+0x46/0x50 [ 34.599954][ T3539] x64_sys_call+0x2734/0x2dc0 [ 34.599977][ T3539] do_syscall_64+0xc9/0x1c0 [ 34.600068][ T3539] ? clear_bhb_loop+0x55/0xb0 [ 34.600102][ T3539] ? clear_bhb_loop+0x55/0xb0 [ 34.600126][ T3539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.600150][ T3539] RIP: 0033:0x7f85011ed169 [ 34.600163][ T3539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.600223][ T3539] RSP: 002b:00007f84ff851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.600239][ T3539] RAX: ffffffffffffffda RBX: 00007f8501405fa0 RCX: 00007f85011ed169 [ 34.600250][ T3539] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000005 [ 34.600260][ T3539] RBP: 00007f84ff851090 R08: 0000000000000000 R09: 0000000000000000 [ 34.600270][ T3539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.600280][ T3539] R13: 0000000000000000 R14: 00007f8501405fa0 R15: 00007fff166d8c28 [ 34.600295][ T3539] [ 34.799308][ T3538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 34.928254][ T3566] wireguard0: entered promiscuous mode [ 34.933898][ T3566] wireguard0: entered allmulticast mode [ 34.947220][ T3569] loop3: detected capacity change from 0 to 512 [ 34.954117][ T3569] EXT4-fs: Ignoring removed i_version option [ 34.960118][ T3569] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.961762][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 34.977527][ T3569] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.017241][ T3569] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.050875][ T3569] EXT4-fs (loop3): 1 truncate cleaned up [ 35.065093][ T3569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.095616][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 35.146645][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.240413][ T3591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.247941][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.296637][ T3591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.304077][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.328894][ T3594] loop2: detected capacity change from 0 to 8192 [ 35.343474][ T3594] FAULT_INJECTION: forcing a failure. [ 35.343474][ T3594] name failslab, interval 1, probability 0, space 0, times 0 [ 35.356195][ T3594] CPU: 0 UID: 0 PID: 3594 Comm: syz.2.42 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 35.356219][ T3594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 35.356272][ T3594] Call Trace: [ 35.356279][ T3594] [ 35.356286][ T3594] dump_stack_lvl+0xf2/0x150 [ 35.356344][ T3594] dump_stack+0x15/0x1a [ 35.356367][ T3594] should_fail_ex+0x24a/0x260 [ 35.356398][ T3594] should_failslab+0x8f/0xb0 [ 35.356437][ T3594] kmem_cache_alloc_noprof+0x52/0x320 [ 35.356464][ T3594] ? fat_parse_long+0x5d/0x400 [ 35.356494][ T3594] fat_parse_long+0x5d/0x400 [ 35.356596][ T3594] fat_search_long+0x209/0x9b0 [ 35.356656][ T3594] ? __list_add_valid_or_report+0x38/0xe0 [ 35.356678][ T3594] ? tracing_record_taskinfo_sched_switch+0x6f/0x270 [ 35.356785][ T3594] vfat_lookup+0xd6/0x2d0 [ 35.356812][ T3594] ? __pfx_vfat_lookup+0x10/0x10 [ 35.356838][ T3594] path_openat+0xd51/0x1fc0 [ 35.356888][ T3594] do_filp_open+0x107/0x230 [ 35.356966][ T3594] do_open_execat+0xd0/0x280 [ 35.356996][ T3594] alloc_bprm+0x2a/0x680 [ 35.357091][ T3594] do_execveat_common+0x12b/0x7e0 [ 35.357124][ T3594] ? getname_flags+0x15a/0x3b0 [ 35.357184][ T3594] __x64_sys_execveat+0x75/0x90 [ 35.357213][ T3594] x64_sys_call+0x291e/0x2dc0 [ 35.357315][ T3594] do_syscall_64+0xc9/0x1c0 [ 35.357349][ T3594] ? clear_bhb_loop+0x55/0xb0 [ 35.357378][ T3594] ? clear_bhb_loop+0x55/0xb0 [ 35.357447][ T3594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.357472][ T3594] RIP: 0033:0x7f7c0032d169 [ 35.357484][ T3594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.357498][ T3594] RSP: 002b:00007f7bfe976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 35.357558][ T3594] RAX: ffffffffffffffda RBX: 00007f7c00546080 RCX: 00007f7c0032d169 [ 35.357571][ T3594] RDX: 0000000000000000 RSI: 0000400000000340 RDI: ffffffffffffff9c [ 35.357584][ T3594] RBP: 00007f7bfe976090 R08: 0000000000000000 R09: 0000000000000000 [ 35.357597][ T3594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.357609][ T3594] R13: 0000000000000000 R14: 00007f7c00546080 R15: 00007fff3f121018 [ 35.357626][ T3594] [ 35.635207][ T3597] FAULT_INJECTION: forcing a failure. [ 35.635207][ T3597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.648393][ T3597] CPU: 0 UID: 0 PID: 3597 Comm: syz.1.43 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 35.648418][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 35.648431][ T3597] Call Trace: [ 35.648437][ T3597] [ 35.648445][ T3597] dump_stack_lvl+0xf2/0x150 [ 35.648553][ T3597] dump_stack+0x15/0x1a [ 35.648589][ T3597] should_fail_ex+0x24a/0x260 [ 35.648628][ T3597] should_fail+0xb/0x10 [ 35.648655][ T3597] should_fail_usercopy+0x1a/0x20 [ 35.648759][ T3597] strncpy_from_user+0x25/0x210 [ 35.648781][ T3597] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 35.648799][ T3597] ? getname_flags+0x81/0x3b0 [ 35.648827][ T3597] getname_flags+0xb0/0x3b0 [ 35.648917][ T3597] getname+0x17/0x20 [ 35.648930][ T3597] path_setxattrat+0x23a/0x310 [ 35.648976][ T3597] __x64_sys_setxattr+0x6e/0x90 [ 35.649006][ T3597] x64_sys_call+0x2247/0x2dc0 [ 35.649030][ T3597] do_syscall_64+0xc9/0x1c0 [ 35.649057][ T3597] ? clear_bhb_loop+0x55/0xb0 [ 35.649090][ T3597] ? clear_bhb_loop+0x55/0xb0 [ 35.649117][ T3597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.649142][ T3597] RIP: 0033:0x7f894716d169 [ 35.649176][ T3597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.649191][ T3597] RSP: 002b:00007f89457d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 35.649206][ T3597] RAX: ffffffffffffffda RBX: 00007f8947385fa0 RCX: 00007f894716d169 [ 35.649215][ T3597] RDX: 00004000000006c0 RSI: 00004000000001c0 RDI: 0000400000000000 [ 35.649225][ T3597] RBP: 00007f89457d7090 R08: 0000000000000001 R09: 0000000000000000 [ 35.649235][ T3597] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000001 [ 35.649244][ T3597] R13: 0000000000000000 R14: 00007f8947385fa0 R15: 00007ffc2858fea8 [ 35.649259][ T3597] [ 35.857603][ T3601] FAULT_INJECTION: forcing a failure. [ 35.857603][ T3601] name failslab, interval 1, probability 0, space 0, times 0 [ 35.870414][ T3601] CPU: 0 UID: 0 PID: 3601 Comm: syz.1.45 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 35.870434][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 35.870444][ T3601] Call Trace: [ 35.870448][ T3601] [ 35.870454][ T3601] dump_stack_lvl+0xf2/0x150 [ 35.870482][ T3601] dump_stack+0x15/0x1a [ 35.870600][ T3601] should_fail_ex+0x24a/0x260 [ 35.870632][ T3601] should_failslab+0x8f/0xb0 [ 35.870658][ T3601] kmem_cache_alloc_node_noprof+0x59/0x320 [ 35.870687][ T3601] ? __alloc_skb+0x10b/0x310 [ 35.870706][ T3601] __alloc_skb+0x10b/0x310 [ 35.870728][ T3601] netlink_alloc_large_skb+0xad/0xe0 [ 35.870802][ T3601] netlink_sendmsg+0x3b4/0x6e0 [ 35.870835][ T3601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.870940][ T3601] __sock_sendmsg+0x140/0x180 [ 35.870973][ T3601] ____sys_sendmsg+0x326/0x4b0 [ 35.871003][ T3601] __sys_sendmsg+0x19d/0x230 [ 35.871050][ T3601] __x64_sys_sendmsg+0x46/0x50 [ 35.871125][ T3601] x64_sys_call+0x2734/0x2dc0 [ 35.871188][ T3601] do_syscall_64+0xc9/0x1c0 [ 35.871220][ T3601] ? clear_bhb_loop+0x55/0xb0 [ 35.871310][ T3601] ? clear_bhb_loop+0x55/0xb0 [ 35.871339][ T3601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.871386][ T3601] RIP: 0033:0x7f894716d169 [ 35.871398][ T3601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.871413][ T3601] RSP: 002b:00007f89457d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.871428][ T3601] RAX: ffffffffffffffda RBX: 00007f8947385fa0 RCX: 00007f894716d169 [ 35.871439][ T3601] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000003 [ 35.871451][ T3601] RBP: 00007f89457d7090 R08: 0000000000000000 R09: 0000000000000000 [ 35.871463][ T3601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.871475][ T3601] R13: 0000000000000000 R14: 00007f8947385fa0 R15: 00007ffc2858fea8 [ 35.871547][ T3601] [ 36.102880][ T3604] loop1: detected capacity change from 0 to 1024 [ 36.142652][ T3605] loop4: detected capacity change from 0 to 512 [ 36.152677][ T3604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.170415][ T3612] FAULT_INJECTION: forcing a failure. [ 36.170415][ T3612] name failslab, interval 1, probability 0, space 0, times 0 [ 36.183274][ T3612] CPU: 0 UID: 0 PID: 3612 Comm: syz.3.49 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 36.183370][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 36.183382][ T3612] Call Trace: [ 36.183387][ T3612] [ 36.183393][ T3612] dump_stack_lvl+0xf2/0x150 [ 36.183420][ T3612] dump_stack+0x15/0x1a [ 36.183525][ T3612] should_fail_ex+0x24a/0x260 [ 36.183606][ T3612] should_failslab+0x8f/0xb0 [ 36.183637][ T3612] kmem_cache_alloc_node_noprof+0x59/0x320 [ 36.183662][ T3612] ? __alloc_skb+0x10b/0x310 [ 36.183685][ T3612] __alloc_skb+0x10b/0x310 [ 36.183711][ T3612] netlink_alloc_large_skb+0xad/0xe0 [ 36.183812][ T3612] netlink_sendmsg+0x3b4/0x6e0 [ 36.183869][ T3612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.183910][ T3612] __sock_sendmsg+0x140/0x180 [ 36.183980][ T3612] ____sys_sendmsg+0x326/0x4b0 [ 36.184090][ T3612] __sys_sendmsg+0x19d/0x230 [ 36.184135][ T3612] __x64_sys_sendmsg+0x46/0x50 [ 36.184165][ T3612] x64_sys_call+0x2734/0x2dc0 [ 36.184210][ T3612] do_syscall_64+0xc9/0x1c0 [ 36.184325][ T3612] ? clear_bhb_loop+0x55/0xb0 [ 36.184362][ T3612] ? clear_bhb_loop+0x55/0xb0 [ 36.184394][ T3612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.184425][ T3612] RIP: 0033:0x7f85011ed169 [ 36.184446][ T3612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.184463][ T3612] RSP: 002b:00007f84ff851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.184480][ T3612] RAX: ffffffffffffffda RBX: 00007f8501405fa0 RCX: 00007f85011ed169 [ 36.184545][ T3612] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 36.184558][ T3612] RBP: 00007f84ff851090 R08: 0000000000000000 R09: 0000000000000000 [ 36.184571][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.184628][ T3612] R13: 0000000000000000 R14: 00007f8501405fa0 R15: 00007fff166d8c28 [ 36.184642][ T3612] [ 36.416353][ T30] kauditd_printk_skb: 265 callbacks suppressed [ 36.416367][ T30] audit: type=1400 audit(1742024856.234:397): avc: denied { remove_name } for pid=3602 comm="syz.1.46" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.416475][ T30] audit: type=1400 audit(1742024856.234:398): avc: denied { rename } for pid=3602 comm="syz.1.46" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.416501][ T30] audit: type=1400 audit(1742024856.244:399): avc: denied { read } for pid=3620 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.438088][ T3623] loop2: detected capacity change from 0 to 1024 [ 36.466969][ T3623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.468379][ T3623] FAULT_INJECTION: forcing a failure. [ 36.468379][ T3623] name failslab, interval 1, probability 0, space 0, times 0 [ 36.468400][ T3623] CPU: 0 UID: 0 PID: 3623 Comm: syz.2.53 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 36.468421][ T3623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 36.468440][ T3623] Call Trace: [ 36.468445][ T3623] [ 36.468451][ T3623] dump_stack_lvl+0xf2/0x150 [ 36.468476][ T3623] dump_stack+0x15/0x1a [ 36.468494][ T3623] should_fail_ex+0x24a/0x260 [ 36.468560][ T3623] should_failslab+0x8f/0xb0 [ 36.468591][ T3623] kmem_cache_alloc_noprof+0x52/0x320 [ 36.468613][ T3623] ? getname_flags+0x81/0x3b0 [ 36.468646][ T3623] getname_flags+0x81/0x3b0 [ 36.468717][ T3623] __x64_sys_rename+0x40/0x70 [ 36.468748][ T3623] x64_sys_call+0x2b1c/0x2dc0 [ 36.468774][ T3623] do_syscall_64+0xc9/0x1c0 [ 36.468855][ T3623] ? clear_bhb_loop+0x55/0xb0 [ 36.468881][ T3623] ? clear_bhb_loop+0x55/0xb0 [ 36.468908][ T3623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.468935][ T3623] RIP: 0033:0x7f7c0032d169 [ 36.468949][ T3623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.468998][ T3623] RSP: 002b:00007f7bfe997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 36.469016][ T3623] RAX: ffffffffffffffda RBX: 00007f7c00545fa0 RCX: 00007f7c0032d169 [ 36.469028][ T3623] RDX: 0000000000000000 RSI: 0000400000000f00 RDI: 0000400000000200 [ 36.469040][ T3623] RBP: 00007f7bfe997090 R08: 0000000000000000 R09: 0000000000000000 [ 36.469051][ T3623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.469125][ T3623] R13: 0000000000000000 R14: 00007f7c00545fa0 R15: 00007fff3f121018 [ 36.469143][ T3623] [ 36.524659][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.541319][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.601886][ T3628] loop0: detected capacity change from 0 to 2048 [ 36.751625][ T3628] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 36.765234][ T30] audit: type=1400 audit(1742024856.604:400): avc: denied { setopt } for pid=3627 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.811479][ T30] audit: type=1400 audit(1742024856.634:401): avc: denied { name_bind } for pid=3631 comm="syz.2.55" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 36.812197][ T3634] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.833364][ T30] audit: type=1400 audit(1742024856.644:402): avc: denied { ioctl } for pid=3627 comm="syz.0.56" path="socket:[3954]" dev="sockfs" ino=3954 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.951488][ T30] audit: type=1326 audit(1742024856.784:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0032d169 code=0x7ffc0000 [ 36.977401][ T30] audit: type=1326 audit(1742024856.814:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0032d169 code=0x7ffc0000 [ 37.000623][ T30] audit: type=1326 audit(1742024856.814:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c0032d169 code=0x7ffc0000 [ 37.023794][ T30] audit: type=1326 audit(1742024856.814:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0032d169 code=0x7ffc0000 [ 37.071641][ T3634] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.107947][ T3660] __nla_validate_parse: 1 callbacks suppressed [ 37.107958][ T3660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 37.177231][ T3634] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.240451][ T3666] FAULT_INJECTION: forcing a failure. [ 37.240451][ T3666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.253617][ T3666] CPU: 1 UID: 0 PID: 3666 Comm: syz.0.62 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 37.253642][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 37.253653][ T3666] Call Trace: [ 37.253659][ T3666] [ 37.253665][ T3666] dump_stack_lvl+0xf2/0x150 [ 37.253692][ T3666] dump_stack+0x15/0x1a [ 37.253719][ T3666] should_fail_ex+0x24a/0x260 [ 37.253748][ T3666] should_fail+0xb/0x10 [ 37.253775][ T3666] should_fail_usercopy+0x1a/0x20 [ 37.253854][ T3666] _copy_from_iter+0xd5/0xd00 [ 37.253954][ T3666] ? kmalloc_reserve+0x16e/0x190 [ 37.253974][ T3666] ? __build_skb_around+0x196/0x1f0 [ 37.254036][ T3666] ? __alloc_skb+0x21f/0x310 [ 37.254105][ T3666] ? __virt_addr_valid+0x1ed/0x250 [ 37.254138][ T3666] ? __check_object_size+0x364/0x520 [ 37.254166][ T3666] netlink_sendmsg+0x460/0x6e0 [ 37.254205][ T3666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.254248][ T3666] __sock_sendmsg+0x140/0x180 [ 37.254284][ T3666] ____sys_sendmsg+0x326/0x4b0 [ 37.254317][ T3666] __sys_sendmsg+0x19d/0x230 [ 37.254422][ T3666] __x64_sys_sendmsg+0x46/0x50 [ 37.254597][ T3666] x64_sys_call+0x2734/0x2dc0 [ 37.254682][ T3666] do_syscall_64+0xc9/0x1c0 [ 37.254710][ T3666] ? clear_bhb_loop+0x55/0xb0 [ 37.254814][ T3666] ? clear_bhb_loop+0x55/0xb0 [ 37.254841][ T3666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.254935][ T3666] RIP: 0033:0x7ff48e38d169 [ 37.254948][ T3666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.254963][ T3666] RSP: 002b:00007ff48c9af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.254982][ T3666] RAX: ffffffffffffffda RBX: 00007ff48e5a6160 RCX: 00007ff48e38d169 [ 37.254993][ T3666] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000009 [ 37.255004][ T3666] RBP: 00007ff48c9af090 R08: 0000000000000000 R09: 0000000000000000 [ 37.255016][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.255028][ T3666] R13: 0000000000000000 R14: 00007ff48e5a6160 R15: 00007fffac8cd068 [ 37.255107][ T3666] [ 37.526860][ T3634] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.545270][ T3660] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 37.551976][ T3660] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 37.559712][ T3660] vhci_hcd vhci_hcd.0: Device attached [ 37.571813][ T3672] vhci_hcd: connection closed [ 37.572065][ T41] vhci_hcd: stop threads [ 37.581056][ T41] vhci_hcd: release socket [ 37.585604][ T41] vhci_hcd: disconnect device [ 37.598249][ T3634] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.609681][ T3634] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.611798][ T3678] FAULT_INJECTION: forcing a failure. [ 37.611798][ T3678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.625185][ T3634] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.631072][ T3678] CPU: 0 UID: 0 PID: 3678 Comm: syz.4.69 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 37.631100][ T3678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 37.631146][ T3678] Call Trace: [ 37.631152][ T3678] [ 37.631160][ T3678] dump_stack_lvl+0xf2/0x150 [ 37.631245][ T3678] dump_stack+0x15/0x1a [ 37.631269][ T3678] should_fail_ex+0x24a/0x260 [ 37.631304][ T3678] should_fail+0xb/0x10 [ 37.631379][ T3678] should_fail_usercopy+0x1a/0x20 [ 37.631416][ T3678] _copy_from_user+0x1c/0xa0 [ 37.631439][ T3678] copy_msghdr_from_user+0x54/0x2a0 [ 37.631531][ T3678] ? __fget_files+0x17c/0x1c0 [ 37.631572][ T3678] __sys_sendmsg+0x13e/0x230 [ 37.631617][ T3678] __x64_sys_sendmsg+0x46/0x50 [ 37.631676][ T3678] x64_sys_call+0x2734/0x2dc0 [ 37.631707][ T3678] do_syscall_64+0xc9/0x1c0 [ 37.631746][ T3678] ? clear_bhb_loop+0x55/0xb0 [ 37.631787][ T3678] ? clear_bhb_loop+0x55/0xb0 [ 37.631834][ T3678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.631864][ T3678] RIP: 0033:0x7f707252d169 [ 37.631882][ T3678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.631902][ T3678] RSP: 002b:00007f7070b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.631923][ T3678] RAX: ffffffffffffffda RBX: 00007f7072745fa0 RCX: 00007f707252d169 [ 37.631937][ T3678] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000003 [ 37.631950][ T3678] RBP: 00007f7070b97090 R08: 0000000000000000 R09: 0000000000000000 [ 37.632034][ T3678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.632055][ T3678] R13: 0000000000000000 R14: 00007f7072745fa0 R15: 00007ffc9e4a8ed8 [ 37.632075][ T3678] [ 37.816571][ T3634] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.855807][ T3634] syz.1.57 (3634) used greatest stack depth: 10840 bytes left [ 37.893574][ T3691] loop1: detected capacity change from 0 to 2048 [ 37.923573][ T3691] loop1: p1 < > p4 < > [ 37.927926][ T3695] loop4: detected capacity change from 0 to 512 [ 37.936598][ T3695] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.945749][ T3695] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 37.964582][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 37.975451][ T3619] udevd[3619]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 37.996404][ T3695] EXT4-fs (loop4): orphan cleanup on readonly fs [ 37.996512][ T3619] udevd[3619]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.013593][ T3695] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.75: bad orphan inode 15 [ 38.015270][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 38.037172][ T3695] ext4_test_bit(bit=14, block=18) = 1 [ 38.042565][ T3695] is_bad_inode(inode)=0 [ 38.046762][ T3695] NEXT_ORPHAN(inode)=1023 [ 38.051171][ T3695] max_ino=32 [ 38.054389][ T3695] i_nlink=0 [ 38.078005][ T3695] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.75: corrupted xattr block 19: e_value size too large [ 38.093123][ T3695] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 38.105188][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.134097][ T3704] syz.2.77 uses obsolete (PF_INET,SOCK_PACKET) [ 38.218767][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.244904][ T3719] FAULT_INJECTION: forcing a failure. [ 38.244904][ T3719] name failslab, interval 1, probability 0, space 0, times 0 [ 38.257732][ T3719] CPU: 1 UID: 0 PID: 3719 Comm: syz.1.82 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 38.257807][ T3719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.257818][ T3719] Call Trace: [ 38.257824][ T3719] [ 38.257829][ T3719] dump_stack_lvl+0xf2/0x150 [ 38.257857][ T3719] dump_stack+0x15/0x1a [ 38.257909][ T3719] should_fail_ex+0x24a/0x260 [ 38.257934][ T3719] should_failslab+0x8f/0xb0 [ 38.258034][ T3719] kmem_cache_alloc_node_noprof+0x59/0x320 [ 38.258059][ T3719] ? __alloc_skb+0x10b/0x310 [ 38.258078][ T3719] __alloc_skb+0x10b/0x310 [ 38.258098][ T3719] netlink_alloc_large_skb+0xad/0xe0 [ 38.258176][ T3719] netlink_sendmsg+0x3b4/0x6e0 [ 38.258207][ T3719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.258314][ T3719] __sock_sendmsg+0x140/0x180 [ 38.258343][ T3719] ____sys_sendmsg+0x326/0x4b0 [ 38.258377][ T3719] __sys_sendmsg+0x19d/0x230 [ 38.258410][ T3719] __x64_sys_sendmsg+0x46/0x50 [ 38.258455][ T3719] x64_sys_call+0x2734/0x2dc0 [ 38.258559][ T3719] do_syscall_64+0xc9/0x1c0 [ 38.258591][ T3719] ? clear_bhb_loop+0x55/0xb0 [ 38.258671][ T3719] ? clear_bhb_loop+0x55/0xb0 [ 38.258701][ T3719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.258730][ T3719] RIP: 0033:0x7f894716d169 [ 38.258745][ T3719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.258760][ T3719] RSP: 002b:00007f89457d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.258831][ T3719] RAX: ffffffffffffffda RBX: 00007f8947385fa0 RCX: 00007f894716d169 [ 38.258844][ T3719] RDX: 0000000000001000 RSI: 0000400000000200 RDI: 0000000000000006 [ 38.258856][ T3719] RBP: 00007f89457d7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.258869][ T3719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.258881][ T3719] R13: 0000000000000000 R14: 00007f8947385fa0 R15: 00007ffc2858fea8 [ 38.258900][ T3719] [ 38.457224][ T3716] Cannot find del_set index 0 as target [ 38.502722][ T3724] xt_hashlimit: size too large, truncated to 1048576 [ 38.669400][ T3737] loop3: detected capacity change from 0 to 1024 [ 38.691994][ T3739] FAULT_INJECTION: forcing a failure. [ 38.691994][ T3739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.705117][ T3739] CPU: 1 UID: 0 PID: 3739 Comm: syz.2.87 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 38.705140][ T3739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.705151][ T3739] Call Trace: [ 38.705156][ T3739] [ 38.705162][ T3739] dump_stack_lvl+0xf2/0x150 [ 38.705202][ T3739] dump_stack+0x15/0x1a [ 38.705222][ T3739] should_fail_ex+0x24a/0x260 [ 38.705249][ T3739] should_fail+0xb/0x10 [ 38.705273][ T3739] should_fail_usercopy+0x1a/0x20 [ 38.705374][ T3739] strncpy_from_user+0x25/0x210 [ 38.705394][ T3739] ? __kmalloc_cache_noprof+0x186/0x320 [ 38.705416][ T3739] __se_sys_memfd_create+0x218/0x5a0 [ 38.705503][ T3739] __x64_sys_memfd_create+0x31/0x40 [ 38.705527][ T3739] x64_sys_call+0x2d4c/0x2dc0 [ 38.705551][ T3739] do_syscall_64+0xc9/0x1c0 [ 38.705613][ T3739] ? clear_bhb_loop+0x55/0xb0 [ 38.705635][ T3739] ? clear_bhb_loop+0x55/0xb0 [ 38.705658][ T3739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.705753][ T3739] RIP: 0033:0x7f7c0032d169 [ 38.705767][ T3739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.705845][ T3739] RSP: 002b:00007f7bfe996e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 38.705860][ T3739] RAX: ffffffffffffffda RBX: 0000000000000578 RCX: 00007f7c0032d169 [ 38.705871][ T3739] RDX: 00007f7bfe996ef0 RSI: 0000000000000000 RDI: 00007f7c003aec3c [ 38.705882][ T3739] RBP: 0000400000000180 R08: 00007f7bfe996bb7 R09: 00007f7bfe996e40 [ 38.705893][ T3739] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000080 [ 38.705904][ T3739] R13: 00007f7bfe996ef0 R14: 00007f7bfe996eb0 R15: 0000400000000000 [ 38.705958][ T3739] [ 38.907534][ T3743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.88'. [ 38.936523][ T3737] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.947439][ T3737] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 38.974708][ T3737] JBD2: no valid journal superblock found [ 38.980464][ T3737] EXT4-fs (loop3): Could not load journal inode [ 38.993905][ T3745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 39.023730][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 39.073680][ T3751] rtc_cmos 00:00: Alarms can be up to one day in the future [ 39.123562][ T3756] loop1: detected capacity change from 0 to 1024 [ 39.189834][ T3756] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.287214][ T3761] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 39.293876][ T3761] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 39.301591][ T3761] vhci_hcd vhci_hcd.0: Device attached [ 39.496741][ T3375] vhci_hcd: vhci_device speed not set [ 39.563216][ T3375] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 39.588750][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 39.614447][ T3767] loop4: detected capacity change from 0 to 2048 [ 39.643137][ T3767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.654108][ T3764] vhci_hcd: connection reset by peer [ 39.663560][ T1917] vhci_hcd: stop threads [ 39.667823][ T1917] vhci_hcd: release socket [ 39.672246][ T1917] vhci_hcd: disconnect device [ 39.677610][ T3769] loop1: detected capacity change from 0 to 1024 [ 39.686081][ T3767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.725775][ T3769] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.738479][ T3769] FAULT_INJECTION: forcing a failure. [ 39.738479][ T3769] name failslab, interval 1, probability 0, space 0, times 0 [ 39.751204][ T3769] CPU: 1 UID: 0 PID: 3769 Comm: syz.1.95 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 39.751236][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 39.751247][ T3769] Call Trace: [ 39.751253][ T3769] [ 39.751259][ T3769] dump_stack_lvl+0xf2/0x150 [ 39.751284][ T3769] dump_stack+0x15/0x1a [ 39.751384][ T3769] should_fail_ex+0x24a/0x260 [ 39.751415][ T3769] should_failslab+0x8f/0xb0 [ 39.751444][ T3769] kmem_cache_alloc_noprof+0x52/0x320 [ 39.751515][ T3769] ? getname_flags+0x81/0x3b0 [ 39.751548][ T3769] getname_flags+0x81/0x3b0 [ 39.751575][ T3769] getname+0x17/0x20 [ 39.751601][ T3769] do_sys_openat2+0x67/0x120 [ 39.751621][ T3769] __x64_sys_openat+0xf3/0x120 [ 39.751642][ T3769] x64_sys_call+0x2b30/0x2dc0 [ 39.751700][ T3769] do_syscall_64+0xc9/0x1c0 [ 39.751726][ T3769] ? clear_bhb_loop+0x55/0xb0 [ 39.751751][ T3769] ? clear_bhb_loop+0x55/0xb0 [ 39.751776][ T3769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.751801][ T3769] RIP: 0033:0x7f894716d169 [ 39.751886][ T3769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.751901][ T3769] RSP: 002b:00007f89457d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.751916][ T3769] RAX: ffffffffffffffda RBX: 00007f8947385fa0 RCX: 00007f894716d169 [ 39.751926][ T3769] RDX: 00000000000026e1 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 39.751950][ T3769] RBP: 00007f89457d7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.751962][ T3769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.751973][ T3769] R13: 0000000000000000 R14: 00007f8947385fa0 R15: 00007ffc2858fea8 [ 39.751988][ T3769] [ 39.992005][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 40.043752][ T3784] loop1: detected capacity change from 0 to 1024 [ 40.083015][ T3788] FAULT_INJECTION: forcing a failure. [ 40.083015][ T3788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.096144][ T3788] CPU: 1 UID: 0 PID: 3788 Comm: syz.0.100 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 40.096166][ T3788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.096240][ T3788] Call Trace: [ 40.096245][ T3788] [ 40.096251][ T3788] dump_stack_lvl+0xf2/0x150 [ 40.096274][ T3788] dump_stack+0x15/0x1a [ 40.096296][ T3788] should_fail_ex+0x24a/0x260 [ 40.096327][ T3788] should_fail+0xb/0x10 [ 40.096399][ T3788] should_fail_usercopy+0x1a/0x20 [ 40.096431][ T3788] _copy_from_user+0x1c/0xa0 [ 40.096523][ T3788] move_addr_to_kernel+0x82/0x120 [ 40.096550][ T3788] __sys_connect+0x67/0x1b0 [ 40.096571][ T3788] __x64_sys_connect+0x41/0x50 [ 40.096662][ T3788] x64_sys_call+0x22a7/0x2dc0 [ 40.096684][ T3788] do_syscall_64+0xc9/0x1c0 [ 40.096736][ T3788] ? clear_bhb_loop+0x55/0xb0 [ 40.096762][ T3788] ? clear_bhb_loop+0x55/0xb0 [ 40.096821][ T3788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.096894][ T3788] RIP: 0033:0x7ff48e38d169 [ 40.096907][ T3788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.096925][ T3788] RSP: 002b:00007ff48c9f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 40.096943][ T3788] RAX: ffffffffffffffda RBX: 00007ff48e5a5fa0 RCX: 00007ff48e38d169 [ 40.096956][ T3788] RDX: 0000000000000010 RSI: 0000400000000000 RDI: 0000000000000003 [ 40.096968][ T3788] RBP: 00007ff48c9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 40.096979][ T3788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.096991][ T3788] R13: 0000000000000000 R14: 00007ff48e5a5fa0 R15: 00007fffac8cd068 [ 40.097006][ T3788] [ 40.335886][ T3784] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.368998][ T3790] loop0: detected capacity change from 0 to 128 [ 40.385048][ T3792] smc: net device bond0 applied user defined pnetid SYZ0 [ 40.400268][ T3792] FAULT_INJECTION: forcing a failure. [ 40.400268][ T3792] name failslab, interval 1, probability 0, space 0, times 0 [ 40.412983][ T3792] CPU: 1 UID: 0 PID: 3792 Comm: syz.3.102 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 40.413008][ T3792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.413020][ T3792] Call Trace: [ 40.413025][ T3792] [ 40.413032][ T3792] dump_stack_lvl+0xf2/0x150 [ 40.413061][ T3792] dump_stack+0x15/0x1a [ 40.413089][ T3792] should_fail_ex+0x24a/0x260 [ 40.413117][ T3792] should_failslab+0x8f/0xb0 [ 40.413167][ T3792] kmem_cache_alloc_noprof+0x52/0x320 [ 40.413188][ T3792] ? audit_log_start+0x34c/0x6b0 [ 40.413223][ T3792] audit_log_start+0x34c/0x6b0 [ 40.413277][ T3792] audit_seccomp+0x4b/0x130 [ 40.413308][ T3792] __seccomp_filter+0x6fa/0x1180 [ 40.413413][ T3792] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 40.413441][ T3792] ? vfs_write+0x644/0x920 [ 40.413466][ T3792] __secure_computing+0x9f/0x1c0 [ 40.413487][ T3792] syscall_trace_enter+0xd1/0x1f0 [ 40.413540][ T3792] do_syscall_64+0xaa/0x1c0 [ 40.413567][ T3792] ? clear_bhb_loop+0x55/0xb0 [ 40.413589][ T3792] ? clear_bhb_loop+0x55/0xb0 [ 40.413687][ T3792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.413767][ T3792] RIP: 0033:0x7f85011ed169 [ 40.413780][ T3792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.413836][ T3792] RSP: 002b:00007f84ff851038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 40.413855][ T3792] RAX: ffffffffffffffda RBX: 00007f8501405fa0 RCX: 00007f85011ed169 [ 40.413867][ T3792] RDX: 0000400000000040 RSI: 0000000000000001 RDI: 00007f8501f3f000 [ 40.413879][ T3792] RBP: 00007f84ff851090 R08: 0000000000000000 R09: 0000000000000000 [ 40.413908][ T3792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.413921][ T3792] R13: 0000000000000000 R14: 00007f8501405fa0 R15: 00007fff166d8c28 [ 40.413939][ T3792] [ 40.620339][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.630968][ T3790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 40.641170][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.648684][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.656118][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.663553][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.670961][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.678404][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.685812][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.693229][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.700612][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.708019][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.715438][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.722859][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.730306][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.737706][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.745117][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.752502][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.759912][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.768383][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 40.781753][ T3799] loop2: detected capacity change from 0 to 128 [ 40.810891][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 40.869497][ T3799] Invalid ELF header magic: != ELF [ 40.935894][ T3810] netlink: 'syz.0.107': attribute type 13 has an invalid length. [ 40.936648][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.936671][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.936710][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.936731][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.936751][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.936773][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.936791][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.936808][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.936825][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.936845][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.936939][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.936961][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.936982][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.937001][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.937023][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.937041][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.937063][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.948112][ T25] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 41.013369][ T3809] SELinux: ebitmap: truncated map [ 41.014460][ T3809] SELinux: failed to load policy [ 41.028837][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.029088][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.104509][ T3818] SELinux: ebitmap: truncated map [ 41.105445][ T3818] SELinux: failed to load policy [ 41.322578][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.384559][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.474868][ T3810] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.483818][ T3810] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.492701][ T3810] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.501748][ T3810] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.571345][ T30] kauditd_printk_skb: 202 callbacks suppressed [ 41.571360][ T30] audit: type=1400 audit(1742024861.404:607): avc: denied { name_bind } for pid=3828 comm="syz.1.115" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.622075][ T3827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 41.693704][ T3836] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 41.700335][ T3836] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 41.707986][ T3836] vhci_hcd vhci_hcd.0: Device attached [ 41.716485][ T3840] loop2: detected capacity change from 0 to 512 [ 41.728057][ T3835] loop1: detected capacity change from 0 to 128 [ 41.750492][ T3842] FAULT_INJECTION: forcing a failure. [ 41.750492][ T3842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.763640][ T3842] CPU: 1 UID: 0 PID: 3842 Comm: syz.0.119 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 41.763667][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.763687][ T3842] Call Trace: [ 41.763694][ T3842] [ 41.763701][ T3842] dump_stack_lvl+0xf2/0x150 [ 41.763732][ T3842] dump_stack+0x15/0x1a [ 41.763755][ T3842] should_fail_ex+0x24a/0x260 [ 41.763790][ T3842] should_fail+0xb/0x10 [ 41.763837][ T3842] should_fail_usercopy+0x1a/0x20 [ 41.763871][ T3842] _copy_to_user+0x20/0xa0 [ 41.763892][ T3842] rng_dev_read+0x3e8/0x700 [ 41.763973][ T3842] vfs_readv+0x3e2/0x660 [ 41.763994][ T3842] ? __pfx_rng_dev_read+0x10/0x10 [ 41.764033][ T3842] __x64_sys_preadv+0xf4/0x1c0 [ 41.764061][ T3842] x64_sys_call+0x2680/0x2dc0 [ 41.764085][ T3842] do_syscall_64+0xc9/0x1c0 [ 41.764188][ T3842] ? clear_bhb_loop+0x55/0xb0 [ 41.764212][ T3842] ? clear_bhb_loop+0x55/0xb0 [ 41.764234][ T3842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.764256][ T3842] RIP: 0033:0x7ff48e38d169 [ 41.764279][ T3842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.764293][ T3842] RSP: 002b:00007ff48c9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 41.764309][ T3842] RAX: ffffffffffffffda RBX: 00007ff48e5a5fa0 RCX: 00007ff48e38d169 [ 41.764319][ T3842] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000003 [ 41.764329][ T3842] RBP: 00007ff48c9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 41.764339][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.764348][ T3842] R13: 0000000000000000 R14: 00007ff48e5a5fa0 R15: 00007fffac8cd068 [ 41.764435][ T3842] [ 41.768446][ T3840] EXT4-fs (loop2): too many log groups per flexible block group [ 41.861088][ T30] audit: type=1400 audit(1742024861.694:608): avc: denied { bind } for pid=3845 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.866482][ T3840] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 41.870867][ T30] audit: type=1400 audit(1742024861.694:609): avc: denied { name_bind } for pid=3845 comm="syz.4.120" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 41.870889][ T30] audit: type=1400 audit(1742024861.694:610): avc: denied { node_bind } for pid=3845 comm="syz.4.120" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 41.893212][ T25] vhci_hcd: vhci_device speed not set [ 41.901185][ T3840] EXT4-fs (loop2): mount failed [ 41.931737][ T30] audit: type=1400 audit(1742024861.714:611): avc: denied { write } for pid=3845 comm="syz.4.120" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.959812][ T3835] Invalid ELF header magic: != ELF [ 41.968900][ T30] audit: type=1400 audit(1742024861.714:612): avc: denied { name_connect } for pid=3845 comm="syz.4.120" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 42.082046][ T30] audit: type=1400 audit(1742024861.894:613): avc: denied { write } for pid=3853 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.114747][ T3835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 42.126924][ T30] audit: type=1326 audit(1742024861.924:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0032d169 code=0x7ffc0000 [ 42.150291][ T30] audit: type=1326 audit(1742024861.924:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f7c0032d169 code=0x7ffc0000 [ 42.152090][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.173479][ T30] audit: type=1326 audit(1742024861.924:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0032d169 code=0x7ffc0000 [ 42.180858][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.204122][ T25] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 42.211368][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.225366][ T3838] vhci_hcd: connection reset by peer [ 42.226109][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.238836][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.245783][ T29] vhci_hcd: stop threads [ 42.246392][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.250441][ T29] vhci_hcd: release socket [ 42.250454][ T29] vhci_hcd: disconnect device [ 42.267180][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.274583][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.282007][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.289416][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.296852][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.304302][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.311680][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.319138][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.326533][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.333976][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.341349][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.349473][ T1040] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 42.441729][ T3873] loop0: detected capacity change from 0 to 1024 [ 42.454566][ T3873] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.465623][ T3873] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.478441][ T3873] JBD2: no valid journal superblock found [ 42.484226][ T3873] EXT4-fs (loop0): Could not load journal inode [ 42.600510][ T3878] loop1: detected capacity change from 0 to 512 [ 42.701894][ T3878] loop1: detected capacity change from 0 to 128 [ 43.121058][ T3894] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 43.921763][ T3906] loop1: detected capacity change from 0 to 128 [ 43.990458][ T3906] Invalid ELF header magic: != ELF [ 44.039230][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.046698][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.054106][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.061536][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.068952][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.076425][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.083825][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.091198][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.096194][ T3906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 44.098680][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.115002][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.122382][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.129796][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.137292][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.144698][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.152177][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.159594][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.167010][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 44.253600][ T3378] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 44.455899][ T3927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 44.477821][ T3930] loop3: detected capacity change from 0 to 256 [ 44.490037][ T3930] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.578713][ T3375] usb 5-1: enqueue for inactive port 0 [ 44.586120][ T3375] usb 5-1: enqueue for inactive port 0 [ 44.613022][ T3936] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 44.619637][ T3936] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 44.627239][ T3936] vhci_hcd vhci_hcd.0: Device attached [ 44.663438][ T3940] vhci_hcd: connection closed [ 44.663638][ T29] vhci_hcd: stop threads [ 44.672639][ T29] vhci_hcd: release socket [ 44.677114][ T29] vhci_hcd: disconnect device [ 44.693194][ T3375] vhci_hcd: vhci_device speed not set [ 45.218526][ T3955] loop3: detected capacity change from 0 to 2048 [ 45.252080][ T3955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.296254][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.395883][ T3964] FAULT_INJECTION: forcing a failure. [ 45.395883][ T3964] name failslab, interval 1, probability 0, space 0, times 0 [ 45.395909][ T3964] CPU: 1 UID: 0 PID: 3964 Comm: syz.3.155 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 45.395935][ T3964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.395946][ T3964] Call Trace: [ 45.395951][ T3964] [ 45.395958][ T3964] dump_stack_lvl+0xf2/0x150 [ 45.395988][ T3964] dump_stack+0x15/0x1a [ 45.396011][ T3964] should_fail_ex+0x24a/0x260 [ 45.396043][ T3964] should_failslab+0x8f/0xb0 [ 45.396074][ T3964] kmem_cache_alloc_noprof+0x52/0x320 [ 45.396097][ T3964] ? mas_alloc_nodes+0x1e3/0x490 [ 45.396133][ T3964] mas_alloc_nodes+0x1e3/0x490 [ 45.396178][ T3964] mas_preallocate+0x44a/0x650 [ 45.396212][ T3964] commit_merge+0x263/0x740 [ 45.396248][ T3964] vma_merge_existing_range+0x8d1/0xab0 [ 45.396272][ T3964] ? vma_merge_existing_range+0x291/0xab0 [ 45.396298][ T3964] vma_modify+0x41/0x200 [ 45.396315][ T3964] vma_modify_policy+0xeb/0x120 [ 45.396334][ T3964] mbind_range+0x1d8/0x490 [ 45.396363][ T3964] __se_sys_mbind+0x95c/0x11c0 [ 45.396393][ T3964] __x64_sys_mbind+0x78/0x90 [ 45.396411][ T3964] x64_sys_call+0x2662/0x2dc0 [ 45.396446][ T3964] do_syscall_64+0xc9/0x1c0 [ 45.396478][ T3964] ? clear_bhb_loop+0x55/0xb0 [ 45.396506][ T3964] ? clear_bhb_loop+0x55/0xb0 [ 45.396534][ T3964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.396558][ T3964] RIP: 0033:0x7f85011ed169 [ 45.396571][ T3964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.396589][ T3964] RSP: 002b:00007f84ff851038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 45.396607][ T3964] RAX: ffffffffffffffda RBX: 00007f8501405fa0 RCX: 00007f85011ed169 [ 45.396617][ T3964] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000400000001000 [ 45.396628][ T3964] RBP: 00007f84ff851090 R08: 0000000000000000 R09: 0000000000000000 [ 45.396641][ T3964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.396652][ T3964] R13: 0000000000000000 R14: 00007f8501405fa0 R15: 00007fff166d8c28 [ 45.396670][ T3964] [ 45.466195][ T3969] FAULT_INJECTION: forcing a failure. [ 45.466195][ T3969] name failslab, interval 1, probability 0, space 0, times 0 [ 45.645616][ T3969] CPU: 1 UID: 0 PID: 3969 Comm: syz.3.157 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 45.645642][ T3969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.645654][ T3969] Call Trace: [ 45.645660][ T3969] [ 45.645675][ T3969] dump_stack_lvl+0xf2/0x150 [ 45.645701][ T3969] dump_stack+0x15/0x1a [ 45.645805][ T3969] should_fail_ex+0x24a/0x260 [ 45.645860][ T3969] ? audit_log_d_path+0x8e/0x150 [ 45.645899][ T3969] should_failslab+0x8f/0xb0 [ 45.645931][ T3969] __kmalloc_cache_noprof+0x4e/0x320 [ 45.645961][ T3969] audit_log_d_path+0x8e/0x150 [ 45.645997][ T3969] audit_log_d_path_exe+0x42/0x70 [ 45.646064][ T3969] audit_log_task+0x1ec/0x250 [ 45.646090][ T3969] audit_seccomp+0x68/0x130 [ 45.646117][ T3969] __seccomp_filter+0x6fa/0x1180 [ 45.646143][ T3969] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 45.646238][ T3969] ? vfs_write+0x644/0x920 [ 45.646272][ T3969] __secure_computing+0x9f/0x1c0 [ 45.646297][ T3969] syscall_trace_enter+0xd1/0x1f0 [ 45.646324][ T3969] do_syscall_64+0xaa/0x1c0 [ 45.646403][ T3969] ? clear_bhb_loop+0x55/0xb0 [ 45.646431][ T3969] ? clear_bhb_loop+0x55/0xb0 [ 45.646460][ T3969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.646484][ T3969] RIP: 0033:0x7f85011ed169 [ 45.646496][ T3969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.646521][ T3969] RSP: 002b:00007f84ff851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 45.646539][ T3969] RAX: ffffffffffffffda RBX: 00007f8501405fa0 RCX: 00007f85011ed169 [ 45.646552][ T3969] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 45.646620][ T3969] RBP: 00007f84ff851090 R08: 0000000000000000 R09: 0000000000000000 [ 45.646704][ T3969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.646717][ T3969] R13: 0000000000000000 R14: 00007f8501405fa0 R15: 00007fff166d8c28 [ 45.646736][ T3969] [ 45.782973][ T3973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 45.886907][ T3973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 45.917675][ T3963] FAULT_INJECTION: forcing a failure. [ 45.917675][ T3963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.930758][ T3963] CPU: 1 UID: 0 PID: 3963 Comm: syz.1.153 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 45.930822][ T3963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.930833][ T3963] Call Trace: [ 45.930839][ T3963] [ 45.930846][ T3963] dump_stack_lvl+0xf2/0x150 [ 45.930876][ T3963] dump_stack+0x15/0x1a [ 45.930898][ T3963] should_fail_ex+0x24a/0x260 [ 45.930929][ T3963] should_fail+0xb/0x10 [ 45.930956][ T3963] should_fail_usercopy+0x1a/0x20 [ 45.930986][ T3963] _copy_to_user+0x20/0xa0 [ 45.931029][ T3963] simple_read_from_buffer+0xa0/0x110 [ 45.931057][ T3963] proc_fail_nth_read+0xf9/0x140 [ 45.931101][ T3963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 45.931129][ T3963] vfs_read+0x19b/0x6f0 [ 45.931152][ T3963] ? __rcu_read_unlock+0x4e/0x70 [ 45.931210][ T3963] ? __fget_files+0x17c/0x1c0 [ 45.931246][ T3963] ksys_read+0xe8/0x1b0 [ 45.931271][ T3963] __x64_sys_read+0x42/0x50 [ 45.931354][ T3963] x64_sys_call+0x2874/0x2dc0 [ 45.931430][ T3963] do_syscall_64+0xc9/0x1c0 [ 45.931463][ T3963] ? clear_bhb_loop+0x55/0xb0 [ 45.931486][ T3963] ? clear_bhb_loop+0x55/0xb0 [ 45.931563][ T3963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.931588][ T3963] RIP: 0033:0x7f894716bb7c [ 45.931603][ T3963] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 45.931622][ T3963] RSP: 002b:00007f89457d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 45.931640][ T3963] RAX: ffffffffffffffda RBX: 00007f8947385fa0 RCX: 00007f894716bb7c [ 45.931719][ T3963] RDX: 000000000000000f RSI: 00007f89457d70a0 RDI: 0000000000000005 [ 45.931731][ T3963] RBP: 00007f89457d7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.931741][ T3963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.931751][ T3963] R13: 0000000000000000 R14: 00007f8947385fa0 R15: 00007ffc2858fea8 [ 45.931769][ T3963] [ 45.953975][ T3979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.162'. [ 46.099564][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 46.146811][ T3987] loop0: detected capacity change from 0 to 128 [ 46.187791][ T3991] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28793 sclass=netlink_xfrm_socket pid=3991 comm=syz.1.166 [ 46.206673][ T3992] loop1: detected capacity change from 0 to 512 [ 46.221442][ T3987] Invalid ELF header magic: != ELF [ 46.233522][ T3992] ext4: Unknown parameter 'ethtool' [ 46.240532][ T3994] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 46.247218][ T3994] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 46.254832][ T3994] vhci_hcd vhci_hcd.0: Device attached [ 46.270244][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.277708][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.285142][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.292535][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.300030][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.303518][ T3987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 46.307461][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.323648][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.331033][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.333209][ T3996] vhci_hcd: connection closed [ 46.339051][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.351676][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.359171][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.366722][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.374170][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.381639][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.389059][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.396471][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.400252][ T29] vhci_hcd: stop threads [ 46.403887][ T3375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.411464][ T3375] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 46.415637][ T29] vhci_hcd: release socket [ 46.429642][ T29] vhci_hcd: disconnect device [ 46.439161][ T4002] loop1: detected capacity change from 0 to 512 [ 46.439418][ T3001] udevd[3001]: worker [3619] terminated by signal 33 (Unknown signal 33) [ 46.454805][ T1040] vhci_hcd: vhci_device speed not set [ 46.460872][ T4002] EXT4-fs: Ignoring removed orlov option [ 46.472547][ T4002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.481908][ T4002] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 46.490153][ T4002] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.497835][ T4002] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.168: bg 0: block 248: padding at end of block bitmap is not set [ 46.513437][ T4002] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.168: Failed to acquire dquot type 1 [ 46.525148][ T4002] EXT4-fs (loop1): 1 truncate cleaned up [ 46.531386][ T4002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.552660][ T4002] syz.1.168 (4002) used greatest stack depth: 9136 bytes left [ 46.560535][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.637755][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 46.637770][ T30] audit: type=1400 audit(1742024866.474:718): avc: denied { ioctl } for pid=4012 comm="syz.0.172" path="socket:[5792]" dev="sockfs" ino=5792 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.680722][ T4013] bridge0: port 3(macsec1) entered blocking state [ 46.687343][ T4013] bridge0: port 3(macsec1) entered disabled state [ 46.694871][ T4013] macsec1: entered allmulticast mode [ 46.700224][ T4013] bridge0: entered allmulticast mode [ 46.706762][ T4013] macsec1: left allmulticast mode [ 46.711844][ T4013] bridge0: left allmulticast mode [ 46.826747][ T4017] FAULT_INJECTION: forcing a failure. [ 46.826747][ T4017] name failslab, interval 1, probability 0, space 0, times 0 [ 46.839488][ T4017] CPU: 0 UID: 0 PID: 4017 Comm: syz.0.174 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 46.839511][ T4017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.839523][ T4017] Call Trace: [ 46.839529][ T4017] [ 46.839535][ T4017] dump_stack_lvl+0xf2/0x150 [ 46.839570][ T4017] dump_stack+0x15/0x1a [ 46.839593][ T4017] should_fail_ex+0x24a/0x260 [ 46.839653][ T4017] should_failslab+0x8f/0xb0 [ 46.839710][ T4017] __kmalloc_node_noprof+0xad/0x410 [ 46.839731][ T4017] ? page_counter_charge+0x21a/0x240 [ 46.839753][ T4017] ? __kvmalloc_node_noprof+0x72/0x170 [ 46.839867][ T4017] __kvmalloc_node_noprof+0x72/0x170 [ 46.839899][ T4017] xt_alloc_entry_offsets+0x47/0x50 [ 46.839932][ T4017] translate_table+0xa0/0x1080 [ 46.839954][ T4017] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 46.840004][ T4017] ? _copy_from_user+0x89/0xa0 [ 46.840027][ T4017] do_ip6t_set_ctl+0x7cc/0x8c0 [ 46.840051][ T4017] ? kstrtouint+0x77/0xc0 [ 46.840148][ T4017] nf_setsockopt+0x195/0x1b0 [ 46.840167][ T4017] ipv6_setsockopt+0x10f/0x130 [ 46.840203][ T4017] tcp_setsockopt+0x93/0xb0 [ 46.840237][ T4017] sock_common_setsockopt+0x64/0x80 [ 46.840305][ T4017] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 46.840345][ T4017] __sys_setsockopt+0x187/0x200 [ 46.840371][ T4017] __x64_sys_setsockopt+0x66/0x80 [ 46.840445][ T4017] x64_sys_call+0x282e/0x2dc0 [ 46.840474][ T4017] do_syscall_64+0xc9/0x1c0 [ 46.840502][ T4017] ? clear_bhb_loop+0x55/0xb0 [ 46.840605][ T4017] ? clear_bhb_loop+0x55/0xb0 [ 46.840632][ T4017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.840666][ T4017] RIP: 0033:0x7ff48e38d169 [ 46.840679][ T4017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.840769][ T4017] RSP: 002b:00007ff48c9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 46.840785][ T4017] RAX: ffffffffffffffda RBX: 00007ff48e5a5fa0 RCX: 00007ff48e38d169 [ 46.840796][ T4017] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 46.840862][ T4017] RBP: 00007ff48c9f1090 R08: 0000000000000540 R09: 0000000000000000 [ 46.840879][ T4017] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.840889][ T4017] R13: 0000000000000000 R14: 00007ff48e5a5fa0 R15: 00007fffac8cd068 [ 46.840914][ T4017] [ 47.142321][ T4023] loop9: detected capacity change from 0 to 7 [ 47.148863][ T4023] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.150863][ T30] audit: type=1400 audit(1742024866.974:719): avc: denied { append } for pid=4020 comm="syz.3.177" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.156764][ T4023] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.156785][ T4023] loop9: unable to read partition table [ 47.198155][ T4023] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 47.198155][ T4023] U) failed (rc=-5) [ 47.237839][ T4035] FAULT_INJECTION: forcing a failure. [ 47.237839][ T4035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.238005][ T30] audit: type=1400 audit(1742024867.074:720): avc: denied { append } for pid=4034 comm="syz.1.182" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.251070][ T4035] CPU: 1 UID: 0 PID: 4035 Comm: syz.1.182 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 47.251105][ T4035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.251123][ T4035] Call Trace: [ 47.251131][ T4035] [ 47.251140][ T4035] dump_stack_lvl+0xf2/0x150 [ 47.251231][ T4035] dump_stack+0x15/0x1a [ 47.251258][ T4035] should_fail_ex+0x24a/0x260 [ 47.251326][ T4035] should_fail+0xb/0x10 [ 47.251353][ T4035] should_fail_usercopy+0x1a/0x20 [ 47.251386][ T4035] _copy_from_user+0x1c/0xa0 [ 47.251410][ T4035] memdup_user+0x64/0xc0 [ 47.251467][ T4035] ppp_get_filter+0xdf/0x160 [ 47.251497][ T4035] ppp_ioctl+0xbdd/0x11b0 [ 47.251562][ T4035] ? __fget_files+0x17c/0x1c0 [ 47.251634][ T4035] ? __pfx_ppp_ioctl+0x10/0x10 [ 47.251682][ T4035] __se_sys_ioctl+0xc9/0x140 [ 47.251713][ T4035] __x64_sys_ioctl+0x43/0x50 [ 47.251743][ T4035] x64_sys_call+0x1690/0x2dc0 [ 47.251776][ T4035] do_syscall_64+0xc9/0x1c0 [ 47.251826][ T4035] ? clear_bhb_loop+0x55/0xb0 [ 47.251859][ T4035] ? clear_bhb_loop+0x55/0xb0 [ 47.251909][ T4035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.251943][ T4035] RIP: 0033:0x7f894716d169 [ 47.251968][ T4035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.251991][ T4035] RSP: 002b:00007f89457d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.252015][ T4035] RAX: ffffffffffffffda RBX: 00007f8947385fa0 RCX: 00007f894716d169 [ 47.252054][ T4035] RDX: 00004000000003c0 RSI: 0000000040107446 RDI: 0000000000000004 [ 47.252069][ T4035] RBP: 00007f89457d7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.252084][ T4035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.252160][ T4035] R13: 0000000000000000 R14: 00007f8947385fa0 R15: 00007ffc2858fea8 [ 47.252182][ T4035] [ 47.255058][ T4023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4023 comm=syz.3.177 [ 47.274994][ T30] audit: type=1400 audit(1742024867.094:721): avc: denied { ioctl } for pid=4020 comm="syz.3.177" path="socket:[6551]" dev="sockfs" ino=6551 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 47.294684][ T25] usb 7-1: enqueue for inactive port 0 [ 47.300741][ T4037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 47.301112][ T25] usb 7-1: enqueue for inactive port 0 [ 47.539201][ T4040] FAULT_INJECTION: forcing a failure. [ 47.539201][ T4040] name failslab, interval 1, probability 0, space 0, times 0 [ 47.551957][ T4040] CPU: 1 UID: 0 PID: 4040 Comm: syz.3.184 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 47.551982][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.551995][ T4040] Call Trace: [ 47.552000][ T4040] [ 47.552007][ T4040] dump_stack_lvl+0xf2/0x150 [ 47.552037][ T4040] dump_stack+0x15/0x1a [ 47.552107][ T4040] should_fail_ex+0x24a/0x260 [ 47.552139][ T4040] should_failslab+0x8f/0xb0 [ 47.552239][ T4040] kmem_cache_alloc_noprof+0x52/0x320 [ 47.552261][ T4040] ? skb_clone+0x154/0x1f0 [ 47.552285][ T4040] skb_clone+0x154/0x1f0 [ 47.552338][ T4040] __netlink_deliver_tap+0x2bd/0x4f0 [ 47.552373][ T4040] netlink_unicast+0x64a/0x670 [ 47.552401][ T4040] netlink_sendmsg+0x5cc/0x6e0 [ 47.552439][ T4040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.552473][ T4040] __sock_sendmsg+0x140/0x180 [ 47.552544][ T4040] ____sys_sendmsg+0x326/0x4b0 [ 47.552636][ T4040] __sys_sendmsg+0x19d/0x230 [ 47.552674][ T4040] __x64_sys_sendmsg+0x46/0x50 [ 47.552750][ T4040] x64_sys_call+0x2734/0x2dc0 [ 47.552777][ T4040] do_syscall_64+0xc9/0x1c0 [ 47.552881][ T4040] ? clear_bhb_loop+0x55/0xb0 [ 47.552910][ T4040] ? clear_bhb_loop+0x55/0xb0 [ 47.552952][ T4040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.553016][ T4040] RIP: 0033:0x7f85011ed169 [ 47.553029][ T4040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.553063][ T4040] RSP: 002b:00007f84ff851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.553083][ T4040] RAX: ffffffffffffffda RBX: 00007f8501405fa0 RCX: 00007f85011ed169 [ 47.553096][ T4040] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000004 [ 47.553109][ T4040] RBP: 00007f84ff851090 R08: 0000000000000000 R09: 0000000000000000 [ 47.553133][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.553145][ T4040] R13: 0000000000000000 R14: 00007f8501405fa0 R15: 00007fff166d8c28 [ 47.553161][ T4040] [ 47.770425][ T25] vhci_hcd: vhci_device speed not set [ 47.777494][ T4043] netlink: 68 bytes leftover after parsing attributes in process `syz.1.185'. [ 47.798897][ T30] audit: type=1400 audit(1742024867.634:722): avc: denied { create } for pid=4042 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.825212][ T30] audit: type=1400 audit(1742024867.664:723): avc: denied { setopt } for pid=4042 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.921063][ T4059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.960333][ T30] audit: type=1400 audit(1742024867.794:724): avc: denied { read write } for pid=4068 comm="syz.1.194" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 47.986385][ T30] audit: type=1400 audit(1742024867.824:725): avc: denied { open } for pid=4068 comm="syz.1.194" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 48.051870][ T4078] FAULT_INJECTION: forcing a failure. [ 48.051870][ T4078] name failslab, interval 1, probability 0, space 0, times 0 [ 48.064599][ T4078] CPU: 0 UID: 0 PID: 4078 Comm: syz.3.198 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 48.064625][ T4078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.064637][ T4078] Call Trace: [ 48.064643][ T4078] [ 48.064649][ T4078] dump_stack_lvl+0xf2/0x150 [ 48.064674][ T4078] dump_stack+0x15/0x1a [ 48.064695][ T4081] loop0: detected capacity change from 0 to 1024 [ 48.064694][ T4078] should_fail_ex+0x24a/0x260 [ 48.064759][ T4078] should_failslab+0x8f/0xb0 [ 48.064823][ T4078] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 48.064849][ T4078] ? __d_alloc+0x3d/0x350 [ 48.064876][ T4078] __d_alloc+0x3d/0x350 [ 48.064902][ T4078] d_alloc_pseudo+0x1e/0x80 [ 48.064933][ T4078] alloc_file_pseudo+0x73/0x160 [ 48.064962][ T4078] __shmem_file_setup+0x1bb/0x1f0 [ 48.065004][ T4078] shmem_file_setup+0x3b/0x50 [ 48.065024][ T4078] __se_sys_memfd_create+0x2e1/0x5a0 [ 48.065093][ T4078] __x64_sys_memfd_create+0x31/0x40 [ 48.065129][ T4078] x64_sys_call+0x2d4c/0x2dc0 [ 48.065159][ T4078] do_syscall_64+0xc9/0x1c0 [ 48.065195][ T4078] ? clear_bhb_loop+0x55/0xb0 [ 48.065226][ T4078] ? clear_bhb_loop+0x55/0xb0 [ 48.065322][ T4078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.065398][ T4078] RIP: 0033:0x7f85011ed169 [ 48.065416][ T4078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.065436][ T4078] RSP: 002b:00007f84ff850e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 48.065456][ T4078] RAX: ffffffffffffffda RBX: 0000000000000472 RCX: 00007f85011ed169 [ 48.065470][ T4078] RDX: 00007f84ff850ef0 RSI: 0000000000000000 RDI: 00007f850126ec3c [ 48.065491][ T4078] RBP: 0000400000000940 R08: 00007f84ff850bb7 R09: 00007f84ff850e40 [ 48.065505][ T4078] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000480 [ 48.065518][ T4078] R13: 00007f84ff850ef0 R14: 00007f84ff850eb0 R15: 0000400000000200 [ 48.065567][ T4078] [ 48.266943][ T4081] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 48.275868][ T30] audit: type=1326 audit(1742024868.104:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894716d169 code=0x7ffc0000 [ 48.299228][ T30] audit: type=1326 audit(1742024868.104:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f894716d169 code=0x7ffc0000 [ 48.336345][ T4087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=4087 comm=syz.4.203 [ 48.369497][ T4094] SELinux: security_context_str_to_sid () failed with errno=-22 [ 48.395476][ T4098] loop3: detected capacity change from 0 to 128 [ 48.401949][ T4096] loop4: detected capacity change from 0 to 128 [ 48.402943][ T4100] FAULT_INJECTION: forcing a failure. [ 48.402943][ T4100] name failslab, interval 1, probability 0, space 0, times 0 [ 48.420866][ T4100] CPU: 1 UID: 0 PID: 4100 Comm: syz.1.207 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 48.420890][ T4100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.420903][ T4100] Call Trace: [ 48.420910][ T4100] [ 48.420917][ T4100] dump_stack_lvl+0xf2/0x150 [ 48.420960][ T4100] dump_stack+0x15/0x1a [ 48.420982][ T4100] should_fail_ex+0x24a/0x260 [ 48.421027][ T4100] should_failslab+0x8f/0xb0 [ 48.421100][ T4100] __kmalloc_noprof+0xab/0x3f0 [ 48.421124][ T4100] ? sock_kmalloc+0x83/0xc0 [ 48.421154][ T4100] sock_kmalloc+0x83/0xc0 [ 48.421185][ T4100] ____sys_sendmsg+0x127/0x4b0 [ 48.421274][ T4100] __sys_sendmsg+0x19d/0x230 [ 48.421431][ T4100] __x64_sys_sendmsg+0x46/0x50 [ 48.421471][ T4100] x64_sys_call+0x2734/0x2dc0 [ 48.421501][ T4100] do_syscall_64+0xc9/0x1c0 [ 48.421535][ T4100] ? clear_bhb_loop+0x55/0xb0 [ 48.421559][ T4100] ? clear_bhb_loop+0x55/0xb0 [ 48.421618][ T4100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.421648][ T4100] RIP: 0033:0x7f894716d169 [ 48.421663][ T4100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.421682][ T4100] RSP: 002b:00007f89457d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.421763][ T4100] RAX: ffffffffffffffda RBX: 00007f8947385fa0 RCX: 00007f894716d169 [ 48.421777][ T4100] RDX: 0000000000000000 RSI: 0000400000001600 RDI: 0000000000000003 [ 48.421789][ T4100] RBP: 00007f89457d7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.421802][ T4100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.421814][ T4100] R13: 0000000000000000 R14: 00007f8947385fa0 R15: 00007ffc2858fea8 [ 48.421833][ T4100] [ 48.617756][ T4096] Invalid ELF header magic: != ELF [ 48.631109][ T4096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.205'. [ 48.634267][ T4098] Invalid ELF header magic: != ELF [ 48.641093][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.652712][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.660240][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.667648][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.675078][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.682511][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.682526][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.689949][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.697276][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.704655][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.711979][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.719351][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.726702][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.734081][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.741408][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.748767][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.756126][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.763501][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.763525][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.770877][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.778257][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.785619][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.792964][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.800322][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.807677][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.815032][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.822384][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.829751][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.837113][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.844474][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.851798][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.866207][ T10] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 48.866618][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.874552][ T4098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 48.883491][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.907449][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.925985][ T4110] netlink: 'syz.0.210': attribute type 1 has an invalid length. [ 48.933683][ T4110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.210'. [ 48.943355][ T3375] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 49.021606][ T4123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'. [ 49.033826][ T4126] loop4: detected capacity change from 0 to 256 [ 49.041530][ T4126] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.047116][ T4130] FAULT_INJECTION: forcing a failure. [ 49.047116][ T4130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.065164][ T4130] CPU: 1 UID: 0 PID: 4130 Comm: syz.2.218 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 49.065190][ T4130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.065201][ T4130] Call Trace: [ 49.065206][ T4130] [ 49.065213][ T4130] dump_stack_lvl+0xf2/0x150 [ 49.065291][ T4130] dump_stack+0x15/0x1a [ 49.065313][ T4130] should_fail_ex+0x24a/0x260 [ 49.065342][ T4130] should_fail+0xb/0x10 [ 49.065368][ T4130] should_fail_usercopy+0x1a/0x20 [ 49.065483][ T4130] _copy_from_user+0x1c/0xa0 [ 49.065515][ T4130] kstrtouint_from_user+0x76/0xe0 [ 49.065550][ T4130] ? 0xffffffff81000000 [ 49.065564][ T4130] ? selinux_file_permission+0x22a/0x360 [ 49.065596][ T4130] proc_fail_nth_write+0x4f/0x150 [ 49.065624][ T4130] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.065700][ T4130] vfs_write+0x27d/0x920 [ 49.065751][ T4130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.065781][ T4130] ? __fget_files+0x17c/0x1c0 [ 49.065814][ T4130] ksys_write+0xe8/0x1b0 [ 49.065840][ T4130] __x64_sys_write+0x42/0x50 [ 49.065946][ T4130] x64_sys_call+0x287e/0x2dc0 [ 49.065978][ T4130] do_syscall_64+0xc9/0x1c0 [ 49.066047][ T4130] ? clear_bhb_loop+0x55/0xb0 [ 49.066073][ T4130] ? clear_bhb_loop+0x55/0xb0 [ 49.066098][ T4130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.066187][ T4130] RIP: 0033:0x7f7c0032bc1f [ 49.066200][ T4130] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 49.066215][ T4130] RSP: 002b:00007f7bfe997030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 49.066262][ T4130] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7c0032bc1f [ 49.066272][ T4130] RDX: 0000000000000001 RSI: 00007f7bfe9970a0 RDI: 0000000000000005 [ 49.066283][ T4130] RBP: 00007f7bfe997090 R08: 0000000000000000 R09: 0000000000000000 [ 49.066293][ T4130] R10: 0000400000001ec0 R11: 0000000000000293 R12: 0000000000000001 [ 49.066303][ T4130] R13: 0000000000000000 R14: 00007f7c00545fa0 R15: 00007fff3f121018 [ 49.066319][ T4130] [ 49.315296][ T4139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 49.330622][ T4140] loop1: detected capacity change from 0 to 512 [ 49.351847][ T4140] EXT4-fs (loop1): failed to initialize system zone (-117) [ 49.378140][ T4140] EXT4-fs (loop1): mount failed [ 49.416843][ T4145] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 49.423464][ T4145] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 49.431135][ T4145] vhci_hcd vhci_hcd.0: Device attached [ 49.435704][ T4154] serio: Serial port ptm1 [ 49.466292][ T4153] loop1: detected capacity change from 0 to 128 [ 49.488205][ T4156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 49.497139][ T4156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 49.509562][ T4148] vhci_hcd: connection closed [ 49.509796][ T12] vhci_hcd: stop threads [ 49.518799][ T12] vhci_hcd: release socket [ 49.523240][ T12] vhci_hcd: disconnect device [ 49.543349][ T4153] Invalid ELF header magic: != ELF [ 49.564044][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.571475][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.578926][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.586434][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.593844][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.601289][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.608691][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.614665][ T4167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'. [ 49.616116][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.632369][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.639868][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.647297][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.654726][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.662169][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.669583][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.677137][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.684561][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.691998][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.730603][ T3375] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 49.819699][ T4174] FAULT_INJECTION: forcing a failure. [ 49.819699][ T4174] name failslab, interval 1, probability 0, space 0, times 0 [ 49.832385][ T4174] CPU: 1 UID: 0 PID: 4174 Comm: syz.3.232 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 49.832410][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.832423][ T4174] Call Trace: [ 49.832430][ T4174] [ 49.832437][ T4174] dump_stack_lvl+0xf2/0x150 [ 49.832492][ T4174] dump_stack+0x15/0x1a [ 49.832511][ T4174] should_fail_ex+0x24a/0x260 [ 49.832542][ T4174] should_failslab+0x8f/0xb0 [ 49.832647][ T4174] __kmalloc_node_noprof+0xad/0x410 [ 49.832747][ T4174] ? __kvmalloc_node_noprof+0x72/0x170 [ 49.832773][ T4174] __kvmalloc_node_noprof+0x72/0x170 [ 49.832797][ T4174] xt_alloc_table_info+0x3d/0x80 [ 49.832870][ T4174] do_ip6t_set_ctl+0x678/0x8c0 [ 49.832892][ T4174] ? kstrtouint+0x77/0xc0 [ 49.833013][ T4174] nf_setsockopt+0x195/0x1b0 [ 49.833034][ T4174] ipv6_setsockopt+0x10f/0x130 [ 49.833087][ T4174] tcp_setsockopt+0x93/0xb0 [ 49.833115][ T4174] sock_common_setsockopt+0x64/0x80 [ 49.833192][ T4174] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 49.833307][ T4174] __sys_setsockopt+0x187/0x200 [ 49.833336][ T4174] __x64_sys_setsockopt+0x66/0x80 [ 49.833360][ T4174] x64_sys_call+0x282e/0x2dc0 [ 49.833390][ T4174] do_syscall_64+0xc9/0x1c0 [ 49.833483][ T4174] ? clear_bhb_loop+0x55/0xb0 [ 49.833508][ T4174] ? clear_bhb_loop+0x55/0xb0 [ 49.833534][ T4174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.833563][ T4174] RIP: 0033:0x7f85011ed169 [ 49.833578][ T4174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.833623][ T4174] RSP: 002b:00007f84ff851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.833642][ T4174] RAX: ffffffffffffffda RBX: 00007f8501405fa0 RCX: 00007f85011ed169 [ 49.833726][ T4174] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 49.833739][ T4174] RBP: 00007f84ff851090 R08: 00000000000003c0 R09: 0000000000000000 [ 49.833750][ T4174] R10: 0000400000001040 R11: 0000000000000246 R12: 0000000000000001 [ 49.833760][ T4174] R13: 0000000000000000 R14: 00007f8501405fa0 R15: 00007fff166d8c28 [ 49.833775][ T4174] [ 50.087341][ T4182] program syz.0.236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.139001][ T4188] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 50.241934][ T4207] FAULT_INJECTION: forcing a failure. [ 50.241934][ T4207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.243599][ T4203] bridge0: entered promiscuous mode [ 50.255080][ T4207] CPU: 1 UID: 0 PID: 4207 Comm: syz.3.243 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 50.255116][ T4207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.255157][ T4207] Call Trace: [ 50.255163][ T4207] [ 50.255170][ T4207] dump_stack_lvl+0xf2/0x150 [ 50.255200][ T4207] dump_stack+0x15/0x1a [ 50.255223][ T4207] should_fail_ex+0x24a/0x260 [ 50.255256][ T4207] should_fail+0xb/0x10 [ 50.255333][ T4207] should_fail_usercopy+0x1a/0x20 [ 50.255421][ T4207] _copy_to_user+0x20/0xa0 [ 50.255442][ T4207] simple_read_from_buffer+0xa0/0x110 [ 50.255502][ T4207] proc_fail_nth_read+0xf9/0x140 [ 50.255582][ T4207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.255606][ T4207] vfs_read+0x19b/0x6f0 [ 50.255629][ T4207] ? __rcu_read_unlock+0x4e/0x70 [ 50.255670][ T4207] ? __fget_files+0x17c/0x1c0 [ 50.255764][ T4207] ksys_read+0xe8/0x1b0 [ 50.255788][ T4207] __x64_sys_read+0x42/0x50 [ 50.255818][ T4207] x64_sys_call+0x2874/0x2dc0 [ 50.255864][ T4207] do_syscall_64+0xc9/0x1c0 [ 50.255900][ T4207] ? clear_bhb_loop+0x55/0xb0 [ 50.255931][ T4207] ? clear_bhb_loop+0x55/0xb0 [ 50.255961][ T4207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.256045][ T4207] RIP: 0033:0x7f85011ebb7c [ 50.256093][ T4207] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 50.256113][ T4207] RSP: 002b:00007f84ff851030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.256134][ T4207] RAX: ffffffffffffffda RBX: 00007f8501405fa0 RCX: 00007f85011ebb7c [ 50.256148][ T4207] RDX: 000000000000000f RSI: 00007f84ff8510a0 RDI: 0000000000000007 [ 50.256163][ T4207] RBP: 00007f84ff851090 R08: 0000000000000000 R09: 0000000000000000 [ 50.256176][ T4207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.256189][ T4207] R13: 0000000000000000 R14: 00007f8501405fa0 R15: 00007fff166d8c28 [ 50.256209][ T4207] [ 50.455847][ T4203] bridge0: port 3(macsec1) entered blocking state [ 50.462323][ T4203] bridge0: port 3(macsec1) entered disabled state [ 50.468847][ T4203] macsec1: entered allmulticast mode [ 50.474214][ T4203] bridge0: entered allmulticast mode [ 50.480141][ T4203] macsec1: left allmulticast mode [ 50.485400][ T4203] bridge0: left allmulticast mode [ 50.490673][ T4203] bridge0: left promiscuous mode [ 50.503475][ T4215] loop3: detected capacity change from 0 to 128 [ 50.516920][ T4217] loop1: detected capacity change from 0 to 128 [ 50.520442][ T4215] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.546008][ T4215] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.564367][ T4217] Invalid ELF header magic: != ELF [ 50.579662][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.587170][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.594628][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.602054][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.609449][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.617016][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.624495][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.631969][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.639635][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.647142][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.654563][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.661930][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.669330][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.676728][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.684217][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.691613][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.699029][ T1040] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 50.707012][ T1040] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 50.755191][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.773320][ T4235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4235 comm=syz.3.251 [ 50.809839][ T3375] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 50.824576][ T3375] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.877853][ T4254] bridge0: entered promiscuous mode [ 50.888424][ T4254] bridge0: port 3(macsec1) entered blocking state [ 50.894963][ T4254] bridge0: port 3(macsec1) entered disabled state [ 50.902357][ T4254] macsec1: entered allmulticast mode [ 50.907777][ T4254] bridge0: entered allmulticast mode [ 50.914656][ T4254] macsec1: left allmulticast mode [ 50.919720][ T4254] bridge0: left allmulticast mode [ 50.925351][ T4254] bridge0: left promiscuous mode [ 50.947579][ T4260] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 50.965626][ T4260] SELinux: syz.2.263 (4260) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 51.004491][ T4264] loop3: detected capacity change from 0 to 128 [ 51.035644][ T4272] loop2: detected capacity change from 0 to 128 [ 51.042184][ T4272] vfat: Unknown parameter '' [ 51.072191][ T4264] Invalid ELF header magic: != ELF [ 51.108349][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.115791][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.123231][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.130625][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.138056][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.145527][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.152912][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.160482][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.167881][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.175379][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.182805][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.190224][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.197784][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.205265][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.212681][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.220167][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.227622][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 51.237524][ T10] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 51.441217][ T4293] bridge0: entered promiscuous mode [ 51.449002][ T4293] bridge0: port 3(macsec1) entered blocking state [ 51.455523][ T4293] bridge0: port 3(macsec1) entered disabled state [ 51.463464][ T4293] macsec1: entered allmulticast mode [ 51.468840][ T4293] bridge0: entered allmulticast mode [ 51.475511][ T4293] macsec1: left allmulticast mode [ 51.480715][ T4293] bridge0: left allmulticast mode [ 51.492212][ T4293] bridge0: left promiscuous mode [ 51.580947][ T4300] ================================================================== [ 51.583926][ T4302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.589068][ T4300] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 51.605077][ T4300] [ 51.607399][ T4300] write to 0xffff888104569b10 of 8 bytes by task 4299 on cpu 1: [ 51.615027][ T4300] mas_wr_store_entry+0x1222/0x23f0 [ 51.620235][ T4300] mas_store_prealloc+0x6bf/0x960 [ 51.625263][ T4300] commit_merge+0x441/0x740 [ 51.629774][ T4300] vma_expand+0x211/0x360 [ 51.634120][ T4300] vma_merge_new_range+0x2da/0x340 [ 51.639254][ T4300] mmap_region+0x7e0/0x1620 [ 51.643759][ T4300] do_mmap+0x98a/0xc30 [ 51.647833][ T4300] vm_mmap_pgoff+0x16d/0x2d0 [ 51.652426][ T4300] ksys_mmap_pgoff+0xd0/0x330 [ 51.657110][ T4300] x64_sys_call+0x1940/0x2dc0 [ 51.661791][ T4300] do_syscall_64+0xc9/0x1c0 [ 51.666305][ T4300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.672209][ T4300] [ 51.674527][ T4300] read to 0xffff888104569b10 of 8 bytes by task 4300 on cpu 0: [ 51.682066][ T4300] mtree_range_walk+0x1b4/0x460 [ 51.686928][ T4300] mas_walk+0x16e/0x320 [ 51.691092][ T4300] lock_vma_under_rcu+0x95/0x270 [ 51.696033][ T4300] exc_page_fault+0x150/0x650 [ 51.700713][ T4300] asm_exc_page_fault+0x26/0x30 [ 51.705572][ T4300] [ 51.707887][ T4300] value changed: 0x00007f84ff830fff -> 0xffffffff855370f0 [ 51.714989][ T4300] [ 51.717305][ T4300] Reported by Kernel Concurrency Sanitizer on: [ 51.723444][ T4300] CPU: 0 UID: 0 PID: 4300 Comm: syz.3.279 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 51.734026][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.744083][ T4300] ================================================================== [ 51.753671][ T4302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.762217][ T4303] syzkaller0: create flow: hash 66604770 index 1 [ 51.771681][ T29] syzkaller0: tun_net_xmit 76 [ 51.777807][ T29] syzkaller0: tun_net_xmit 48 [ 51.793732][ T3375] syzkaller0: tun_net_xmit 76 [ 51.833899][ T4297] syzkaller0: delete flow: hash 66604770 index 1