last executing test programs: 2m11.215438758s ago: executing program 1 (id=92): socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m10.858165832s ago: executing program 1 (id=100): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x1, 0x7bf8580d, 0x0, 0xb3550aa4ba878396, 0x3, 0x1}, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000240)=0x1007e, 0x4) sendto$unix(r5, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x12162, 0x0) r7 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, &(0x7f0000000340)=@keyring={'key_or_keyring:', r4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x88a, &(0x7f0000000940)={[{@oldalloc}, {@jqfmt_vfsv0}, {@grpquota}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000a40)={'gre0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x40, 0x0, 0xba3, 0x1, {{0x1e, 0x4, 0x1, 0x38, 0x78, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x7a, [@rand_addr=0x64010100, @multicast2, @multicast1, @private=0xa010102, @private=0xa010100, @private=0xa010100, @broadcast, @remote, @private=0xa010100, @loopback]}, @timestamp_addr={0x44, 0xc, 0xd8, 0x1, 0xf, [{@multicast2, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0xb8, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x10000}, {@multicast1}, {@multicast1, 0xc2a0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) pipe(&(0x7f00000009c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sync_file_range(0xffffffffffffffff, 0x6, 0xb25a, 0x6) 2m10.669417535s ago: executing program 1 (id=104): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0xe5) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffe9, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = dup(r2) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 2m10.646799415s ago: executing program 1 (id=107): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) nanosleep(0x0, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="22f68919ef3018ff07002000003e000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095", @ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x891018, 0x0) 2m10.2053784s ago: executing program 1 (id=113): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x2000003e, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000002f00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @remote, 0x10000001}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000101000000001400000000000000290000000b00"], 0x48}}], 0x1, 0x4041080) r9 = socket(0x1, 0x803, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x63, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000100)) sync() getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 51.427061236s ago: executing program 3 (id=1020): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x2, 0xe5, 0x10000, 0x9997, 0x5}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r2, 0x6}, &(0x7f0000000180)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@empty, 0x40066, r3}) 51.325304098s ago: executing program 3 (id=1021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="fc", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa208000000000007020000f8ffffe4fb86bb0008000000b7040000000000008500000003000000950000000000000019d4d08b10b93afae1fef746c2f07284f4eaedae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000280)='.\x00', 0x25000001) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r9, 0x80080400) r10 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r10, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) 51.18311114s ago: executing program 3 (id=1022): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="591a1d9a2bdb0180c2250000080045000078000000000029907801000000e00000010000000040649078200200000000000000000000bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da000000000000000bb10000085b2e000000000000000000c2312195c4b01d4990c7a70864bef1f0524a72fc460b8cd26e095f24ab642591"], 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x8010, r2, 0xea747000) r3 = getpid() getpgid(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kvm_mmio\x00', r1, 0x0, 0x9}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001d0000009608000a00", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x70}, 0x1, 0x7}, 0x40000c0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, r7, 0x333, 0x0, 0x4}, 0x14}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)={0x2, 'rose0\x00', {0x7fffffff}, 0xfffb}) 51.126470841s ago: executing program 3 (id=1023): creat(&(0x7f0000000300)='./file0\x00', 0xe5) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 51.005416502s ago: executing program 3 (id=1024): creat(&(0x7f0000000300)='./file0\x00', 0xe5) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 51.004934012s ago: executing program 33 (id=1024): creat(&(0x7f0000000300)='./file0\x00', 0xe5) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 4.418409553s ago: executing program 4 (id=1714): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x4, 0x2f, 0x0, @loopback, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) 4.381478053s ago: executing program 4 (id=1715): r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 4.197761865s ago: executing program 5 (id=1716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="950000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x69, 0x0, 0x0, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 4.124977397s ago: executing program 5 (id=1718): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000140), 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001480)={0x0, 0x2, 0x2, 0x2dd}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x15) r5 = fcntl$dupfd(r1, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0x4, 0x0, &(0x7f0000000240)={0x2, 0x31, 0x0, 0xfffe}, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r3, &(0x7f0000000600)={'#! ', './file0', [], 0xa, "ecf851739256fa1aad00af8266eb2464822e0d000000000000a007d85eb40610fa5a513a79fb61f85e380a1e6cd721d52fc344523c080d39f14dccf6655a6bec8e037ed20c15bac8f2d96bd34f507659c09d06bc8e6d6da00d266a65e0055f9307f35de4c5a0329502da259bc6590867021d99cfaa4ce8fc5b76de2732c14fea619c3d11700ba34b90c3bb9a9e4f37bec058f0d6e8aeb80fea77b4e5842dc3c596b2b57df3005327706cb19cac0503c2c2e908d5bab5279c53017ff383ebd025a6fd59ff982f390000000000000000"}, 0xda) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES32=r1], 0x0, 0x17c4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2000000000000302, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRES64=r6], 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7, 0x0, 0x3}, 0x18) open(0x0, 0x40000, 0x141) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x404080, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) ioctl$TCSETSW2(r8, 0x5425, 0x0) r9 = fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r9) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) close(r9) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000080)=0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000af805f0b4b2a32d21ddda6bd61000000000000000000851000000200000046000000000000809500007b00000000850000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.013376508s ago: executing program 5 (id=1720): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c0000003a000701000000000000000003"], 0x9c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2006c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 3.963814779s ago: executing program 4 (id=1722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x401) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x2402, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) 3.446243965s ago: executing program 6 (id=1733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000dc0)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYBLOB="964bb71bf9"], 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.354832606s ago: executing program 6 (id=1736): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000300004003000000006000000000000000300000d000000000c0000000200000009000000030000000d0000000100000001000000000000080300000000612e5f0000"], &(0x7f0000000080)=""/53, 0x4e, 0x35, 0x1, 0x80000000, 0x10000, @value=r11}, 0x28) 3.310860397s ago: executing program 6 (id=1739): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18fc00000000000000050000000000000000200000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000540)="8d", 0x1, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400010, @void, @value}, 0x94) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r9, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r8) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {0x6}, {0x0, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.133496349s ago: executing program 5 (id=1742): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_pts(0xffffffffffffffff, 0x80000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000002c0)=0x2) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@init_itable_val={'init_itable', 0x3d, 0x200}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@debug}, {@nobh}, {@jqfmt_vfsv1}, {@bh}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) poll(&(0x7f00000001c0)=[{r5, 0x4}, {r7, 0x8040}, {r6, 0x40}, {r3, 0x470}, {r3, 0xd}, {r3, 0x24}, {r5, 0x200}, {r5, 0x200}], 0x8, 0x8) pwrite64(r6, &(0x7f0000000140)='+', 0x1, 0xf896) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async, rerun: 32) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.07765094s ago: executing program 5 (id=1744): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100000080000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="59bb22bd7000000020"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400010, @void, @value}, 0x94) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x10) 3.06787754s ago: executing program 4 (id=1745): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x4, 0x2f, 0x0, @loopback, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) 3.049132661s ago: executing program 4 (id=1746): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18fc00000000000000050000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) add_key$user(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000540)="8d", 0x1, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) 2.468023888s ago: executing program 2 (id=1752): creat(&(0x7f0000000300)='./file0\x00', 0xe5) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000001000731a4300000000009500000200000000e9"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffe9, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.451211318s ago: executing program 2 (id=1753): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c0000003a000701000000000000000003"], 0x9c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000940)=0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2006c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 1.600642579s ago: executing program 2 (id=1756): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x4, 0x2f, 0x0, @loopback, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) 1.581528459s ago: executing program 2 (id=1757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="fc", 0x1}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa208000000000007020000f8ffffe4fb86bb0008000000b7040000000000008500000003000000950000000000000019d4d08b10b93afae1fef746c2f07284f4eaedae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000280)='.\x00', 0x25000001) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r5, 0x80080400) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) 1.372451842s ago: executing program 0 (id=1758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000026689242e3a58f0400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) r10 = openat$cgroup_ro(r8, &(0x7f00000002c0)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000001580)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000140)=0x1000) 731.396481ms ago: executing program 2 (id=1759): r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 637.111552ms ago: executing program 2 (id=1760): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x10c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xe0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x10000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x3, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r11, r5, 0x0, 0x20000023893) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r13}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r14}, 0x10) 478.865114ms ago: executing program 0 (id=1761): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 368.375695ms ago: executing program 0 (id=1762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000dc0)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYBLOB="964bb71bf9"], 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 284.683686ms ago: executing program 6 (id=1763): creat(&(0x7f0000000300)='./file0\x00', 0xe5) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000001000731a4300000000009500000200000000e9"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffe9, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 255.131687ms ago: executing program 6 (id=1764): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x2000003e, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1}, 0x18) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffe9, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = dup(r0) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[]) 215.142427ms ago: executing program 6 (id=1766): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c0000003a000701000000000000000003"], 0x9c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000940)=0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2006c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 214.817917ms ago: executing program 0 (id=1767): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x4, 0x2f, 0x0, @loopback, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) 181.688248ms ago: executing program 0 (id=1768): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x6, 0x82080) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xffffffffffffffd7) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usbip_server_init(0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000f80)={r1, 0x6}, 0x8) unshare(0xa000200) (async) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) (async) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={r1, 0x4, 0x8, [0x7, 0x7, 0x1, 0xbb59, 0x7, 0x89, 0xb822, 0x4]}, &(0x7f0000000180)=0x18) syz_usbip_server_init(0x4) (async) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) r2 = syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) rt_sigqueueinfo(0x0, 0x13, &(0x7f00000000c0)={0x13, 0x0, 0x1ff}) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x0) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_io_uring_setup(0x42e9, &(0x7f00000002c0)={0x0, 0x4896, 0x400, 0x1, 0x189}, &(0x7f0000000040), &(0x7f0000000200)) (async) syz_io_uring_setup(0x42e9, &(0x7f00000002c0)={0x0, 0x4896, 0x400, 0x1, 0x189}, &(0x7f0000000040), &(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x64, 0x0, r3, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000c, 0x4000010, r2, 0x0) 13.48627ms ago: executing program 5 (id=1769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="fc", 0x1}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa208000000000007020000f8ffffe4fb86bb0008000000b7040000000000008500000003000000950000000000000019d4d08b10b93afae1fef746c2f07284f4eaedae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000280)='.\x00', 0x25000001) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r5, 0x80080400) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) 0s ago: executing program 4 (id=1770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a300000000008000340"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x20000000) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000042000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a61fa648e398d1ff623a76b78aa16b69ace545ba4468dc981a85efa3ddb3667010037638ba1739f7aa850caa8741480ac08873890f498c686f48ce6003d7672beeed8b4ba81f2abe0bb037d62f0e4add9e0590d82043ad55f4a141cdacd5a67bf20f20fb8f8cf44509cf83f5662e9c247217d35d40591d33d490"], 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r1, &(0x7f0000000000), &(0x7f0000000780)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r1, &(0x7f0000000000), 0x0}, 0x20) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6d706f6c3d696e7465725fd8dd251f6a86255fd2d90559808d6c656176653d72656c61746976653a2c300a05"]) kernel console output (not intermixed with test programs): G_RAX: 000000000000002e [ 103.364097][ T6504] RAX: ffffffffffffffda RBX: 00007f586dff5fa0 RCX: 00007f586ddce969 [ 103.364109][ T6504] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 103.364124][ T6504] RBP: 00007f586c437090 R08: 0000000000000000 R09: 0000000000000000 [ 103.364139][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.364162][ T6504] R13: 0000000000000000 R14: 00007f586dff5fa0 R15: 00007ffeb5e3fd48 [ 103.364179][ T6504] [ 103.732290][ T6527] SELinux: failed to load policy [ 103.755562][ T6533] usb usb1: check_ctrlrecip: process 6533 (syz.2.855) requesting ep 01 but needs 81 [ 103.771102][ T6533] vhci_hcd: default hub control req: 0205 v0004 i0001 l0 [ 103.991062][ T6547] wireguard1: entered promiscuous mode [ 103.997690][ T6547] team0: Device wireguard1 is of different type [ 104.107911][ T6560] wireguard0: entered promiscuous mode [ 104.114849][ T6560] team0: Device wireguard0 is of different type [ 106.818842][ T6592] FAULT_INJECTION: forcing a failure. [ 106.818842][ T6592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.832057][ T6592] CPU: 1 UID: 0 PID: 6592 Comm: syz.2.871 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 106.832140][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 106.832155][ T6592] Call Trace: [ 106.832163][ T6592] [ 106.832178][ T6592] __dump_stack+0x1d/0x30 [ 106.832198][ T6592] dump_stack_lvl+0xe8/0x140 [ 106.832220][ T6592] dump_stack+0x15/0x1b [ 106.832343][ T6592] should_fail_ex+0x265/0x280 [ 106.832416][ T6592] should_fail+0xb/0x20 [ 106.832451][ T6592] should_fail_usercopy+0x1a/0x20 [ 106.832528][ T6592] _copy_from_iter+0xcf/0xdd0 [ 106.832545][ T6592] ? __build_skb_around+0x1a0/0x200 [ 106.832584][ T6592] ? __alloc_skb+0x223/0x320 [ 106.832617][ T6592] netlink_sendmsg+0x471/0x6b0 [ 106.832685][ T6592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.832793][ T6592] __sock_sendmsg+0x142/0x180 [ 106.832819][ T6592] ____sys_sendmsg+0x31e/0x4e0 [ 106.832850][ T6592] ___sys_sendmsg+0x17b/0x1d0 [ 106.832884][ T6592] __x64_sys_sendmsg+0xd4/0x160 [ 106.832907][ T6592] x64_sys_call+0x2999/0x2fb0 [ 106.832999][ T6592] do_syscall_64+0xd0/0x1a0 [ 106.833020][ T6592] ? clear_bhb_loop+0x25/0x80 [ 106.833041][ T6592] ? clear_bhb_loop+0x25/0x80 [ 106.833062][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.833083][ T6592] RIP: 0033:0x7f586ddce969 [ 106.833097][ T6592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.833135][ T6592] RSP: 002b:00007f586c437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.833154][ T6592] RAX: ffffffffffffffda RBX: 00007f586dff5fa0 RCX: 00007f586ddce969 [ 106.833166][ T6592] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 106.833177][ T6592] RBP: 00007f586c437090 R08: 0000000000000000 R09: 0000000000000000 [ 106.833200][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.833212][ T6592] R13: 0000000000000000 R14: 00007f586dff5fa0 R15: 00007ffeb5e3fd48 [ 106.833231][ T6592] [ 106.835573][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 107.041748][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 107.041768][ T29] audit: type=1326 audit(1746291453.780:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 107.051082][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 107.073870][ T29] audit: type=1326 audit(1746291453.780:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 107.073921][ T29] audit: type=1326 audit(1746291453.780:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 107.129406][ T29] audit: type=1326 audit(1746291453.780:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 107.152818][ T29] audit: type=1326 audit(1746291453.780:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 107.176277][ T29] audit: type=1326 audit(1746291453.780:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 107.199680][ T29] audit: type=1326 audit(1746291453.780:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 107.223094][ T29] audit: type=1326 audit(1746291453.780:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 107.246395][ T29] audit: type=1326 audit(1746291453.780:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 107.269871][ T29] audit: type=1326 audit(1746291453.780:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 107.270692][ T6605] program syz.0.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.340466][ T6609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.366319][ T6611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'. [ 107.381057][ T6609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.384945][ T6605] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 107.415074][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 107.424099][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 107.451827][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 107.460812][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 107.511262][ T6621] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 107.538064][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.574737][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 107.596709][ T6628] openvswitch: netlink: Message has 6 unknown bytes. [ 107.652764][ T6621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6621 comm=syz.2.881 [ 107.765707][ T6633] block device autoloading is deprecated and will be removed. [ 107.775494][ T6639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.886'. [ 107.776024][ T6637] block device autoloading is deprecated and will be removed. [ 108.240593][ T6661] xt_hashlimit: max too large, truncated to 1048576 [ 108.341885][ T6666] netlink: 132 bytes leftover after parsing attributes in process `syz.3.895'. [ 108.658834][ T6675] FAULT_INJECTION: forcing a failure. [ 108.658834][ T6675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.672115][ T6675] CPU: 1 UID: 0 PID: 6675 Comm: syz.4.898 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 108.672207][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 108.672224][ T6675] Call Trace: [ 108.672232][ T6675] [ 108.672242][ T6675] __dump_stack+0x1d/0x30 [ 108.672269][ T6675] dump_stack_lvl+0xe8/0x140 [ 108.672294][ T6675] dump_stack+0x15/0x1b [ 108.672316][ T6675] should_fail_ex+0x265/0x280 [ 108.672435][ T6675] should_fail+0xb/0x20 [ 108.672472][ T6675] should_fail_usercopy+0x1a/0x20 [ 108.672556][ T6675] _copy_to_user+0x20/0xa0 [ 108.672577][ T6675] simple_read_from_buffer+0xb5/0x130 [ 108.672600][ T6675] proc_fail_nth_read+0x100/0x140 [ 108.672659][ T6675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.672691][ T6675] vfs_read+0x19d/0x6f0 [ 108.672848][ T6675] ? __rcu_read_unlock+0x4f/0x70 [ 108.672868][ T6675] ? __fget_files+0x184/0x1c0 [ 108.672921][ T6675] ksys_read+0xda/0x1a0 [ 108.672950][ T6675] __x64_sys_read+0x40/0x50 [ 108.672973][ T6675] x64_sys_call+0x2d77/0x2fb0 [ 108.673021][ T6675] do_syscall_64+0xd0/0x1a0 [ 108.673041][ T6675] ? clear_bhb_loop+0x25/0x80 [ 108.673063][ T6675] ? clear_bhb_loop+0x25/0x80 [ 108.673140][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.673162][ T6675] RIP: 0033:0x7fdb30f5d37c [ 108.673176][ T6675] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.673267][ T6675] RSP: 002b:00007fdb2f5c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.673292][ T6675] RAX: ffffffffffffffda RBX: 00007fdb31185fa0 RCX: 00007fdb30f5d37c [ 108.673309][ T6675] RDX: 000000000000000f RSI: 00007fdb2f5c70a0 RDI: 0000000000000006 [ 108.673324][ T6675] RBP: 00007fdb2f5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.673339][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.673354][ T6675] R13: 0000000000000000 R14: 00007fdb31185fa0 R15: 00007ffea36ef8c8 [ 108.673379][ T6675] [ 109.128227][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.137728][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.163138][ T6700] wireguard1: entered promiscuous mode [ 109.169858][ T6700] team0: Device wireguard1 is of different type [ 109.385413][ T6721] openvswitch: netlink: Message has 6 unknown bytes. [ 112.590769][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 112.590787][ T29] audit: type=1326 audit(1746291459.400:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 112.620590][ T29] audit: type=1326 audit(1746291459.400:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 112.643166][ T6744] FAULT_INJECTION: forcing a failure. [ 112.643166][ T6744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.644062][ T29] audit: type=1326 audit(1746291459.400:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 112.657034][ T6744] CPU: 0 UID: 0 PID: 6744 Comm: syz.0.922 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 112.657079][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 112.657097][ T6744] Call Trace: [ 112.657106][ T6744] [ 112.657189][ T6744] __dump_stack+0x1d/0x30 [ 112.657239][ T6744] dump_stack_lvl+0xe8/0x140 [ 112.657264][ T6744] dump_stack+0x15/0x1b [ 112.657286][ T6744] should_fail_ex+0x265/0x280 [ 112.657381][ T6744] should_fail+0xb/0x20 [ 112.657417][ T6744] should_fail_usercopy+0x1a/0x20 [ 112.657441][ T6744] strncpy_from_user+0x25/0x230 [ 112.657490][ T6744] ? __fget_files+0x184/0x1c0 [ 112.657664][ T6744] __se_sys_request_key+0x57/0x290 [ 112.657703][ T6744] ? fput+0x8f/0xc0 [ 112.657728][ T6744] __x64_sys_request_key+0x55/0x70 [ 112.657768][ T6744] x64_sys_call+0x2f19/0x2fb0 [ 112.657853][ T6744] do_syscall_64+0xd0/0x1a0 [ 112.657881][ T6744] ? clear_bhb_loop+0x25/0x80 [ 112.657908][ T6744] ? clear_bhb_loop+0x25/0x80 [ 112.657960][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.657987][ T6744] RIP: 0033:0x7f48b693e969 [ 112.658006][ T6744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.658029][ T6744] RSP: 002b:00007f48b4fa7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 112.658053][ T6744] RAX: ffffffffffffffda RBX: 00007f48b6b65fa0 RCX: 00007f48b693e969 [ 112.658107][ T6744] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 112.658175][ T6744] RBP: 00007f48b4fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.658191][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.658206][ T6744] R13: 0000000000000000 R14: 00007f48b6b65fa0 R15: 00007fff5f8c1618 [ 112.658295][ T6744] [ 112.860608][ T29] audit: type=1326 audit(1746291459.400:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 112.884009][ T29] audit: type=1326 audit(1746291459.400:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 112.907394][ T29] audit: type=1326 audit(1746291459.400:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 112.930850][ T29] audit: type=1326 audit(1746291459.400:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 112.954257][ T29] audit: type=1326 audit(1746291459.400:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 112.977676][ T29] audit: type=1326 audit(1746291459.400:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 113.001151][ T29] audit: type=1326 audit(1746291459.400:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.3.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d681be969 code=0x7ffc0000 [ 113.036830][ T6747] __nla_validate_parse: 3 callbacks suppressed [ 113.036845][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 113.051940][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 113.063114][ T6750] block device autoloading is deprecated and will be removed. [ 113.216492][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 113.259910][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.268692][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.286301][ T6782] wireguard1: entered promiscuous mode [ 113.293697][ T6782] team0: Device wireguard1 is of different type [ 113.442051][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.450579][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.516902][ T6811] FAULT_INJECTION: forcing a failure. [ 113.516902][ T6811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.530069][ T6811] CPU: 0 UID: 0 PID: 6811 Comm: syz.2.943 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 113.530111][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 113.530126][ T6811] Call Trace: [ 113.530133][ T6811] [ 113.530141][ T6811] __dump_stack+0x1d/0x30 [ 113.530167][ T6811] dump_stack_lvl+0xe8/0x140 [ 113.530188][ T6811] dump_stack+0x15/0x1b [ 113.530245][ T6811] should_fail_ex+0x265/0x280 [ 113.530283][ T6811] should_fail+0xb/0x20 [ 113.530326][ T6811] should_fail_usercopy+0x1a/0x20 [ 113.530455][ T6811] strncpy_from_user+0x25/0x230 [ 113.530486][ T6811] ? kmem_cache_alloc_noprof+0x186/0x310 [ 113.530523][ T6811] ? getname_flags+0x80/0x3b0 [ 113.530552][ T6811] getname_flags+0xae/0x3b0 [ 113.530606][ T6811] user_path_create+0x27/0x130 [ 113.530633][ T6811] bpf_obj_pin_user+0xe0/0x230 [ 113.530668][ T6811] bpf_obj_pin+0xac/0xd0 [ 113.530781][ T6811] __sys_bpf+0x6a7/0x790 [ 113.530825][ T6811] __x64_sys_bpf+0x41/0x50 [ 113.530850][ T6811] x64_sys_call+0x2478/0x2fb0 [ 113.530870][ T6811] do_syscall_64+0xd0/0x1a0 [ 113.530947][ T6811] ? clear_bhb_loop+0x25/0x80 [ 113.530986][ T6811] ? clear_bhb_loop+0x25/0x80 [ 113.531014][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.531040][ T6811] RIP: 0033:0x7f586ddce969 [ 113.531059][ T6811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.531090][ T6811] RSP: 002b:00007f586c437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.531114][ T6811] RAX: ffffffffffffffda RBX: 00007f586dff5fa0 RCX: 00007f586ddce969 [ 113.531144][ T6811] RDX: 0000000000000018 RSI: 00002000000002c0 RDI: 0000000000000006 [ 113.531159][ T6811] RBP: 00007f586c437090 R08: 0000000000000000 R09: 0000000000000000 [ 113.531172][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.531187][ T6811] R13: 0000000000000000 R14: 00007f586dff5fa0 R15: 00007ffeb5e3fd48 [ 113.531211][ T6811] [ 113.813682][ T6816] xt_hashlimit: max too large, truncated to 1048576 [ 113.886543][ T6820] block device autoloading is deprecated and will be removed. [ 113.943127][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 113.952958][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 113.974779][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 113.984369][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 114.006843][ T6821] x_tables: duplicate underflow at hook 2 [ 114.012322][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 114.021855][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 114.602009][ T6849] netlink: 132 bytes leftover after parsing attributes in process `syz.0.954'. [ 114.876714][ T6854] netlink: 'syz.2.955': attribute type 10 has an invalid length. [ 114.980262][ T6855] 8021q: VLANs not supported on vcan0 [ 115.732146][ T6891] block device autoloading is deprecated and will be removed. [ 116.972972][ T6927] wireguard0: entered promiscuous mode [ 117.607800][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 117.607818][ T29] audit: type=1326 audit(1746291464.420:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 117.647464][ T29] audit: type=1326 audit(1746291464.420:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 117.709643][ T6955] FAULT_INJECTION: forcing a failure. [ 117.709643][ T6955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.722828][ T6955] CPU: 1 UID: 0 PID: 6955 Comm: syz.2.989 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 117.722861][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 117.722875][ T6955] Call Trace: [ 117.722882][ T6955] [ 117.722891][ T6955] __dump_stack+0x1d/0x30 [ 117.722954][ T6955] dump_stack_lvl+0xe8/0x140 [ 117.722975][ T6955] dump_stack+0x15/0x1b [ 117.723008][ T6955] should_fail_ex+0x265/0x280 [ 117.723113][ T6955] should_fail+0xb/0x20 [ 117.723172][ T6955] should_fail_usercopy+0x1a/0x20 [ 117.723224][ T6955] _copy_from_user+0x1c/0xb0 [ 117.723249][ T6955] __sys_bind+0x106/0x2a0 [ 117.723293][ T6955] __x64_sys_bind+0x3f/0x50 [ 117.723331][ T6955] x64_sys_call+0x2086/0x2fb0 [ 117.723356][ T6955] do_syscall_64+0xd0/0x1a0 [ 117.723424][ T6955] ? clear_bhb_loop+0x25/0x80 [ 117.723447][ T6955] ? clear_bhb_loop+0x25/0x80 [ 117.723504][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.723527][ T6955] RIP: 0033:0x7f586ddce969 [ 117.723542][ T6955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.723562][ T6955] RSP: 002b:00007f586c437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 117.723584][ T6955] RAX: ffffffffffffffda RBX: 00007f586dff5fa0 RCX: 00007f586ddce969 [ 117.723638][ T6955] RDX: 0000000000000024 RSI: 0000200000000340 RDI: 0000000000000003 [ 117.723652][ T6955] RBP: 00007f586c437090 R08: 0000000000000000 R09: 0000000000000000 [ 117.723665][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.723678][ T6955] R13: 0000000000000000 R14: 00007f586dff5fa0 R15: 00007ffeb5e3fd48 [ 117.723701][ T6955] [ 117.899778][ T29] audit: type=1326 audit(1746291464.550:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 117.922806][ T29] audit: type=1326 audit(1746291464.550:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 117.945810][ T29] audit: type=1326 audit(1746291464.550:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 117.968794][ T29] audit: type=1326 audit(1746291464.550:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 117.991718][ T29] audit: type=1326 audit(1746291464.550:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 118.014613][ T29] audit: type=1326 audit(1746291464.550:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 118.037479][ T29] audit: type=1326 audit(1746291464.550:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 118.060455][ T29] audit: type=1326 audit(1746291464.550:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 118.189385][ T6972] __nla_validate_parse: 4 callbacks suppressed [ 118.189400][ T6972] netlink: 56 bytes leftover after parsing attributes in process `syz.3.997'. [ 118.195829][ T6968] block device autoloading is deprecated and will be removed. [ 118.219017][ T6970] bridge0: entered promiscuous mode [ 118.224851][ T6970] macvlan0: entered promiscuous mode [ 118.236200][ T6970] bridge0: port 3(macvlan0) entered blocking state [ 118.242818][ T6970] bridge0: port 3(macvlan0) entered disabled state [ 118.262973][ T6970] macvlan0: entered allmulticast mode [ 118.268436][ T6970] bridge0: entered allmulticast mode [ 118.277659][ T6970] macvlan0: left allmulticast mode [ 118.282991][ T6970] bridge0: left allmulticast mode [ 118.288576][ T6970] bridge0: left promiscuous mode [ 118.304875][ T6979] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.335902][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1001'. [ 118.380234][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 118.413116][ T6990] netlink: 624 bytes leftover after parsing attributes in process `syz.4.1002'. [ 119.182985][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'. [ 119.194465][ T7025] smc: net device bond0 applied user defined pnetid SYZ2 [ 119.459881][ T7039] wireguard1: entered promiscuous mode [ 119.570556][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1018'. [ 119.897754][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1019'. [ 119.947530][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 120.043389][ T1915] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.134249][ T1915] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.184462][ T1915] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.236291][ T1915] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.304781][ T7070] chnl_net:caif_netlink_parms(): no params data found [ 120.368484][ T1915] bridge_slave_1: left allmulticast mode [ 120.374239][ T1915] bridge_slave_1: left promiscuous mode [ 120.379954][ T1915] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.389088][ T1915] bridge_slave_0: left allmulticast mode [ 120.394971][ T1915] bridge_slave_0: left promiscuous mode [ 120.400743][ T1915] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.533263][ T1915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.543325][ T1915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.552911][ T1915] bond0 (unregistering): Released all slaves [ 120.562185][ T1915] bond1 (unregistering): Released all slaves [ 120.576352][ T7070] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.583582][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.591052][ T7070] bridge_slave_0: entered allmulticast mode [ 120.597987][ T7070] bridge_slave_0: entered promiscuous mode [ 120.605195][ T7070] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.612332][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.619938][ T7070] bridge_slave_1: entered allmulticast mode [ 120.626657][ T7070] bridge_slave_1: entered promiscuous mode [ 120.652901][ T7070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.664445][ T7070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.675334][ T1915] hsr_slave_0: left promiscuous mode [ 120.681057][ T1915] hsr_slave_1: left promiscuous mode [ 120.689853][ T1915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.697509][ T1915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.705526][ T1915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.712970][ T1915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.723606][ T1915] veth1_macvtap: left promiscuous mode [ 120.729201][ T1915] veth0_macvtap: left promiscuous mode [ 120.776062][ T1915] team0 (unregistering): Port device team_slave_1 removed [ 120.785468][ T1915] team0 (unregistering): Port device team_slave_0 removed [ 120.831904][ T7070] team0: Port device team_slave_0 added [ 120.838636][ T7070] team0: Port device team_slave_1 added [ 120.855751][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.862853][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.888830][ T7070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.900362][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.907432][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.933555][ T7070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.963033][ T7070] hsr_slave_0: entered promiscuous mode [ 120.969158][ T7070] hsr_slave_1: entered promiscuous mode [ 120.975036][ T7070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.982639][ T7070] Cannot create hsr debugfs directory [ 121.067553][ T7070] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.076870][ T7070] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.086502][ T7070] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.095973][ T7070] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.148591][ T7070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.161337][ T7070] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.174169][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.181311][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.190808][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.198196][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.222523][ T7070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.232968][ T7070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.265303][ T7121] netlink: 'syz.0.1028': attribute type 12 has an invalid length. [ 121.314704][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.527207][ T7070] veth0_vlan: entered promiscuous mode [ 121.542545][ T7070] veth1_vlan: entered promiscuous mode [ 121.572873][ T7070] veth0_macvtap: entered promiscuous mode [ 121.592230][ T7070] veth1_macvtap: entered promiscuous mode [ 121.613995][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.624634][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.634515][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.644986][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.659196][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.659353][ T7166] FAULT_INJECTION: forcing a failure. [ 121.659353][ T7166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.670040][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.679691][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.0.1030 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 121.679730][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 121.679747][ T7166] Call Trace: [ 121.679755][ T7166] [ 121.679765][ T7166] __dump_stack+0x1d/0x30 [ 121.679793][ T7166] dump_stack_lvl+0xe8/0x140 [ 121.679818][ T7166] dump_stack+0x15/0x1b [ 121.679888][ T7166] should_fail_ex+0x265/0x280 [ 121.679929][ T7166] should_fail+0xb/0x20 [ 121.679995][ T7166] should_fail_usercopy+0x1a/0x20 [ 121.680018][ T7166] _copy_to_user+0x20/0xa0 [ 121.680059][ T7166] simple_read_from_buffer+0xb5/0x130 [ 121.680090][ T7166] proc_fail_nth_read+0x100/0x140 [ 121.680183][ T7166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.680294][ T7166] vfs_read+0x19d/0x6f0 [ 121.680343][ T7166] ? __rcu_read_unlock+0x4f/0x70 [ 121.680370][ T7166] ? __fget_files+0x184/0x1c0 [ 121.680415][ T7166] ksys_read+0xda/0x1a0 [ 121.680447][ T7166] __x64_sys_read+0x40/0x50 [ 121.680497][ T7166] x64_sys_call+0x2d77/0x2fb0 [ 121.680541][ T7166] do_syscall_64+0xd0/0x1a0 [ 121.680647][ T7166] ? clear_bhb_loop+0x25/0x80 [ 121.680676][ T7166] ? clear_bhb_loop+0x25/0x80 [ 121.680703][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.680731][ T7166] RIP: 0033:0x7f48b693d37c [ 121.680750][ T7166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 121.680833][ T7166] RSP: 002b:00007f48b4fa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.680858][ T7166] RAX: ffffffffffffffda RBX: 00007f48b6b65fa0 RCX: 00007f48b693d37c [ 121.680874][ T7166] RDX: 000000000000000f RSI: 00007f48b4fa70a0 RDI: 0000000000000005 [ 121.680889][ T7166] RBP: 00007f48b4fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.680947][ T7166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.680963][ T7166] R13: 0000000000000000 R14: 00007f48b6b65fa0 R15: 00007fff5f8c1618 [ 121.680986][ T7166] [ 121.889524][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.899440][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.909920][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.919775][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.930406][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.942478][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.957172][ T7070] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.966042][ T7070] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.974924][ T7070] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.983698][ T7070] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.037881][ T7187] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1033'. [ 122.213540][ T7210] vhci_hcd: invalid port number 23 [ 122.266179][ T7215] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 122.274461][ T7215] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 122.351273][ T7230] netlink: 'syz.2.1039': attribute type 13 has an invalid length. [ 122.398630][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.405921][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.466378][ T7230] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.475466][ T7230] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.484664][ T7230] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.493857][ T7230] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.708203][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 122.708217][ T29] audit: type=1400 audit(1746291469.520:4566): avc: denied { validate_trans } for pid=7267 comm="syz.5.1046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.746372][ T7268] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1046'. [ 122.814070][ T7281] batadv_slave_1: entered promiscuous mode [ 122.828159][ T7281] batadv_slave_1: left promiscuous mode [ 122.845173][ T29] audit: type=1326 audit(1746291469.660:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586ddce969 code=0x7ffc0000 [ 122.894194][ T7290] block device autoloading is deprecated and will be removed. [ 122.936506][ T29] audit: type=1326 audit(1746291469.670:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f586ddce969 code=0x7ffc0000 [ 122.960220][ T29] audit: type=1326 audit(1746291469.690:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f586ddce9a3 code=0x7ffc0000 [ 122.983625][ T29] audit: type=1326 audit(1746291469.690:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f586ddce9a3 code=0x7ffc0000 [ 123.007109][ T29] audit: type=1326 audit(1746291469.690:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586ddce969 code=0x7ffc0000 [ 123.030613][ T29] audit: type=1326 audit(1746291469.690:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586ddce969 code=0x7ffc0000 [ 123.054150][ T29] audit: type=1326 audit(1746291469.730:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f586ddce969 code=0x7ffc0000 [ 123.077833][ T29] audit: type=1326 audit(1746291469.730:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586ddce969 code=0x7ffc0000 [ 123.101296][ T29] audit: type=1326 audit(1746291469.730:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586ddce969 code=0x7ffc0000 [ 123.366436][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'. [ 123.479783][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1063'. [ 123.925982][ T7365] FAULT_INJECTION: forcing a failure. [ 123.925982][ T7365] name failslab, interval 1, probability 0, space 0, times 0 [ 123.938811][ T7365] CPU: 1 UID: 0 PID: 7365 Comm: syz.5.1071 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 123.938842][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 123.938854][ T7365] Call Trace: [ 123.938860][ T7365] [ 123.938915][ T7365] __dump_stack+0x1d/0x30 [ 123.938949][ T7365] dump_stack_lvl+0xe8/0x140 [ 123.938971][ T7365] dump_stack+0x15/0x1b [ 123.938992][ T7365] should_fail_ex+0x265/0x280 [ 123.939029][ T7365] should_failslab+0x8c/0xb0 [ 123.939071][ T7365] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 123.939096][ T7365] ? sidtab_sid2str_get+0xa0/0x130 [ 123.939147][ T7365] kmemdup_noprof+0x2b/0x70 [ 123.939170][ T7365] sidtab_sid2str_get+0xa0/0x130 [ 123.939204][ T7365] security_sid_to_context_core+0x1eb/0x2e0 [ 123.939292][ T7365] security_sid_to_context+0x27/0x40 [ 123.939374][ T7365] selinux_lsmprop_to_secctx+0x67/0xf0 [ 123.939412][ T7365] security_lsmprop_to_secctx+0x43/0x80 [ 123.939439][ T7365] audit_log_task_context+0x77/0x190 [ 123.939470][ T7365] audit_log_task+0xf4/0x250 [ 123.939564][ T7365] audit_seccomp+0x61/0x100 [ 123.939594][ T7365] ? __seccomp_filter+0x68c/0x10d0 [ 123.939616][ T7365] __seccomp_filter+0x69d/0x10d0 [ 123.939710][ T7365] ? do_setitimer+0x68/0x3c0 [ 123.939742][ T7365] ? __rcu_read_unlock+0x4f/0x70 [ 123.939772][ T7365] __secure_computing+0x82/0x150 [ 123.939790][ T7365] syscall_trace_enter+0xcf/0x1e0 [ 123.939827][ T7365] do_syscall_64+0xaa/0x1a0 [ 123.939847][ T7365] ? clear_bhb_loop+0x25/0x80 [ 123.939944][ T7365] ? clear_bhb_loop+0x25/0x80 [ 123.939963][ T7365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.939981][ T7365] RIP: 0033:0x7f117677d37c [ 123.939994][ T7365] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.940009][ T7365] RSP: 002b:00007f1174de7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.940053][ T7365] RAX: ffffffffffffffda RBX: 00007f11769a5fa0 RCX: 00007f117677d37c [ 123.940063][ T7365] RDX: 000000000000000f RSI: 00007f1174de70a0 RDI: 0000000000000005 [ 123.940073][ T7365] RBP: 00007f1174de7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.940083][ T7365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.940093][ T7365] R13: 0000000000000000 R14: 00007f11769a5fa0 R15: 00007fffdc907ee8 [ 123.940110][ T7365] [ 124.286454][ T7376] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1075'. [ 125.029057][ T7384] FAULT_INJECTION: forcing a failure. [ 125.029057][ T7384] name failslab, interval 1, probability 0, space 0, times 0 [ 125.041963][ T7384] CPU: 1 UID: 0 PID: 7384 Comm: syz.0.1077 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 125.041990][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 125.042003][ T7384] Call Trace: [ 125.042165][ T7384] [ 125.042174][ T7384] __dump_stack+0x1d/0x30 [ 125.042200][ T7384] dump_stack_lvl+0xe8/0x140 [ 125.042225][ T7384] dump_stack+0x15/0x1b [ 125.042245][ T7384] should_fail_ex+0x265/0x280 [ 125.042279][ T7384] should_failslab+0x8c/0xb0 [ 125.042329][ T7384] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 125.042438][ T7384] ? __d_alloc+0x3d/0x350 [ 125.042523][ T7384] ? xa_load+0xb1/0xe0 [ 125.042550][ T7384] __d_alloc+0x3d/0x350 [ 125.042588][ T7384] ? memcg_list_lru_alloc+0xc2/0x490 [ 125.042621][ T7384] d_alloc_parallel+0x53/0xc40 [ 125.042643][ T7384] ? __rcu_read_unlock+0x34/0x70 [ 125.042711][ T7384] ? lockref_get_not_dead+0x120/0x1c0 [ 125.042733][ T7384] ? __rcu_read_unlock+0x4f/0x70 [ 125.042753][ T7384] __lookup_slow+0x8c/0x250 [ 125.042774][ T7384] lookup_slow+0x3c/0x60 [ 125.042824][ T7384] link_path_walk+0x71d/0x8b0 [ 125.042868][ T7384] __filename_parentat+0x15c/0x3f0 [ 125.042928][ T7384] filename_create+0x79/0x290 [ 125.043011][ T7384] kern_path_create+0x37/0x130 [ 125.043039][ T7384] unix_bind+0x1fd/0x920 [ 125.043068][ T7384] __sys_bind+0x1ce/0x2a0 [ 125.043137][ T7384] __x64_sys_bind+0x3f/0x50 [ 125.043172][ T7384] x64_sys_call+0x2086/0x2fb0 [ 125.043232][ T7384] do_syscall_64+0xd0/0x1a0 [ 125.043340][ T7384] ? clear_bhb_loop+0x25/0x80 [ 125.043362][ T7384] ? clear_bhb_loop+0x25/0x80 [ 125.043382][ T7384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.043420][ T7384] RIP: 0033:0x7f48b693e969 [ 125.043434][ T7384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.043458][ T7384] RSP: 002b:00007f48b4fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 125.043482][ T7384] RAX: ffffffffffffffda RBX: 00007f48b6b65fa0 RCX: 00007f48b693e969 [ 125.043499][ T7384] RDX: 000000000000006e RSI: 0000200000000240 RDI: 0000000000000007 [ 125.043538][ T7384] RBP: 00007f48b4fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.043554][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.043567][ T7384] R13: 0000000000000000 R14: 00007f48b6b65fa0 R15: 00007fff5f8c1618 [ 125.043588][ T7384] [ 125.508871][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.519692][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.453092][ T7424] ======================================================= [ 126.453092][ T7424] WARNING: The mand mount option has been deprecated and [ 126.453092][ T7424] and is ignored by this kernel. Remove the mand [ 126.453092][ T7424] option from the mount to silence this warning. [ 126.453092][ T7424] ======================================================= [ 126.490372][ T7424] tmpfs: Unknown parameter 'quota [ 132.294725][ T7664] __dump_stack+0x1d/0x30 [ 132.294758][ T7664] dump_stack_lvl+0xe8/0x140 [ 132.294784][ T7664] dump_stack+0x15/0x1b [ 132.294811][ T7664] should_fail_ex+0x265/0x280 [ 132.294889][ T7664] ? alloc_pipe_info+0xae/0x350 [ 132.294983][ T7664] should_failslab+0x8c/0xb0 [ 132.295065][ T7664] __kmalloc_cache_noprof+0x4c/0x320 [ 132.295094][ T7664] alloc_pipe_info+0xae/0x350 [ 132.295129][ T7664] fifo_open+0xa1/0x5d0 [ 132.295165][ T7664] do_dentry_open+0x646/0xa20 [ 132.295268][ T7664] ? __pfx_fifo_open+0x10/0x10 [ 132.295304][ T7664] vfs_open+0x37/0x1e0 [ 132.295327][ T7664] path_openat+0x1c5e/0x2170 [ 132.295348][ T7664] ? path_openat+0x1bf8/0x2170 [ 132.295419][ T7664] ? _parse_integer_limit+0x170/0x190 [ 132.295539][ T7664] do_filp_open+0x109/0x230 [ 132.295644][ T7664] file_open_name+0xfa/0x120 [ 132.295671][ T7664] __se_sys_acct+0xf0/0x490 [ 132.295704][ T7664] ? fpregs_assert_state_consistent+0x84/0xa0 [ 132.295798][ T7664] __x64_sys_acct+0x1f/0x30 [ 132.295830][ T7664] x64_sys_call+0x18cf/0x2fb0 [ 132.295858][ T7664] do_syscall_64+0xd0/0x1a0 [ 132.295923][ T7664] ? clear_bhb_loop+0x25/0x80 [ 132.295945][ T7664] ? clear_bhb_loop+0x25/0x80 [ 132.295974][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.296001][ T7664] RIP: 0033:0x7fdb30f5e969 [ 132.296086][ T7664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.296109][ T7664] RSP: 002b:00007fdb2f5c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 132.296133][ T7664] RAX: ffffffffffffffda RBX: 00007fdb31185fa0 RCX: 00007fdb30f5e969 [ 132.296148][ T7664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 132.296164][ T7664] RBP: 00007fdb2f5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.296177][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.296188][ T7664] R13: 0000000000000000 R14: 00007fdb31185fa0 R15: 00007ffea36ef8c8 [ 132.296275][ T7664] [ 132.709420][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'. [ 132.739488][ T7678] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 132.997500][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 132.997576][ T29] audit: type=1400 audit(1746291479.810:5087): avc: denied { connect } for pid=7684 comm="syz.5.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.056936][ T7687] sch_fq: defrate 0 ignored. [ 133.074193][ T29] audit: type=1400 audit(1746291479.880:5088): avc: denied { shutdown } for pid=7684 comm="syz.5.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.137987][ T29] audit: type=1400 audit(1746291479.950:5089): avc: denied { name_connect } for pid=7694 comm="syz.6.1175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 133.163299][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1175'. [ 133.173854][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 133.182867][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 133.195089][ T29] audit: type=1400 audit(1746291480.010:5090): avc: denied { shutdown } for pid=7694 comm="syz.6.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.234198][ T29] audit: type=1326 audit(1746291480.050:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.6.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 133.259091][ T29] audit: type=1326 audit(1746291480.050:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.6.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 133.259143][ T29] audit: type=1326 audit(1746291480.050:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.6.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 133.259172][ T29] audit: type=1326 audit(1746291480.050:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.6.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 133.259277][ T29] audit: type=1326 audit(1746291480.050:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.6.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 133.259353][ T29] audit: type=1326 audit(1746291480.050:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.6.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 133.317325][ T7703] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1178'. [ 133.409864][ T7699] SET target dimension over the limit! [ 133.434293][ T7709] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.442853][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1180'. [ 133.451906][ T7709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.459370][ T7709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.798214][ T7739] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 133.870942][ T7747] netlink: 'syz.6.1194': attribute type 1 has an invalid length. [ 133.878811][ T7747] netlink: 'syz.6.1194': attribute type 3 has an invalid length. [ 133.886743][ T7747] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1194'. [ 134.125775][ T7765] FAULT_INJECTION: forcing a failure. [ 134.125775][ T7765] name failslab, interval 1, probability 0, space 0, times 0 [ 134.138610][ T7765] CPU: 0 UID: 0 PID: 7765 Comm: syz.6.1202 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 134.138642][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 134.138654][ T7765] Call Trace: [ 134.138659][ T7765] [ 134.138694][ T7765] __dump_stack+0x1d/0x30 [ 134.138762][ T7765] dump_stack_lvl+0xe8/0x140 [ 134.138787][ T7765] dump_stack+0x15/0x1b [ 134.138807][ T7765] should_fail_ex+0x265/0x280 [ 134.138846][ T7765] ? legacy_init_fs_context+0x31/0x80 [ 134.138950][ T7765] should_failslab+0x8c/0xb0 [ 134.138986][ T7765] __kmalloc_cache_noprof+0x4c/0x320 [ 134.139014][ T7765] legacy_init_fs_context+0x31/0x80 [ 134.139067][ T7765] alloc_fs_context+0x3ec/0x4e0 [ 134.139094][ T7765] fs_context_for_mount+0x22/0x30 [ 134.139134][ T7765] do_new_mount+0xe9/0x680 [ 134.139165][ T7765] path_mount+0x4a4/0xb20 [ 134.139189][ T7765] ? user_path_at+0x109/0x130 [ 134.139214][ T7765] __se_sys_mount+0x28f/0x2e0 [ 134.139251][ T7765] __x64_sys_mount+0x67/0x80 [ 134.139319][ T7765] x64_sys_call+0xd36/0x2fb0 [ 134.139347][ T7765] do_syscall_64+0xd0/0x1a0 [ 134.139367][ T7765] ? clear_bhb_loop+0x25/0x80 [ 134.139469][ T7765] ? clear_bhb_loop+0x25/0x80 [ 134.139586][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.139613][ T7765] RIP: 0033:0x7f107496e969 [ 134.139632][ T7765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.139689][ T7765] RSP: 002b:00007f1072fd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.139711][ T7765] RAX: ffffffffffffffda RBX: 00007f1074b95fa0 RCX: 00007f107496e969 [ 134.139727][ T7765] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 134.139743][ T7765] RBP: 00007f1072fd7090 R08: 0000200000000080 R09: 0000000000000000 [ 134.139758][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.139772][ T7765] R13: 0000000000000000 R14: 00007f1074b95fa0 R15: 00007ffd185a5888 [ 134.139819][ T7765] [ 134.379803][ T7774] __nla_validate_parse: 1 callbacks suppressed [ 134.379818][ T7774] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1205'. [ 134.485027][ T7791] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.564736][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 134.578516][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1218'. [ 135.356769][ T7840] wireguard1: entered promiscuous mode [ 135.412373][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1229'. [ 135.495935][ T7849] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.604672][ T7856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1234'. [ 135.637164][ T7851] FAULT_INJECTION: forcing a failure. [ 135.637164][ T7851] name failslab, interval 1, probability 0, space 0, times 0 [ 135.650010][ T7851] CPU: 1 UID: 0 PID: 7851 Comm: syz.5.1232 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 135.650044][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 135.650059][ T7851] Call Trace: [ 135.650067][ T7851] [ 135.650074][ T7851] __dump_stack+0x1d/0x30 [ 135.650094][ T7851] dump_stack_lvl+0xe8/0x140 [ 135.650112][ T7851] dump_stack+0x15/0x1b [ 135.650133][ T7851] should_fail_ex+0x265/0x280 [ 135.650171][ T7851] should_failslab+0x8c/0xb0 [ 135.650211][ T7851] kmem_cache_alloc_noprof+0x50/0x310 [ 135.650251][ T7851] ? vm_area_dup+0x32/0x260 [ 135.650271][ T7851] ? __rcu_read_lock+0x37/0x50 [ 135.650291][ T7851] vm_area_dup+0x32/0x260 [ 135.650312][ T7851] __split_vma+0xe9/0x610 [ 135.650348][ T7851] vma_modify+0x1a4/0x210 [ 135.650376][ T7851] vma_modify_flags+0x101/0x130 [ 135.650412][ T7851] mprotect_fixup+0x2cc/0x570 [ 135.650447][ T7851] do_mprotect_pkey+0x6d6/0x980 [ 135.650477][ T7851] __x64_sys_mprotect+0x48/0x60 [ 135.650509][ T7851] x64_sys_call+0x2794/0x2fb0 [ 135.650530][ T7851] do_syscall_64+0xd0/0x1a0 [ 135.650552][ T7851] ? clear_bhb_loop+0x25/0x80 [ 135.650573][ T7851] ? clear_bhb_loop+0x25/0x80 [ 135.650594][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.650615][ T7851] RIP: 0033:0x7f117677e969 [ 135.650629][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.650647][ T7851] RSP: 002b:00007f1174de7038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 135.650666][ T7851] RAX: ffffffffffffffda RBX: 00007f11769a5fa0 RCX: 00007f117677e969 [ 135.650678][ T7851] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000004a4000 [ 135.650690][ T7851] RBP: 00007f1174de7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.650701][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.650712][ T7851] R13: 0000000000000000 R14: 00007f11769a5fa0 R15: 00007fffdc907ee8 [ 135.650731][ T7851] [ 136.913980][ T7900] 9pnet: p9_errstr2errno: server reported unknown error [ 137.320472][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1263'. [ 137.332169][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 137.504189][ T7945] FAULT_INJECTION: forcing a failure. [ 137.504189][ T7945] name failslab, interval 1, probability 0, space 0, times 0 [ 137.517049][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.2.1268 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 137.517082][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 137.517097][ T7945] Call Trace: [ 137.517103][ T7945] [ 137.517112][ T7945] __dump_stack+0x1d/0x30 [ 137.517138][ T7945] dump_stack_lvl+0xe8/0x140 [ 137.517161][ T7945] dump_stack+0x15/0x1b [ 137.517181][ T7945] should_fail_ex+0x265/0x280 [ 137.517221][ T7945] should_failslab+0x8c/0xb0 [ 137.517257][ T7945] kmem_cache_alloc_noprof+0x50/0x310 [ 137.517300][ T7945] ? vm_area_alloc+0x2c/0xb0 [ 137.517329][ T7945] vm_area_alloc+0x2c/0xb0 [ 137.517354][ T7945] mmap_region+0x81f/0x1470 [ 137.517423][ T7945] do_mmap+0x9de/0xc20 [ 137.517458][ T7945] vm_mmap_pgoff+0x17a/0x2e0 [ 137.517488][ T7945] ksys_mmap_pgoff+0x2d0/0x310 [ 137.517520][ T7945] x64_sys_call+0x1602/0x2fb0 [ 137.517546][ T7945] do_syscall_64+0xd0/0x1a0 [ 137.517574][ T7945] ? clear_bhb_loop+0x25/0x80 [ 137.517600][ T7945] ? clear_bhb_loop+0x25/0x80 [ 137.517627][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.517649][ T7945] RIP: 0033:0x7f586ddce969 [ 137.517663][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.517685][ T7945] RSP: 002b:00007f586c437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 137.517708][ T7945] RAX: ffffffffffffffda RBX: 00007f586dff5fa0 RCX: 00007f586ddce969 [ 137.517724][ T7945] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 137.517740][ T7945] RBP: 00007f586c437090 R08: ffffffffffffffff R09: 0000000000000000 [ 137.517755][ T7945] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 137.517770][ T7945] R13: 0000000000000000 R14: 00007f586dff5fa0 R15: 00007ffeb5e3fd48 [ 137.517794][ T7945] [ 137.624705][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 137.868714][ T7955] IPVS: Error connecting to the multicast addr [ 137.929130][ T7959] __vm_enough_memory: pid: 7959, comm: syz.6.1272, bytes: 4503599627366400 not enough memory for the allocation [ 138.032992][ T29] kauditd_printk_skb: 688 callbacks suppressed [ 138.033010][ T29] audit: type=1326 audit(1746291484.850:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.6.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 138.033471][ T7967] FAULT_INJECTION: forcing a failure. [ 138.033471][ T7967] name failslab, interval 1, probability 0, space 0, times 0 [ 138.039305][ T29] audit: type=1326 audit(1746291484.850:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.6.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f107496d2d0 code=0x7ffc0000 [ 138.062723][ T7967] CPU: 0 UID: 0 PID: 7967 Comm: syz.6.1275 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 138.062754][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 138.062783][ T7967] Call Trace: [ 138.062789][ T7967] [ 138.062798][ T7967] __dump_stack+0x1d/0x30 [ 138.062823][ T7967] dump_stack_lvl+0xe8/0x140 [ 138.062845][ T7967] dump_stack+0x15/0x1b [ 138.062864][ T7967] should_fail_ex+0x265/0x280 [ 138.062978][ T7967] should_failslab+0x8c/0xb0 [ 138.063010][ T7967] kmem_cache_alloc_noprof+0x50/0x310 [ 138.063070][ T7967] ? security_inode_alloc+0x37/0x100 [ 138.063098][ T7967] security_inode_alloc+0x37/0x100 [ 138.063163][ T7967] inode_init_always_gfp+0x4b7/0x500 [ 138.063196][ T7967] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 138.063251][ T7967] alloc_inode+0x58/0x170 [ 138.063280][ T7967] new_inode+0x1d/0xe0 [ 138.063380][ T7967] mqueue_get_inode+0x26/0x6a0 [ 138.063415][ T7967] mqueue_create_attr+0x172/0x260 [ 138.063452][ T7967] ? __pfx_mqueue_create_attr+0x10/0x10 [ 138.063536][ T7967] vfs_mkobj+0xa2/0x1c0 [ 138.063564][ T7967] do_mq_open+0x35c/0x4b0 [ 138.063609][ T7967] __x64_sys_mq_open+0xcb/0x100 [ 138.063670][ T7967] x64_sys_call+0x27d6/0x2fb0 [ 138.063697][ T7967] do_syscall_64+0xd0/0x1a0 [ 138.063765][ T7967] ? clear_bhb_loop+0x25/0x80 [ 138.063805][ T7967] ? clear_bhb_loop+0x25/0x80 [ 138.063833][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.063889][ T7967] RIP: 0033:0x7f107496e969 [ 138.063909][ T7967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.063933][ T7967] RSP: 002b:00007f1072fd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 138.064019][ T7967] RAX: ffffffffffffffda RBX: 00007f1074b95fa0 RCX: 00007f107496e969 [ 138.064035][ T7967] RDX: 0000000000000000 RSI: 0000000000000042 RDI: 0000200000000080 [ 138.064051][ T7967] RBP: 00007f1072fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.064065][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.064080][ T7967] R13: 0000000000000000 R14: 00007f1074b95fa0 R15: 00007ffd185a5888 [ 138.064104][ T7967] [ 138.320326][ T29] audit: type=1326 audit(1746291484.850:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.6.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f107496d41f code=0x7ffc0000 [ 138.344170][ T29] audit: type=1326 audit(1746291484.850:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.6.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 138.370318][ T29] audit: type=1326 audit(1746291484.890:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.6.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f107496d37c code=0x7ffc0000 [ 138.387661][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1278'. [ 138.394649][ T29] audit: type=1326 audit(1746291484.890:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.6.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f107496d41f code=0x7ffc0000 [ 138.402906][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1278'. [ 138.426814][ T29] audit: type=1326 audit(1746291484.890:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.6.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f107496d5ca code=0x7ffc0000 [ 138.459233][ T29] audit: type=1326 audit(1746291484.890:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.6.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 138.483365][ T29] audit: type=1326 audit(1746291484.890:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.6.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 138.544663][ T29] audit: type=1326 audit(1746291485.360:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.6.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 138.679627][ T7983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7983 comm=syz.2.1281 [ 138.692858][ T7983] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 138.706213][ T7983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.774322][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.783142][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.252835][ T7992] netlink: 'syz.5.1284': attribute type 3 has an invalid length. [ 139.345857][ T7995] FAULT_INJECTION: forcing a failure. [ 139.345857][ T7995] name failslab, interval 1, probability 0, space 0, times 0 [ 139.358585][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.2.1285 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 139.358620][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 139.358635][ T7995] Call Trace: [ 139.358652][ T7995] [ 139.358659][ T7995] __dump_stack+0x1d/0x30 [ 139.358682][ T7995] dump_stack_lvl+0xe8/0x140 [ 139.358706][ T7995] dump_stack+0x15/0x1b [ 139.358726][ T7995] should_fail_ex+0x265/0x280 [ 139.358811][ T7995] ? asymmetric_lookup_restriction+0x303/0x370 [ 139.358895][ T7995] should_failslab+0x8c/0xb0 [ 139.359011][ T7995] __kmalloc_cache_noprof+0x4c/0x320 [ 139.359036][ T7995] ? __pfx_restrict_link_by_key_or_keyring_chain+0x10/0x10 [ 139.359069][ T7995] asymmetric_lookup_restriction+0x303/0x370 [ 139.359203][ T7995] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 139.359256][ T7995] keyring_restrict+0xf4/0x280 [ 139.359290][ T7995] keyctl_restrict_keyring+0x107/0x1b0 [ 139.359334][ T7995] __se_sys_keyctl+0x1ed/0xb80 [ 139.359353][ T7995] ? __rcu_read_unlock+0x4f/0x70 [ 139.359396][ T7995] ? __fget_files+0x184/0x1c0 [ 139.359441][ T7995] ? fput+0x8f/0xc0 [ 139.359465][ T7995] __x64_sys_keyctl+0x67/0x80 [ 139.359496][ T7995] x64_sys_call+0x2e7f/0x2fb0 [ 139.359575][ T7995] do_syscall_64+0xd0/0x1a0 [ 139.359601][ T7995] ? clear_bhb_loop+0x25/0x80 [ 139.359627][ T7995] ? clear_bhb_loop+0x25/0x80 [ 139.359681][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.359706][ T7995] RIP: 0033:0x7f586ddce969 [ 139.359724][ T7995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.359745][ T7995] RSP: 002b:00007f586c437038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 139.359768][ T7995] RAX: ffffffffffffffda RBX: 00007f586dff5fa0 RCX: 00007f586ddce969 [ 139.359849][ T7995] RDX: 0000200000000040 RSI: 000000003b0086cc RDI: 000000000000001d [ 139.359864][ T7995] RBP: 00007f586c437090 R08: 0000000000000000 R09: 0000000000000000 [ 139.359885][ T7995] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.359900][ T7995] R13: 0000000000000000 R14: 00007f586dff5fa0 R15: 00007ffeb5e3fd48 [ 139.359924][ T7995] [ 139.631185][ T8000] loop7: detected capacity change from 16384 to 0 [ 139.641985][ C0] I/O error, dev loop7, sector 15744 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 139.893062][ T8018] netlink: 'syz.2.1292': attribute type 10 has an invalid length. [ 139.901084][ T8018] __nla_validate_parse: 2 callbacks suppressed [ 139.907397][ T8018] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1292'. [ 139.908613][ T8031] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1298'. [ 139.917807][ T8018] team0: entered promiscuous mode [ 139.931350][ T8018] team_slave_0: entered promiscuous mode [ 139.937104][ T8018] team_slave_1: entered promiscuous mode [ 139.943311][ T8018] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.950434][ T8018] bridge0: port 3(team0) entered blocking state [ 139.957479][ T8018] bridge0: port 3(team0) entered disabled state [ 139.964044][ T8018] team0: entered allmulticast mode [ 139.969166][ T8018] team_slave_0: entered allmulticast mode [ 139.974993][ T8018] team_slave_1: entered allmulticast mode [ 140.027671][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'. [ 140.281010][ T8045] wireguard0: entered promiscuous mode [ 140.383550][ T8061] FAULT_INJECTION: forcing a failure. [ 140.383550][ T8061] name failslab, interval 1, probability 0, space 0, times 0 [ 140.396258][ T8061] CPU: 0 UID: 0 PID: 8061 Comm: syz.0.1308 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 140.396361][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 140.396426][ T8061] Call Trace: [ 140.396432][ T8061] [ 140.396439][ T8061] __dump_stack+0x1d/0x30 [ 140.396457][ T8061] dump_stack_lvl+0xe8/0x140 [ 140.396475][ T8061] dump_stack+0x15/0x1b [ 140.396489][ T8061] should_fail_ex+0x265/0x280 [ 140.396517][ T8061] ? bpf_int_jit_compile+0x118/0xd40 [ 140.396597][ T8061] should_failslab+0x8c/0xb0 [ 140.396625][ T8061] __kmalloc_cache_noprof+0x4c/0x320 [ 140.396645][ T8061] bpf_int_jit_compile+0x118/0xd40 [ 140.396728][ T8061] ? __pfx___bpf_prog_ret0_warn+0x10/0x10 [ 140.396784][ T8061] bpf_prog_select_runtime+0x445/0x5e0 [ 140.396884][ T8061] bpf_prepare_filter+0xb7d/0xbd0 [ 140.396913][ T8061] ? __pfx_seccomp_check_filter+0x10/0x10 [ 140.396964][ T8061] bpf_prog_create_from_user+0x1e6/0x260 [ 140.396991][ T8061] ? __pfx_seccomp_check_filter+0x10/0x10 [ 140.397089][ T8061] do_seccomp+0x5ef/0xa40 [ 140.397119][ T8061] prctl_set_seccomp+0x4c/0x70 [ 140.397166][ T8061] __se_sys_prctl+0x200/0x12d0 [ 140.397211][ T8061] __x64_sys_prctl+0x67/0x80 [ 140.397235][ T8061] x64_sys_call+0x2a96/0x2fb0 [ 140.397262][ T8061] do_syscall_64+0xd0/0x1a0 [ 140.397315][ T8061] ? clear_bhb_loop+0x25/0x80 [ 140.397334][ T8061] ? clear_bhb_loop+0x25/0x80 [ 140.397353][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.397370][ T8061] RIP: 0033:0x7f48b693e969 [ 140.397383][ T8061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.397465][ T8061] RSP: 002b:00007f48b4fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 140.397480][ T8061] RAX: ffffffffffffffda RBX: 00007f48b6b65fa0 RCX: 00007f48b693e969 [ 140.397490][ T8061] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 0000000000000016 [ 140.397500][ T8061] RBP: 00007f48b4fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.397510][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.397543][ T8061] R13: 0000000000000000 R14: 00007f48b6b65fa0 R15: 00007fff5f8c1618 [ 140.397568][ T8061] [ 140.399397][ T8061] ------------[ cut here ]------------ [ 140.624518][ T8061] WARNING: CPU: 0 PID: 8061 at kernel/bpf/core.c:2357 __bpf_prog_ret0_warn+0xa/0x20 [ 140.633949][ T8061] Modules linked in: [ 140.637886][ T8061] CPU: 0 UID: 0 PID: 8061 Comm: syz.0.1308 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 140.650549][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 140.660652][ T8061] RIP: 0010:__bpf_prog_ret0_warn+0xa/0x20 [ 140.666529][ T8061] Code: e8 0b 6b f6 ff eb 9a e8 04 6b f6 ff eb 93 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 e7 6a f6 ff 90 <0f> 0b 90 31 c0 c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 [ 140.686202][ T8061] RSP: 0018:ffffc900027dbd78 EFLAGS: 00010293 [ 140.692393][ T8061] RAX: ffffffff81612eb9 RBX: ffffc90002c0f048 RCX: ffff888116b5a100 [ 140.700458][ T8061] RDX: 0000000000000000 RSI: ffffc90002c0f048 RDI: ffffc900027dbe30 [ 140.708505][ T8061] RBP: 0000000000000000 R08: 0001c90002c0f037 R09: 0000000000000000 [ 140.716534][ T8061] R10: 0000000000000003 R11: ffffffff81612eb0 R12: 0000000000000000 [ 140.724542][ T8061] R13: ffff888117bc1500 R14: ffffc90002c0f000 R15: 000000007fff0000 [ 140.732604][ T8061] FS: 00007f48b4fa76c0(0000) GS:ffff8882aee50000(0000) knlGS:0000000000000000 [ 140.741708][ T8061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.748313][ T8061] CR2: 0000000000000000 CR3: 000000014b2cc000 CR4: 00000000003506f0 [ 140.756327][ T8061] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.764427][ T8061] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 140.772434][ T8061] Call Trace: [ 140.775730][ T8061] [ 140.778668][ T8061] __seccomp_filter+0x293/0x10d0 [ 140.783661][ T8061] ? _raw_spin_unlock_irq+0x26/0x50 [ 140.788943][ T8061] ? do_seccomp+0xa1c/0xa40 [ 140.793526][ T8061] __secure_computing+0x82/0x150 [ 140.798560][ T8061] syscall_trace_enter+0xcf/0x1e0 [ 140.803623][ T8061] do_syscall_64+0xaa/0x1a0 [ 140.808190][ T8061] ? clear_bhb_loop+0x25/0x80 [ 140.812926][ T8061] ? clear_bhb_loop+0x25/0x80 [ 140.817618][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.823567][ T8061] RIP: 0033:0x7f48b693d37c [ 140.828089][ T8061] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.847757][ T8061] RSP: 002b:00007f48b4fa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.856275][ T8061] RAX: ffffffffffffffda RBX: 00007f48b6b65fa0 RCX: 00007f48b693d37c [ 140.864355][ T8061] RDX: 000000000000000f RSI: 00007f48b4fa70a0 RDI: 0000000000000007 [ 140.872430][ T8061] RBP: 00007f48b4fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.880423][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.888429][ T8061] R13: 0000000000000000 R14: 00007f48b6b65fa0 R15: 00007fff5f8c1618 [ 140.896540][ T8061] [ 140.899575][ T8061] ---[ end trace 0000000000000000 ]--- [ 140.990639][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 141.057576][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'. [ 141.128067][ T8102] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1322'. [ 141.137743][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1320'. [ 141.159502][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1321'. [ 141.247844][ T8109] tmpfs: Bad value for 'mpol' [ 141.557702][ T8135] wireguard1: entered promiscuous mode [ 142.727078][ T8163] FAULT_INJECTION: forcing a failure. [ 142.727078][ T8163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.740343][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.6.1334 Tainted: G W 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 142.740380][ T8163] Tainted: [W]=WARN [ 142.740386][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 142.740448][ T8163] Call Trace: [ 142.740454][ T8163] [ 142.740541][ T8163] __dump_stack+0x1d/0x30 [ 142.740559][ T8163] dump_stack_lvl+0xe8/0x140 [ 142.740576][ T8163] dump_stack+0x15/0x1b [ 142.740620][ T8163] should_fail_ex+0x265/0x280 [ 142.740648][ T8163] should_fail+0xb/0x20 [ 142.740679][ T8163] should_fail_usercopy+0x1a/0x20 [ 142.740695][ T8163] _copy_from_user+0x1c/0xb0 [ 142.740714][ T8163] __se_sys_shmctl+0x106/0x420 [ 142.740746][ T8163] ? __fget_files+0x184/0x1c0 [ 142.740776][ T8163] __x64_sys_shmctl+0x43/0x50 [ 142.740796][ T8163] x64_sys_call+0x157e/0x2fb0 [ 142.740841][ T8163] do_syscall_64+0xd0/0x1a0 [ 142.740860][ T8163] ? clear_bhb_loop+0x25/0x80 [ 142.740878][ T8163] ? clear_bhb_loop+0x25/0x80 [ 142.740936][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.740954][ T8163] RIP: 0033:0x7f107496e969 [ 142.740968][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.741022][ T8163] RSP: 002b:00007f1072fd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 142.741038][ T8163] RAX: ffffffffffffffda RBX: 00007f1074b95fa0 RCX: 00007f107496e969 [ 142.741048][ T8163] RDX: 00002000000006c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 142.741059][ T8163] RBP: 00007f1072fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.741069][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.741104][ T8163] R13: 0000000000000000 R14: 00007f1074b95fa0 R15: 00007ffd185a5888 [ 142.741129][ T8163] [ 142.967457][ T8169] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1338'. [ 142.976567][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1338'. [ 143.118959][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 143.118976][ T29] audit: type=1326 audit(1746291489.930:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 143.148904][ T29] audit: type=1326 audit(1746291489.930:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 143.149013][ T29] audit: type=1326 audit(1746291489.930:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 143.149043][ T29] audit: type=1326 audit(1746291489.930:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 143.149091][ T29] audit: type=1326 audit(1746291489.930:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 143.149186][ T29] audit: type=1326 audit(1746291489.930:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 143.149234][ T29] audit: type=1326 audit(1746291489.930:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 143.289701][ T29] audit: type=1326 audit(1746291489.930:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 143.289737][ T29] audit: type=1326 audit(1746291489.930:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 143.289791][ T29] audit: type=1326 audit(1746291489.930:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.6.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f107496e969 code=0x7ffc0000 [ 144.166678][ T8228] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 144.321254][ T8246] vhci_hcd: invalid port number 23 [ 144.782575][ T8272] wireguard1: entered promiscuous mode [ 144.928408][ T8277] 9pnet_fd: Insufficient options for proto=fd [ 145.238675][ T8286] __nla_validate_parse: 3 callbacks suppressed [ 145.238690][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 145.296492][ T8288] FAULT_INJECTION: forcing a failure. [ 145.296492][ T8288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.309663][ T8288] CPU: 1 UID: 0 PID: 8288 Comm: syz.2.1378 Tainted: G W 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 145.309733][ T8288] Tainted: [W]=WARN [ 145.309742][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 145.309758][ T8288] Call Trace: [ 145.309766][ T8288] [ 145.309775][ T8288] __dump_stack+0x1d/0x30 [ 145.309802][ T8288] dump_stack_lvl+0xe8/0x140 [ 145.309828][ T8288] dump_stack+0x15/0x1b [ 145.309889][ T8288] should_fail_ex+0x265/0x280 [ 145.309926][ T8288] should_fail+0xb/0x20 [ 145.309983][ T8288] should_fail_usercopy+0x1a/0x20 [ 145.310006][ T8288] _copy_from_user+0x1c/0xb0 [ 145.310087][ T8288] get_user_ifreq+0x53/0x110 [ 145.310145][ T8288] sock_ioctl+0x54e/0x610 [ 145.310176][ T8288] ? __pfx_sock_ioctl+0x10/0x10 [ 145.310204][ T8288] __se_sys_ioctl+0xcb/0x140 [ 145.310239][ T8288] __x64_sys_ioctl+0x43/0x50 [ 145.310258][ T8288] x64_sys_call+0x19a8/0x2fb0 [ 145.310298][ T8288] do_syscall_64+0xd0/0x1a0 [ 145.310326][ T8288] ? clear_bhb_loop+0x25/0x80 [ 145.310350][ T8288] ? clear_bhb_loop+0x25/0x80 [ 145.310378][ T8288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.310452][ T8288] RIP: 0033:0x7f586ddce969 [ 145.310471][ T8288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.310494][ T8288] RSP: 002b:00007f586c437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.310518][ T8288] RAX: ffffffffffffffda RBX: 00007f586dff5fa0 RCX: 00007f586ddce969 [ 145.310534][ T8288] RDX: 0000200000000600 RSI: 00000000000089f2 RDI: 0000000000000003 [ 145.310591][ T8288] RBP: 00007f586c437090 R08: 0000000000000000 R09: 0000000000000000 [ 145.310602][ T8288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.310641][ T8288] R13: 0000000000000000 R14: 00007f586dff5fa0 R15: 00007ffeb5e3fd48 [ 145.310660][ T8288] [ 146.007336][ T8307] wireguard1: entered promiscuous mode [ 146.021454][ T8311] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1385'. [ 146.348450][ T8322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1389'. [ 146.378928][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1390'. [ 146.388021][ T8324] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1390'. [ 146.397086][ T8324] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1390'. [ 146.406626][ T8325] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 146.414911][ T8325] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 146.431958][ T8325] delete_channel: no stack [ 146.505500][ T8333] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 146.587463][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 146.610625][ T8342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1391'. [ 146.704490][ T8350] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 146.711099][ T8350] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 146.718917][ T8350] vhci_hcd vhci_hcd.0: Device attached [ 146.781778][ T8351] vhci_hcd: connection closed [ 146.781938][ T31] vhci_hcd: stop threads [ 146.790922][ T31] vhci_hcd: release socket [ 146.795464][ T31] vhci_hcd: disconnect device [ 146.885590][ T8357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1401'. [ 146.914852][ T8359] netlink: 'syz.5.1402': attribute type 1 has an invalid length. [ 146.922658][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1402'. [ 147.011753][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.021281][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.234288][ T8404] 9pnet: p9_errstr2errno: server reported unknown error [ 148.484763][ T8415] FAULT_INJECTION: forcing a failure. [ 148.484763][ T8415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.497939][ T8415] CPU: 0 UID: 0 PID: 8415 Comm: syz.2.1418 Tainted: G W 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 148.498043][ T8415] Tainted: [W]=WARN [ 148.498097][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 148.498124][ T8415] Call Trace: [ 148.498132][ T8415] [ 148.498142][ T8415] __dump_stack+0x1d/0x30 [ 148.498167][ T8415] dump_stack_lvl+0xe8/0x140 [ 148.498190][ T8415] dump_stack+0x15/0x1b [ 148.498210][ T8415] should_fail_ex+0x265/0x280 [ 148.498243][ T8415] should_fail+0xb/0x20 [ 148.498331][ T8415] should_fail_usercopy+0x1a/0x20 [ 148.498348][ T8415] _copy_from_user+0x1c/0xb0 [ 148.498368][ T8415] kstrtouint_from_user+0x69/0xf0 [ 148.498400][ T8415] ? avc_policy_seqno+0x15/0x30 [ 148.498487][ T8415] proc_fail_nth_write+0x50/0x160 [ 148.498513][ T8415] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.498540][ T8415] vfs_write+0x266/0x8d0 [ 148.498560][ T8415] ? vfs_read+0x47f/0x6f0 [ 148.498579][ T8415] ? __rcu_read_unlock+0x4f/0x70 [ 148.498668][ T8415] ? __fget_files+0x184/0x1c0 [ 148.498703][ T8415] ksys_write+0xda/0x1a0 [ 148.498760][ T8415] __x64_sys_write+0x40/0x50 [ 148.498861][ T8415] x64_sys_call+0x2cdd/0x2fb0 [ 148.498879][ T8415] do_syscall_64+0xd0/0x1a0 [ 148.498899][ T8415] ? clear_bhb_loop+0x25/0x80 [ 148.498990][ T8415] ? clear_bhb_loop+0x25/0x80 [ 148.499016][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.499097][ T8415] RIP: 0033:0x7f586ddcd41f [ 148.499110][ T8415] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 148.499124][ T8415] RSP: 002b:00007f586c437030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 148.499139][ T8415] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f586ddcd41f [ 148.499208][ T8415] RDX: 0000000000000001 RSI: 00007f586c4370a0 RDI: 0000000000000006 [ 148.499313][ T8415] RBP: 00007f586c437090 R08: 0000000000000000 R09: 0000000000000000 [ 148.499359][ T8415] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 148.499372][ T8415] R13: 0000000000000000 R14: 00007f586dff5fa0 R15: 00007ffeb5e3fd48 [ 148.499388][ T8415] [ 150.344608][ T8442] __nla_validate_parse: 4 callbacks suppressed [ 150.344625][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1438'. [ 150.382072][ T29] kauditd_printk_skb: 975 callbacks suppressed [ 150.382088][ T29] audit: type=1400 audit(1746291497.200:7082): avc: denied { create } for pid=8444 comm="syz.4.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.408589][ T29] audit: type=1400 audit(1746291497.200:7083): avc: denied { write } for pid=8444 comm="syz.4.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.997076][ T8452] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1430'. [ 152.067732][ T8472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.080501][ T8473] lo: entered promiscuous mode [ 152.085511][ T8473] lo: entered allmulticast mode [ 152.086444][ T8472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.243594][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1440'. [ 152.327050][ T29] audit: type=1326 audit(1746291499.140:7084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b693e969 code=0x7ffc0000 [ 152.350571][ T29] audit: type=1326 audit(1746291499.140:7085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b693e969 code=0x7ffc0000 [ 152.406708][ T29] audit: type=1326 audit(1746291499.190:7086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b693e969 code=0x7ffc0000 [ 152.430429][ T29] audit: type=1326 audit(1746291499.190:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b693e969 code=0x7ffc0000 [ 152.453866][ T29] audit: type=1326 audit(1746291499.190:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b693e969 code=0x7ffc0000 [ 152.477373][ T29] audit: type=1326 audit(1746291499.200:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b693e969 code=0x7ffc0000 [ 152.500890][ T29] audit: type=1326 audit(1746291499.200:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b693e969 code=0x7ffc0000 [ 152.524388][ T29] audit: type=1326 audit(1746291499.200:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.0.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b693e969 code=0x7ffc0000 [ 152.570695][ T8490] wireguard1: entered promiscuous mode [ 153.004494][ T8511] FAULT_INJECTION: forcing a failure. [ 153.004494][ T8511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.017643][ T8511] CPU: 1 UID: 0 PID: 8511 Comm: syz.0.1452 Tainted: G W 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 153.017711][ T8511] Tainted: [W]=WARN [ 153.017720][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 153.017736][ T8511] Call Trace: [ 153.017743][ T8511] [ 153.017788][ T8511] __dump_stack+0x1d/0x30 [ 153.017814][ T8511] dump_stack_lvl+0xe8/0x140 [ 153.017839][ T8511] dump_stack+0x15/0x1b [ 153.017865][ T8511] should_fail_ex+0x265/0x280 [ 153.017907][ T8511] should_fail+0xb/0x20 [ 153.018037][ T8511] should_fail_usercopy+0x1a/0x20 [ 153.018060][ T8511] _copy_from_iter+0xcf/0xdd0 [ 153.018083][ T8511] ? __build_skb_around+0x1a0/0x200 [ 153.018123][ T8511] ? __alloc_skb+0x223/0x320 [ 153.018160][ T8511] netlink_sendmsg+0x471/0x6b0 [ 153.018292][ T8511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.018353][ T8511] __sock_sendmsg+0x142/0x180 [ 153.018385][ T8511] ____sys_sendmsg+0x31e/0x4e0 [ 153.018415][ T8511] ___sys_sendmsg+0x17b/0x1d0 [ 153.018527][ T8511] __x64_sys_sendmsg+0xd4/0x160 [ 153.018559][ T8511] x64_sys_call+0x2999/0x2fb0 [ 153.018587][ T8511] do_syscall_64+0xd0/0x1a0 [ 153.018615][ T8511] ? clear_bhb_loop+0x25/0x80 [ 153.018698][ T8511] ? clear_bhb_loop+0x25/0x80 [ 153.018726][ T8511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.018753][ T8511] RIP: 0033:0x7f48b693e969 [ 153.018772][ T8511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.018795][ T8511] RSP: 002b:00007f48b4fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.018832][ T8511] RAX: ffffffffffffffda RBX: 00007f48b6b65fa0 RCX: 00007f48b693e969 [ 153.018845][ T8511] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 153.018866][ T8511] RBP: 00007f48b4fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.018930][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.018945][ T8511] R13: 0000000000000000 R14: 00007f48b6b65fa0 R15: 00007fff5f8c1618 [ 153.018971][ T8511] [ 153.277254][ T8515] 9pnet: p9_errstr2errno: server reported unknown error [ 153.311756][ T8519] sch_fq: defrate 0 ignored. [ 153.320152][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 153.329139][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 153.414326][ T8524] wireguard0: entered promiscuous mode [ 153.506226][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 153.582777][ T8545] xt_hashlimit: max too large, truncated to 1048576 [ 153.735569][ T8545] xt_hashlimit: max too large, truncated to 1048576 [ 153.849847][ T8570] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1474'. [ 153.957885][ T8575] wireguard0: entered promiscuous mode [ 154.103689][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1479'. [ 154.576872][ T8600] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 154.588199][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1486'. [ 154.736157][ T8612] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1492'. [ 154.852897][ T8627] FAULT_INJECTION: forcing a failure. [ 154.852897][ T8627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.866059][ T8627] CPU: 0 UID: 0 PID: 8627 Comm: syz.4.1498 Tainted: G W 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 154.866099][ T8627] Tainted: [W]=WARN [ 154.866105][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 154.866118][ T8627] Call Trace: [ 154.866126][ T8627] [ 154.866136][ T8627] __dump_stack+0x1d/0x30 [ 154.866240][ T8627] dump_stack_lvl+0xe8/0x140 [ 154.866262][ T8627] dump_stack+0x15/0x1b [ 154.866284][ T8627] should_fail_ex+0x265/0x280 [ 154.866325][ T8627] should_fail+0xb/0x20 [ 154.866356][ T8627] should_fail_usercopy+0x1a/0x20 [ 154.866408][ T8627] strncpy_from_user+0x25/0x230 [ 154.866469][ T8627] ? kmem_cache_alloc_noprof+0x186/0x310 [ 154.866510][ T8627] ? getname_flags+0x80/0x3b0 [ 154.866540][ T8627] getname_flags+0xae/0x3b0 [ 154.866569][ T8627] __x64_sys_rename+0x40/0x70 [ 154.866621][ T8627] x64_sys_call+0x2aee/0x2fb0 [ 154.866641][ T8627] do_syscall_64+0xd0/0x1a0 [ 154.866724][ T8627] ? clear_bhb_loop+0x25/0x80 [ 154.866751][ T8627] ? clear_bhb_loop+0x25/0x80 [ 154.866799][ T8627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.866861][ T8627] RIP: 0033:0x7fdb30f5e969 [ 154.866878][ T8627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.866895][ T8627] RSP: 002b:00007fdb2f5c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 154.866913][ T8627] RAX: ffffffffffffffda RBX: 00007fdb31185fa0 RCX: 00007fdb30f5e969 [ 154.866924][ T8627] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000200000000340 [ 154.866938][ T8627] RBP: 00007fdb2f5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.866956][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.866971][ T8627] R13: 0000000000000000 R14: 00007fdb31185fa0 R15: 00007ffea36ef8c8 [ 154.866996][ T8627] [ 155.128870][ T8642] netlink: 'syz.4.1505': attribute type 12 has an invalid length. [ 155.309605][ T8662] FAULT_INJECTION: forcing a failure. [ 155.309605][ T8662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.322866][ T8662] CPU: 0 UID: 0 PID: 8662 Comm: syz.0.1514 Tainted: G W 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 155.322909][ T8662] Tainted: [W]=WARN [ 155.322917][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 155.322943][ T8662] Call Trace: [ 155.322952][ T8662] [ 155.322961][ T8662] __dump_stack+0x1d/0x30 [ 155.322989][ T8662] dump_stack_lvl+0xe8/0x140 [ 155.323015][ T8662] dump_stack+0x15/0x1b [ 155.323101][ T8662] should_fail_ex+0x265/0x280 [ 155.323135][ T8662] should_fail+0xb/0x20 [ 155.323208][ T8662] should_fail_usercopy+0x1a/0x20 [ 155.323232][ T8662] _copy_from_user+0x1c/0xb0 [ 155.323302][ T8662] ___sys_sendmsg+0xc1/0x1d0 [ 155.323400][ T8662] __x64_sys_sendmsg+0xd4/0x160 [ 155.323432][ T8662] x64_sys_call+0x2999/0x2fb0 [ 155.323467][ T8662] do_syscall_64+0xd0/0x1a0 [ 155.323489][ T8662] ? clear_bhb_loop+0x25/0x80 [ 155.323511][ T8662] ? clear_bhb_loop+0x25/0x80 [ 155.323538][ T8662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.323677][ T8662] RIP: 0033:0x7f48b693e969 [ 155.323696][ T8662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.323720][ T8662] RSP: 002b:00007f48b4fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.323744][ T8662] RAX: ffffffffffffffda RBX: 00007f48b6b65fa0 RCX: 00007f48b693e969 [ 155.323759][ T8662] RDX: 0000000000040020 RSI: 0000200000000280 RDI: 0000000000000003 [ 155.323771][ T8662] RBP: 00007f48b4fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 155.323782][ T8662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.323793][ T8662] R13: 0000000000000000 R14: 00007f48b6b65fa0 R15: 00007fff5f8c1618 [ 155.323890][ T8662] [ 155.551214][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 155.551229][ T29] audit: type=1400 audit(1746291502.360:7537): avc: denied { ioctl } for pid=8663 comm="+}[@" path="socket:[21050]" dev="sockfs" ino=21050 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.631361][ T29] audit: type=1400 audit(1746291502.410:7538): avc: denied { bind } for pid=8667 comm="syz.0.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.650969][ T29] audit: type=1400 audit(1746291502.410:7539): avc: denied { name_bind } for pid=8667 comm="syz.0.1517" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 155.671808][ T29] audit: type=1400 audit(1746291502.410:7540): avc: denied { node_bind } for pid=8667 comm="syz.0.1517" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 155.717850][ T29] audit: type=1400 audit(1746291502.530:7541): avc: denied { getopt } for pid=8677 comm="syz.4.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.783079][ T29] audit: type=1400 audit(1746291502.530:7542): avc: denied { mount } for pid=8677 comm="syz.4.1520" name="/" dev="ramfs" ino=21081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 155.815524][ T8684] __nla_validate_parse: 3 callbacks suppressed [ 155.815631][ T8684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1522'. [ 155.831172][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1518'. [ 155.931408][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1527'. [ 155.961070][ T29] audit: type=1326 audit(1746291502.770:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.5.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 155.984648][ T29] audit: type=1326 audit(1746291502.770:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.5.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 156.008489][ T29] audit: type=1326 audit(1746291502.770:7545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.5.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 156.032630][ T29] audit: type=1326 audit(1746291502.770:7546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8699 comm="syz.5.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 156.071311][ T8704] wireguard0: entered promiscuous mode [ 156.088914][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 156.128163][ T8711] FAULT_INJECTION: forcing a failure. [ 156.128163][ T8711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.141424][ T8711] CPU: 1 UID: 0 PID: 8711 Comm: syz.0.1533 Tainted: G W 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 156.141487][ T8711] Tainted: [W]=WARN [ 156.141494][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 156.141506][ T8711] Call Trace: [ 156.141579][ T8711] [ 156.141669][ T8711] __dump_stack+0x1d/0x30 [ 156.141689][ T8711] dump_stack_lvl+0xe8/0x140 [ 156.141709][ T8711] dump_stack+0x15/0x1b [ 156.141725][ T8711] should_fail_ex+0x265/0x280 [ 156.141757][ T8711] should_fail+0xb/0x20 [ 156.141819][ T8711] should_fail_usercopy+0x1a/0x20 [ 156.141844][ T8711] _copy_from_user+0x1c/0xb0 [ 156.141897][ T8711] get_user_ifreq+0x53/0x110 [ 156.141920][ T8711] sock_ioctl+0x54e/0x610 [ 156.141970][ T8711] ? __pfx_sock_ioctl+0x10/0x10 [ 156.141992][ T8711] __se_sys_ioctl+0xcb/0x140 [ 156.142013][ T8711] __x64_sys_ioctl+0x43/0x50 [ 156.142033][ T8711] x64_sys_call+0x19a8/0x2fb0 [ 156.142063][ T8711] do_syscall_64+0xd0/0x1a0 [ 156.142084][ T8711] ? clear_bhb_loop+0x25/0x80 [ 156.142104][ T8711] ? clear_bhb_loop+0x25/0x80 [ 156.142125][ T8711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.142200][ T8711] RIP: 0033:0x7f48b693e969 [ 156.142214][ T8711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.142232][ T8711] RSP: 002b:00007f48b4fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.142249][ T8711] RAX: ffffffffffffffda RBX: 00007f48b6b65fa0 RCX: 00007f48b693e969 [ 156.142261][ T8711] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004 [ 156.142277][ T8711] RBP: 00007f48b4fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.142288][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.142299][ T8711] R13: 0000000000000000 R14: 00007f48b6b65fa0 R15: 00007fff5f8c1618 [ 156.142392][ T8711] [ 156.355036][ T8715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1535'. [ 156.375612][ T8717] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1536'. [ 156.427706][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 156.429168][ T8723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8723 comm=syz.5.1539 [ 156.494053][ T8730] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 156.627373][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1548'. [ 156.902476][ T8748] wireguard0: entered promiscuous mode [ 157.066972][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1551'. [ 157.130742][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1553'. [ 157.254278][ T8759] wireguard0: entered promiscuous mode [ 157.445488][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.454260][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.144681][ T8801] FAULT_INJECTION: forcing a failure. [ 158.144681][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 158.157386][ T8801] CPU: 0 UID: 0 PID: 8801 Comm: syz.4.1571 Tainted: G W 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 158.157456][ T8801] Tainted: [W]=WARN [ 158.157465][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.157481][ T8801] Call Trace: [ 158.157488][ T8801] [ 158.157495][ T8801] __dump_stack+0x1d/0x30 [ 158.157539][ T8801] dump_stack_lvl+0xe8/0x140 [ 158.157640][ T8801] dump_stack+0x15/0x1b [ 158.157662][ T8801] should_fail_ex+0x265/0x280 [ 158.157700][ T8801] should_failslab+0x8c/0xb0 [ 158.157765][ T8801] kmem_cache_alloc_node_noprof+0x57/0x320 [ 158.157811][ T8801] ? __alloc_skb+0x101/0x320 [ 158.157852][ T8801] __alloc_skb+0x101/0x320 [ 158.157916][ T8801] virtual_ncidev_write+0x3b/0x1a0 [ 158.157948][ T8801] ? __pfx_virtual_ncidev_write+0x10/0x10 [ 158.157971][ T8801] vfs_write+0x266/0x8d0 [ 158.157995][ T8801] ? __rcu_read_unlock+0x4f/0x70 [ 158.158038][ T8801] ? __fget_files+0x184/0x1c0 [ 158.158067][ T8801] ksys_write+0xda/0x1a0 [ 158.158092][ T8801] __x64_sys_write+0x40/0x50 [ 158.158142][ T8801] x64_sys_call+0x2cdd/0x2fb0 [ 158.158168][ T8801] do_syscall_64+0xd0/0x1a0 [ 158.158196][ T8801] ? clear_bhb_loop+0x25/0x80 [ 158.158224][ T8801] ? clear_bhb_loop+0x25/0x80 [ 158.158329][ T8801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.158358][ T8801] RIP: 0033:0x7fdb30f5e969 [ 158.158373][ T8801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.158441][ T8801] RSP: 002b:00007fdb2f5c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.158532][ T8801] RAX: ffffffffffffffda RBX: 00007fdb31185fa0 RCX: 00007fdb30f5e969 [ 158.158591][ T8801] RDX: 00000000fffffeea RSI: 0000000000000000 RDI: 0000000000000006 [ 158.158607][ T8801] RBP: 00007fdb2f5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.158622][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.158652][ T8801] R13: 0000000000000000 R14: 00007fdb31185fa0 R15: 00007ffea36ef8c8 [ 158.158678][ T8801] [ 158.611625][ T8819] Restarting kernel threads ... done. [ 158.706084][ T8829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.716424][ T8829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.437536][ T8882] vhci_hcd: invalid port number 23 [ 159.695831][ T8898] FAULT_INJECTION: forcing a failure. [ 159.695831][ T8898] name failslab, interval 1, probability 0, space 0, times 0 [ 159.708674][ T8898] CPU: 1 UID: 0 PID: 8898 Comm: syz.4.1609 Tainted: G W 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 159.708717][ T8898] Tainted: [W]=WARN [ 159.708788][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 159.708804][ T8898] Call Trace: [ 159.708810][ T8898] [ 159.708818][ T8898] __dump_stack+0x1d/0x30 [ 159.708843][ T8898] dump_stack_lvl+0xe8/0x140 [ 159.708877][ T8898] dump_stack+0x15/0x1b [ 159.708899][ T8898] should_fail_ex+0x265/0x280 [ 159.708999][ T8898] should_failslab+0x8c/0xb0 [ 159.709038][ T8898] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 159.709064][ T8898] ? p9_client_create+0x59/0xbc0 [ 159.709161][ T8898] ? p9_client_create+0x207/0xbc0 [ 159.709198][ T8898] ? should_failslab+0x8c/0xb0 [ 159.709290][ T8898] kstrdup+0x3e/0xd0 [ 159.709332][ T8898] p9_client_create+0x207/0xbc0 [ 159.709389][ T8898] v9fs_session_init+0xf7/0xde0 [ 159.709431][ T8898] ? __rcu_read_unlock+0x4f/0x70 [ 159.709509][ T8898] ? should_fail_ex+0xdb/0x280 [ 159.709549][ T8898] ? v9fs_mount+0x51/0x590 [ 159.709574][ T8898] ? should_failslab+0x8c/0xb0 [ 159.709642][ T8898] ? __kmalloc_cache_noprof+0x189/0x320 [ 159.709670][ T8898] v9fs_mount+0x67/0x590 [ 159.709696][ T8898] ? __pfx_v9fs_mount+0x10/0x10 [ 159.709723][ T8898] legacy_get_tree+0x75/0xd0 [ 159.709769][ T8898] vfs_get_tree+0x54/0x1d0 [ 159.709792][ T8898] do_new_mount+0x207/0x680 [ 159.709819][ T8898] path_mount+0x4a4/0xb20 [ 159.709844][ T8898] ? user_path_at+0x109/0x130 [ 159.709929][ T8898] __se_sys_mount+0x28f/0x2e0 [ 159.710034][ T8898] __x64_sys_mount+0x67/0x80 [ 159.710057][ T8898] x64_sys_call+0xd36/0x2fb0 [ 159.710077][ T8898] do_syscall_64+0xd0/0x1a0 [ 159.710142][ T8898] ? clear_bhb_loop+0x25/0x80 [ 159.710163][ T8898] ? clear_bhb_loop+0x25/0x80 [ 159.710188][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.710215][ T8898] RIP: 0033:0x7fdb30f5e969 [ 159.710233][ T8898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.710265][ T8898] RSP: 002b:00007fdb2f5c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.710289][ T8898] RAX: ffffffffffffffda RBX: 00007fdb31185fa0 RCX: 00007fdb30f5e969 [ 159.710305][ T8898] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 159.710322][ T8898] RBP: 00007fdb2f5c7090 R08: 0000200000000400 R09: 0000000000000000 [ 159.710376][ T8898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.710392][ T8898] R13: 0000000000000000 R14: 00007fdb31185fa0 R15: 00007ffea36ef8c8 [ 159.710417][ T8898] [ 160.088983][ T8913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.097921][ T8913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.233450][ T8926] IPv6: sit1: Disabled Multicast RS [ 160.239658][ T8926] sit1: entered allmulticast mode [ 160.275551][ T8928] FAULT_INJECTION: forcing a failure. [ 160.275551][ T8928] name failslab, interval 1, probability 0, space 0, times 0 [ 160.288270][ T8928] CPU: 0 UID: 0 PID: 8928 Comm: syz.2.1621 Tainted: G W 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 160.288310][ T8928] Tainted: [W]=WARN [ 160.288318][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 160.288377][ T8928] Call Trace: [ 160.288384][ T8928] [ 160.288392][ T8928] __dump_stack+0x1d/0x30 [ 160.288418][ T8928] dump_stack_lvl+0xe8/0x140 [ 160.288441][ T8928] dump_stack+0x15/0x1b [ 160.288487][ T8928] should_fail_ex+0x265/0x280 [ 160.288519][ T8928] should_failslab+0x8c/0xb0 [ 160.288622][ T8928] kmem_cache_alloc_noprof+0x50/0x310 [ 160.288699][ T8928] ? __anon_vma_prepare+0x70/0x2f0 [ 160.288732][ T8928] __anon_vma_prepare+0x70/0x2f0 [ 160.288760][ T8928] do_wp_page+0x17fa/0x23e0 [ 160.288793][ T8928] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 160.288922][ T8928] ? __rcu_read_lock+0x37/0x50 [ 160.288946][ T8928] handle_mm_fault+0x6dc/0x2ae0 [ 160.289047][ T8928] ? mas_walk+0xf2/0x120 [ 160.289138][ T8928] do_user_addr_fault+0x636/0x1090 [ 160.289178][ T8928] ? fpregs_assert_state_consistent+0x84/0xa0 [ 160.289239][ T8928] exc_page_fault+0x54/0xc0 [ 160.289276][ T8928] asm_exc_page_fault+0x26/0x30 [ 160.289300][ T8928] RIP: 0033:0x7f586dc90cc3 [ 160.289318][ T8928] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 160.289456][ T8928] RSP: 002b:00007f586c4363f0 EFLAGS: 00010202 [ 160.289475][ T8928] RAX: 00000000000001c0 RBX: 00007f586c436490 RCX: 00007f5864017000 [ 160.289499][ T8928] RDX: 00007f586c436630 RSI: 0000000000000001 RDI: 00007f586c436530 [ 160.289514][ T8928] RBP: 00000000000000bd R08: 0000000000000007 R09: 0000000000000032 [ 160.289524][ T8928] R10: 0000000000000046 R11: 00007f586c436490 R12: 0000000000000001 [ 160.289535][ T8928] R13: 00007f586de6bfc0 R14: 0000000000000002 R15: 00007f586c436530 [ 160.289556][ T8928] [ 160.289589][ T8928] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 160.978490][ T8946] __nla_validate_parse: 11 callbacks suppressed [ 160.978513][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 161.063478][ T8952] Cannot find add_set index 0 as target [ 161.073499][ T8952] netlink: 'syz.5.1632': attribute type 3 has an invalid length. [ 161.111154][ T29] kauditd_printk_skb: 598 callbacks suppressed [ 161.111168][ T29] audit: type=1326 audit(1746291507.910:8145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8953 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 161.141005][ T29] audit: type=1326 audit(1746291507.910:8146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8953 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 161.164470][ T29] audit: type=1326 audit(1746291507.920:8147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8953 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 161.187884][ T29] audit: type=1326 audit(1746291507.920:8148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8953 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 161.211340][ T29] audit: type=1326 audit(1746291507.920:8149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8953 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 161.234796][ T29] audit: type=1326 audit(1746291507.920:8150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8953 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 161.258274][ T29] audit: type=1326 audit(1746291507.920:8151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8953 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 161.281790][ T29] audit: type=1326 audit(1746291507.920:8152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8953 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 161.305266][ T29] audit: type=1326 audit(1746291507.920:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8953 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 161.328787][ T29] audit: type=1326 audit(1746291507.920:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8953 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117677e969 code=0x7ffc0000 [ 161.491232][ T8955] wireguard0: entered promiscuous mode [ 161.529347][ T8967] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1638'. [ 161.635970][ T6759] udevd[6759]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 162.469884][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1651'. [ 162.707242][ T9028] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1661'. [ 163.571994][ T9053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1678'. [ 163.686570][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 163.849578][ T9079] wireguard0: entered promiscuous mode [ 164.047350][ T9096] IPv6: Can't replace route, no match found [ 164.155147][ T9103] block device autoloading is deprecated and will be removed. [ 164.300077][ T9114] wireguard0: entered promiscuous mode [ 164.734263][ T9143] SELinux: Context  is not valid (left unmapped). [ 164.822671][ T9152] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1704'. [ 164.912637][ T9156] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1705'. [ 164.922731][ T9154] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1705'. [ 164.925555][ T9156] SELinux: security_context_str_to_sid (ð ÿÿ) failed with errno=-22 [ 165.036515][ T9158] wireguard0: entered promiscuous mode [ 165.043123][ T9158] team0: Device wireguard0 is of different type [ 165.516217][ T9168] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 166.197696][ T29] kauditd_printk_skb: 512 callbacks suppressed [ 166.197717][ T29] audit: type=1400 audit(1746291513.010:8665): avc: denied { create } for pid=9177 comm="syz.6.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 166.247107][ T9182] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 166.322008][ T29] audit: type=1400 audit(1746291513.040:8666): avc: denied { sys_admin } for pid=9177 comm="syz.6.1712" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 166.329804][ T9182] SELinux: failed to load policy [ 166.343312][ T29] audit: type=1400 audit(1746291513.060:8667): avc: denied { load_policy } for pid=9177 comm="syz.6.1712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 166.879629][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1716'. [ 166.997817][ T29] audit: type=1400 audit(1746291513.810:8668): avc: denied { connect } for pid=9198 comm="syz.5.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.017789][ T29] audit: type=1400 audit(1746291513.810:8669): avc: denied { getopt } for pid=9198 comm="syz.5.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.052237][ T9202] netlink: 'syz.6.1719': attribute type 1 has an invalid length. [ 167.060162][ T9202] netlink: 'syz.6.1719': attribute type 4 has an invalid length. [ 167.067957][ T9202] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1719'. [ 167.079956][ T9204] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1720'. [ 167.079990][ T9202] lo: entered promiscuous mode [ 167.094163][ T9202] lo: entered allmulticast mode [ 167.236092][ T29] audit: type=1326 audit(1746291514.040:8670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 167.259632][ T29] audit: type=1326 audit(1746291514.040:8671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 167.283118][ T29] audit: type=1326 audit(1746291514.040:8672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 167.306648][ T29] audit: type=1326 audit(1746291514.040:8673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 167.330126][ T29] audit: type=1326 audit(1746291514.040:8674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.4.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fdb30f5e969 code=0x7ffc0000 [ 167.354693][ T9213] 9pnet: p9_errstr2errno: server reported unknown error [ 167.442320][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'. [ 167.451271][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'. [ 167.454892][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1728'. [ 167.460180][ T9222] netlink: 'syz.2.1727': attribute type 13 has an invalid length. [ 167.477052][ T9222] netlink: 'syz.2.1727': attribute type 14 has an invalid length. [ 167.540884][ T9222] vlan0: entered allmulticast mode [ 167.590626][ T9228] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1730'. [ 167.860434][ T9257] random: crng reseeded on system resumption [ 167.939004][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1739'. [ 168.662985][ T9300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1753'. [ 170.645241][ T9323] loop0: detected capacity change from 0 to 512 [ 170.652229][ T9323] EXT4-fs: Ignoring removed orlov option [ 170.658923][ T9323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.668372][ T9323] EXT4-fs (loop0): orphan cleanup on readonly fs [ 170.676236][ T9323] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1761: bg 0: block 248: padding at end of block bitmap is not set [ 170.690906][ T9323] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1761: Failed to acquire dquot type 1 [ 170.703423][ T9323] EXT4-fs (loop0): 1 truncate cleaned up [ 170.710068][ T9323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.740100][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.901851][ T9337] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1766'. [ 170.933039][ T9339] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 170.939609][ T9339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.947156][ T9339] vhci_hcd vhci_hcd.0: Device attached [ 170.960325][ T9339] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 170.966882][ T9339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.974582][ T9339] vhci_hcd vhci_hcd.0: Device attached [ 170.986430][ T9342] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 170.993066][ T9342] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 171.000525][ T9342] vhci_hcd vhci_hcd.0: Device attached [ 171.017994][ T9339] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 171.063740][ T9348] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 171.096960][ T9320] ================================================================== [ 171.105101][ T9320] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 171.112167][ T9320] [ 171.114515][ T9320] read-write to 0xffff888237d1ae54 of 4 bytes by interrupt on cpu 1: [ 171.122602][ T9320] hrtimer_interrupt+0x70/0x460 [ 171.127466][ T9320] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 171.133375][ T9320] sysvec_apic_timer_interrupt+0x6f/0x80 [ 171.139034][ T9320] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 171.145031][ T9320] kcsan_setup_watchpoint+0x415/0x430 [ 171.150423][ T9320] unmap_page_range+0xbbc/0x27b0 [ 171.155372][ T9320] unmap_single_vma+0x138/0x1d0 [ 171.160239][ T9320] unmap_vmas+0x18a/0x2b0 [ 171.164579][ T9320] exit_mmap+0x1b0/0x6c0 [ 171.168835][ T9320] __mmput+0x28/0x1c0 [ 171.172830][ T9320] mmput+0x40/0x50 [ 171.176562][ T9320] exit_mm+0xe4/0x190 [ 171.180560][ T9320] do_exit+0x55f/0x17c0 [ 171.184735][ T9320] do_group_exit+0xff/0x140 [ 171.189254][ T9320] get_signal+0xe59/0xf70 [ 171.193603][ T9320] arch_do_signal_or_restart+0x97/0x480 [ 171.199173][ T9320] syscall_exit_to_user_mode+0x68/0xb0 [ 171.204652][ T9320] do_syscall_64+0xdd/0x1a0 [ 171.209163][ T9320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.215088][ T9320] [ 171.217419][ T9320] read to 0xffff888237d1ae54 of 4 bytes by task 9320 on cpu 0: [ 171.224966][ T9320] print_cpu+0x359/0x680 [ 171.229216][ T9320] timer_list_show+0x107/0x170 [ 171.233987][ T9320] seq_read_iter+0x627/0x940 [ 171.238586][ T9320] proc_reg_read_iter+0x10d/0x180 [ 171.243629][ T9320] copy_splice_read+0x3c1/0x5f0 [ 171.248491][ T9320] splice_direct_to_actor+0x26c/0x680 [ 171.253873][ T9320] do_splice_direct+0xda/0x150 [ 171.258647][ T9320] do_sendfile+0x380/0x640 [ 171.263085][ T9320] __x64_sys_sendfile64+0x105/0x150 [ 171.268307][ T9320] x64_sys_call+0xb39/0x2fb0 [ 171.272908][ T9320] do_syscall_64+0xd0/0x1a0 [ 171.277423][ T9320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.283326][ T9320] [ 171.285651][ T9320] value changed: 0x0009cea7 -> 0x0009cea8 [ 171.291384][ T9320] [ 171.293748][ T9320] Reported by Kernel Concurrency Sanitizer on: [ 171.299931][ T9320] CPU: 0 UID: 0 PID: 9320 Comm: syz.2.1760 Tainted: G W 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 171.313921][ T9320] Tainted: [W]=WARN [ 171.317743][ T9320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 171.327803][ T9320] ================================================================== [ 171.336104][ T9339] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(18) [ 171.342783][ T9339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 171.350503][ T9339] vhci_hcd vhci_hcd.0: Device attached [ 171.359184][ T9342] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(17) [ 171.365821][ T9342] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 171.373492][ T9342] vhci_hcd vhci_hcd.0: Device attached [ 171.379971][ T9339] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(20) [ 171.386622][ T9339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 171.394233][ T9339] vhci_hcd vhci_hcd.0: Device attached [ 171.395760][ T9355] tmpfs: Bad value for 'mpol' [ 171.406611][ T9339] vhci_hcd vhci_hcd.0: port 0 already used [ 171.422561][ T9339] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(29) [ 171.429208][ T9339] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 171.437029][ T9339] vhci_hcd vhci_hcd.0: Device attached [ 171.455851][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 171.455869][ T29] audit: type=1400 audit(1746291518.270:8802): avc: denied { map } for pid=9338 comm="syz.0.1768" path="socket:[23378]" dev="sockfs" ino=23378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 171.465965][ T9351] vhci_hcd: connection closed [ 171.486438][ T9359] vhci_hcd: connection closed [ 171.488236][ T9354] vhci_hcd: connection closed [ 171.492099][ T9363] vhci_hcd: connection closed [ 171.495958][ T9343] vhci_hcd: connection closed [ 171.501012][ T56] vhci_hcd: stop threads [ 171.505729][ T9340] vhci_hcd: connection closed [ 171.510049][ T56] vhci_hcd: release socket [ 171.515337][ T9344] vhci_hcd: connection closed [ 171.518983][ T56] vhci_hcd: disconnect device [ 171.533318][ T56] vhci_hcd: stop threads [ 171.537686][ T56] vhci_hcd: release socket [ 171.542225][ T56] vhci_hcd: disconnect device [ 171.547110][ T56] vhci_hcd: stop threads [ 171.551433][ T56] vhci_hcd: release socket [ 171.555955][ T56] vhci_hcd: disconnect device [ 171.560932][ T56] vhci_hcd: stop threads [ 171.565219][ T56] vhci_hcd: release socket [ 171.569630][ T56] vhci_hcd: disconnect device [ 171.574406][ T56] vhci_hcd: stop threads [ 171.578661][ T56] vhci_hcd: release socket [ 171.583203][ T56] vhci_hcd: disconnect device [ 171.588041][ T56] vhci_hcd: stop threads [ 171.592306][ T56] vhci_hcd: release socket [ 171.596788][ T56] vhci_hcd: disconnect device [ 171.601728][ T56] vhci_hcd: stop threads [ 171.606006][ T56] vhci_hcd: release socket [ 171.610620][ T56] vhci_hcd: disconnect device