last executing test programs: 9m38.594670785s ago: executing program 3 (id=3589): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='mm_page_free\x00', r0, 0x0, 0x1000}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8) 9m36.82403735s ago: executing program 3 (id=3592): mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000e) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x3, 0x0, &(0x7f0000000000), 0x3e0000) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000380)=0xe8) setreuid(r1, r2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000001000"/28], 0x48) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="88ee88e241c9cce391fd70cf3000", 0xfffffffffffffef7}], 0x1, 0x14, 0x0) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="0d4fa27c8bd8018d531b71", 0xb}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 9m35.926922063s ago: executing program 3 (id=3603): ioperm(0x284, 0x7f, 0xe3) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x486, 0x1000, {}, {0x77359400}, {0x2, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "e05ad60a92c50497"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {0x580f02}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 9m34.798295879s ago: executing program 3 (id=3610): mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000e) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x3, 0x0, &(0x7f0000000000), 0x3e0000) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000380)=0xe8) setreuid(r1, r2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000001000"/28], 0x48) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="88ee88e241c9cce391fd70cf3000", 0xfffffffffffffef7}], 0x1, 0x14, 0x0) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="0d4fa27c8bd8018d531b71", 0xb}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 9m34.116712869s ago: executing program 3 (id=3615): mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000e) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x3, 0x0, &(0x7f0000000000), 0x3e0000) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000380)=0xe8) setreuid(r1, r2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000001000"/28], 0x48) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="88ee88e241c9cce391fd70cf3000", 0xfffffffffffffef7}], 0x1, 0x14, 0x0) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="0d4fa27c8bd8018d531b71", 0xb}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 9m32.994090965s ago: executing program 3 (id=3623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)={0x28, r1, 0x34a07e3a2b509c41, 0x709d25, 0x25ffdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040805}, 0x8080) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000440)={@rand_addr, 0x0}, &(0x7f0000000480)=0x14) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendmsg$can_raw(r4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x90, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x70a7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf5}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x5) io_setup(0x60a, &(0x7f0000000240)=0x0) io_pgetevents(r11, 0x5, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r11) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc800) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x140, 0x8e, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0x7f, 0x5b}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x7}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x7, 0xb, 0x0, 0x40, 0x4}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x8, 0xf, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x4, 0x5}]}, 0x5, [{0xd, &(0x7f0000000200)=@string={0xd, 0x3, "fef6a3dcea9415c230f877"}}, {0x22, &(0x7f0000000240)=@string={0x22, 0x3, "33700f49c3d8cd21e966a38aeab64f46df1488cea7d77bd81d58f388b6f57463"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x280a}}, {0x5f, &(0x7f00000002c0)=@string={0x5f, 0x3, "e4b58a5b81671520caa7a65c9865ab0b3c534b0fab7ec069b3bd9da26b32508c665f7cd14da7625e312c2e28e796470c0326aac29b986d4484c5c036fbf3191f268b0c721ddf1a30c776f434a35c50db74563d4f49358bf56f467c39b7"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000800)={0x24, &(0x7f0000000640)={0x60, 0xa, 0xa3, {0xa3, 0x0, "9db63d2f573c19561082f776dd46a9b7552ccba180fb1ad5b867caf3078655a0ac7d847f81081c3c6209b677731f2dcdd3a47667bf59b431949f17d08d2c8c8b3a57f461b375497154e42191e30b94565f5b922aa662645c1ee7261274439a54962a9f40c95664281a1234c0af23729cc93837b3c5def5fbdfb15f4d95d362c7ed026f51d3943d7670392e40dcdc99c25d49979d01387b5d8a293b828e975c3dbc"}}, &(0x7f0000000700)={0x0, 0x3, 0x59, @string={0x59, 0x3, "3c9a5a3fb62822f002d44f01df7ba0d491165b603536eac30132640bd3fbedef353f70cf2c39ffe268f1ecb07181ec70bf294c9c604dc9cda47a3d01d2bec5abad6f9bccd23e98a30f466d606ecce7fdcc08d5e8c7ccc3"}}, &(0x7f0000000780)={0x0, 0x22, 0x1a, {[@main=@item_4={0x3, 0x0, 0x9, "28dd2677"}, @local=@item_4={0x3, 0x2, 0x8, "bffa378b"}, @local=@item_4={0x3, 0x2, 0x6, "895777c6"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x1, 0x1, 0x3, "f9"}, @global=@item_012={0x0, 0x1, 0xb}, @global=@item_012={0x1, 0x1, 0x5, "d1"}, @local=@item_4={0x3, 0x2, 0xa, "e79b4374"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xac, 0x1, {0x22, 0x91e}}}}, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0x40, 0xb, 0x68, "9ec9c246925b92e19f1f64a2746a18861a696093f63dfb73402bb51b46792909e52fc46e887e0fc229a366e62e174fe843aade6c96ca7cf669937219e981c2e32b4a93aa85fcbe149586737e921806fa31f828a62ec04289f05254891ff421fc1761af23fe1701ab"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000940)={0x20, 0x1, 0xc9, "2538c14019deb4dc3a63c64d7145369146625f2c3eb4f6616f7bff83a9feffe2c8d2adb5bdb9773d3248b5c10590ecba63190d1a6fff76ad15ea96fab639172b8c55f4f673469f103cbfac427b6d8c69e13abd781becaa0861a1658834e811f00556b78169363b3b6b93a78858ddcaa82f583bf7fc5d79891d690cf02390efaa8bf3acc1f3a778869c28500dc0101e45f371e6deac03e129cc6c9d66bcfa1bec95d1b303ba44f84513a5a4b88858f170bdb17f9a3cd75d359d3b8e2001b224712686c24d0c408c9383"}, &(0x7f0000000a40)={0x20, 0x3, 0x1, 0x5}}) 9m32.965205405s ago: executing program 32 (id=3623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)={0x28, r1, 0x34a07e3a2b509c41, 0x709d25, 0x25ffdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040805}, 0x8080) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000440)={@rand_addr, 0x0}, &(0x7f0000000480)=0x14) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendmsg$can_raw(r4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x90, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x70a7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf5}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x5) io_setup(0x60a, &(0x7f0000000240)=0x0) io_pgetevents(r11, 0x5, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r11) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc800) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x140, 0x8e, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0x7f, 0x5b}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x7}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x7, 0xb, 0x0, 0x40, 0x4}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x8, 0xf, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x4, 0x5}]}, 0x5, [{0xd, &(0x7f0000000200)=@string={0xd, 0x3, "fef6a3dcea9415c230f877"}}, {0x22, &(0x7f0000000240)=@string={0x22, 0x3, "33700f49c3d8cd21e966a38aeab64f46df1488cea7d77bd81d58f388b6f57463"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x280a}}, {0x5f, &(0x7f00000002c0)=@string={0x5f, 0x3, "e4b58a5b81671520caa7a65c9865ab0b3c534b0fab7ec069b3bd9da26b32508c665f7cd14da7625e312c2e28e796470c0326aac29b986d4484c5c036fbf3191f268b0c721ddf1a30c776f434a35c50db74563d4f49358bf56f467c39b7"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000800)={0x24, &(0x7f0000000640)={0x60, 0xa, 0xa3, {0xa3, 0x0, "9db63d2f573c19561082f776dd46a9b7552ccba180fb1ad5b867caf3078655a0ac7d847f81081c3c6209b677731f2dcdd3a47667bf59b431949f17d08d2c8c8b3a57f461b375497154e42191e30b94565f5b922aa662645c1ee7261274439a54962a9f40c95664281a1234c0af23729cc93837b3c5def5fbdfb15f4d95d362c7ed026f51d3943d7670392e40dcdc99c25d49979d01387b5d8a293b828e975c3dbc"}}, &(0x7f0000000700)={0x0, 0x3, 0x59, @string={0x59, 0x3, "3c9a5a3fb62822f002d44f01df7ba0d491165b603536eac30132640bd3fbedef353f70cf2c39ffe268f1ecb07181ec70bf294c9c604dc9cda47a3d01d2bec5abad6f9bccd23e98a30f466d606ecce7fdcc08d5e8c7ccc3"}}, &(0x7f0000000780)={0x0, 0x22, 0x1a, {[@main=@item_4={0x3, 0x0, 0x9, "28dd2677"}, @local=@item_4={0x3, 0x2, 0x8, "bffa378b"}, @local=@item_4={0x3, 0x2, 0x6, "895777c6"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x1, 0x1, 0x3, "f9"}, @global=@item_012={0x0, 0x1, 0xb}, @global=@item_012={0x1, 0x1, 0x5, "d1"}, @local=@item_4={0x3, 0x2, 0xa, "e79b4374"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xac, 0x1, {0x22, 0x91e}}}}, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0x40, 0xb, 0x68, "9ec9c246925b92e19f1f64a2746a18861a696093f63dfb73402bb51b46792909e52fc46e887e0fc229a366e62e174fe843aade6c96ca7cf669937219e981c2e32b4a93aa85fcbe149586737e921806fa31f828a62ec04289f05254891ff421fc1761af23fe1701ab"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000940)={0x20, 0x1, 0xc9, "2538c14019deb4dc3a63c64d7145369146625f2c3eb4f6616f7bff83a9feffe2c8d2adb5bdb9773d3248b5c10590ecba63190d1a6fff76ad15ea96fab639172b8c55f4f673469f103cbfac427b6d8c69e13abd781becaa0861a1658834e811f00556b78169363b3b6b93a78858ddcaa82f583bf7fc5d79891d690cf02390efaa8bf3acc1f3a778869c28500dc0101e45f371e6deac03e129cc6c9d66bcfa1bec95d1b303ba44f84513a5a4b88858f170bdb17f9a3cd75d359d3b8e2001b224712686c24d0c408c9383"}, &(0x7f0000000a40)={0x20, 0x3, 0x1, 0x5}}) 7m49.816877103s ago: executing program 1 (id=4729): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010006"], 0x44}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) 7m49.529396077s ago: executing program 1 (id=4734): io_setup(0x23, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0, 0x76, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x0, 0x0, 0x0, 0x0, 0x42, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000180)=ANY=[@ANYBLOB="00b66b2ef9a8b7abf32a9b97571a5a240a0bc43f876a4550d3d61b65c530b8637e5c857356f7085ac1e6000000000000"], 0x2d, 0x35a, &(0x7f0000000600)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m47.704869903s ago: executing program 1 (id=4747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x25, 0x0, 0x3}]}) 7m47.532560975s ago: executing program 1 (id=4749): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x46c, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQWamhNhBCtHvBoSLwb/wvjSS9GvWjiVe+GhBguoF7WzM4MLMtu2aXbLrCfTzLd55l5us/znZln95l5djeAvjWW/Uki/hcRv0fESJ69ucBY/nDtyvmZv6+cn0miWn3rr6RW7uqV8zNl0fL/tuSZarXIb2hS74V3I6YrlbkzRX5i6dQHE4tnz70wf2r6xNyJudNTR44cPLB7+PDUoa7EmcV1defHC7t2HH3n4hszxy6+91OSRh53NMTRLWP53m3q6W5X1mNb69LJYP2WPb/cSDc7E+ilgYjIDtdQrf+PxEBsur5tJF77rKeNA9ZUtVqtrvCqvFwF7mNJ9LoFQG+Ub/TZ9W+5rNPQ465w+eX8AiiL+1qx5FsGI80Te4Yarm+7aSwiji3/81W2xBrdhwAAqPddNv55vtn4L42H88Rw9uf/xRzKaEQ8EBHbIuLBiNgeEQ9F1Mo+EhGPdlh/4wzJreOf9NIdB9eGbPz3UjG3dfP4Ly2LjA4Uua21+IeS4/OVuf3FPtkXQxuOzydzkyvU8f2rv33Ralv9+C9bsvrLsWDRjkuDDTfoZqeXplcTc73Ln0bsHGwWfxLlNE4SETsiYucd1jH/7GDLbbePfwWtn7Zt1a8jnsmP/3I0xF9KWs5PTr54eOrQxMaozO2fKM+KW/3864U3W9W/qvi7IDv+m5ue/9fjH002RiyePXeyNl+72HkdF/74vOU1TYfn/9Gtxfk/nLxdWzFcbPhoemnpzGTEcPL6reunbjxbmS/LZ/Hv29u8/2+LG3visYjYFRG7I+Lx7KKwaPsTEfFkROxdIf4fX3nq/c7jX5+50iz+2dsd/6g//p0nBk7+8O3t498YEa2O/8Faal+xpp3Xv3YbuJp9BwAAAPeK/DPwSTp+PZ2m4+P5Z/i3x+a0srC49NzxhQ9Pz+aflR+NobS80zVSdz90srg3XOanGvIHivvGXw5squXHZxYqs70OHvrclhb9P/PnQK9bB6y5LsyjAfco/R/6l/4P/SnR/6Gv6f/Qv5r1/09alh7/Zk0bA6wr7//Qv9ro/8v5Q+tRAXBv8v4P/Uv/h77U8rvx6aq+8r/uiX+L3zO8W9pz/ycivSuacf8nBtv+MYsOEtWRvP9nazY0LdPrVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+C8AAP//F0nluw==") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") mkdir(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000980)='./bus\x00', 0x30000, 0x1b0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x90) setregid(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='thermal_power_allocator_pid\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000c40), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_create_resource$binfmt(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r8}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m46.847266845s ago: executing program 1 (id=4754): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8000000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x110}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @val=@netfilter={0xa, 0x0, 0x299d, 0x1}}, 0x20) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="67d8", 0x2}], 0x1, 0x0, 0x0, 0x40800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x48) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x430002, 0x4, 0x25}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="fffffeff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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") 7m46.421658141s ago: executing program 1 (id=4761): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000098000000000000000095000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='ext4_load_inode\x00', r0, 0x0, 0xfffffffffbfffff3}, 0x18) r1 = open(&(0x7f00009e1000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000480), 0x1, 0x59d, &(0x7f0000001c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x54da02, 0x142) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0x32600) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x14) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r7, 0x0, r7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') socket$nl_generic(0x10, 0x3, 0x10) 7m46.378595762s ago: executing program 33 (id=4761): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000098000000000000000095000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='ext4_load_inode\x00', r0, 0x0, 0xfffffffffbfffff3}, 0x18) r1 = open(&(0x7f00009e1000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000480), 0x1, 0x59d, &(0x7f0000001c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x54da02, 0x142) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0x32600) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x14) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r7, 0x0, r7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') socket$nl_generic(0x10, 0x3, 0x10) 3m41.028208993s ago: executing program 5 (id=7151): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x4, 0x8, 0x9, 0x9}, {0x5, 0x2, 0x0, 0x6039}]}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0xf, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a00)='sched_kthread_work_execute_end\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 3m40.768711637s ago: executing program 5 (id=7156): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r0, r1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @broadcast}, &(0x7f0000000100)=0xc) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0xcda191378e2cb1ee, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x5, 0x6}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) unshare(0x62040200) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101a80, 0xa) 3m39.357977086s ago: executing program 5 (id=7171): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r5 = syz_open_pts(r4, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x80000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), 0x0, 0x43, &(0x7f0000000600), 0x0, 0x0, 0x0, &(0x7f0000000700), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000040001801000020646c210000000000206c07841b5189cadf2b4cc787b83120207b1af8ff00000000bfa1000000f9ffff060100e6f4ffffffb7020000000000a700b703000000000000181100", @ANYRES64=r5, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) splice(r9, 0x0, r4, &(0x7f0000000600)=0x401, 0x100000000, 0xd) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r7}, 0x20) sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000440), &(0x7f0000000480)=0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-net'], 0x34) 3m39.357363387s ago: executing program 5 (id=7172): lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000400)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000100), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000522484e08e2dba62fb4d77dc1d40a07d358f46"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000ad080000000c7cd3477d50db77e78bbfcb07df76a9c1b2730000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001860", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x48002) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r5 = open_tree(0xffffffffffffff9c, 0x0, 0x81000) renameat2(r5, &(0x7f0000000140)='./file1\x00', r5, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x104) mkdirat(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x8000002, 0xfffffff7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0) 3m39.252713298s ago: executing program 5 (id=7173): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, 0x0}, 0x91) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 3m38.750090815s ago: executing program 5 (id=7177): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xe, 0x7fffffff}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xff, 0x3, 0x0, 0x0, 0x0, 0x4000000003, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, @perf_bp={0x0, 0xd}, 0xc, 0x5, 0x800000, 0x0, 0xffff, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1000}, 0x4) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0xffffffffffffffde) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@dioread_lock}, {@debug}, {@inlinecrypt}]}, 0x8, 0x5fc, &(0x7f0000000c00)="$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") r7 = inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x8c7) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r3) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2000000e149}, 0x18) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 3m38.530280808s ago: executing program 34 (id=7177): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xe, 0x7fffffff}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xff, 0x3, 0x0, 0x0, 0x0, 0x4000000003, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, @perf_bp={0x0, 0xd}, 0xc, 0x5, 0x800000, 0x0, 0xffff, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1000}, 0x4) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0xffffffffffffffde) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@dioread_lock}, {@debug}, {@inlinecrypt}]}, 0x8, 0x5fc, &(0x7f0000000c00)="$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") r7 = inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x8c7) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r3) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2000000e149}, 0x18) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1m22.730110002s ago: executing program 4 (id=8559): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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") syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') open(&(0x7f0000000180)='./bus\x00', 0x169a7c, 0x41) capset(&(0x7f0000000a40)={0x20071026}, &(0x7f0000000280)={0x7, 0x3, 0xfffffffc, 0xa8, 0x2, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x0, 0x40000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="200000002000ff07090f9becdb4cb96b0a000000ff000001000000007bffd290", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4000002) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x1e1242, 0xfe) sendfile(r3, r3, 0x0, 0x6) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r5, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) umount2(&(0x7f0000000380)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x43, 0xa0, 0xb8, 0x98, 0x188, 0x178, 0x178, 0x188, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0xff000000, 0x0, 'caif0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9, 0x3}, 0x12a, 0x70, 0xb8, 0x0, {0x0, 0x7a010000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xc, {0x7}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0xe, 0x4, 0x1, 0x0, 0x3, 0x4], 0x0, 0x9}, {0x3, [0x0, 0x1, 0x5, 0x7], 0x4, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) chdir(&(0x7f0000000040)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) mknodat$null(r0, &(0x7f00000000c0)='./bus\x00', 0x4, 0x103) 1m22.649986413s ago: executing program 4 (id=8563): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x1e, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) ppoll(&(0x7f0000000c40)=[{r2, 0x20}], 0x1, 0x0, 0x0, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x400, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x801) 1m22.255214039s ago: executing program 4 (id=8565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) 1m21.990021352s ago: executing program 4 (id=8566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1m21.681494116s ago: executing program 4 (id=8569): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$eJzs3E1sVNUeAPD/nc70Ax6PPh6PJ4hJEY2NxhYKCgs3GE1caGLEhS6bthCkUENrIoRISQwuDYl749ItC7fqzrgycYsLFyaGhBgSA7gac2funU7no5/TjjC/XzKdc+49955z7rnn3jP3zDSAnjWS/kki/hURtyNidzW6PMFI9e3BvatTD+9dnYrFcvn0H0kl3f00nilk7zuzfY4WIgqfJg07rJq/fOX85OzszKUsPr5w4cPx+ctXXjx3YfLszNmZixMnTx4/dvTEyxMvrb9SLfJL63X/wCdzB/e/8f7Nt6aK+fLB7L2+Hp0yEiP1RblVX6xnO51Zl+2qCyfFLhaEdUnbLW2uUqX/746+0HjQK8rlcnmg/erFcqPrTUuAR1YSbVYMZpcH4DGV3+jTz7/5q3b3H9ry4UfX3T1V/QCU1vtB9qquKdaeZ5QaPt920khEvLf415fpK1Z6DvHrFhUAAOg5353KR4KN479C7KtL9+9sDmU4Iv4TEXsi4r8RsTci/hdRSfv/iHiiMYMkorxC/nsb4s3jn8KdzdRvNen475Vsbmv5+C8f/cVwXxbblX4eri6bOZIdk9EoDZw5NztzdIU8vn/t58/brasf/6WvNP98LJiV406x4QHd9OTC5IYr3ODu9YgDxcb6J8W04fKZgCQi9kfEgXXsd7gufO75rw/WIqXl6Vavf0W5xZRedGKqovxVxHPV9l+MZe2/lGOy8vzk+GDMzhwZT8+CIy3z+PGnG2+3y3/V+n/zW+Mmr5/49vRmq12Ttv+OuvM/8vnbpfoPJxFJbb52fv153Pjls8p+Rw43r9vo+d+fvFsJ92fLPp5cWLh0NKI/ebN5+cTStnk8T5/Wf/Rw6/6/J9smPRJPRkR6Ej9VdwKnZT8UEU9HRIuq1fzw6jMftFu3xvN/y6T1n25x/bu2vP2X5us3EOg7f+j2wzYXj7W1//FKaDRb0vr6lyy7RKy1gB05iAAAAPAPV4jKd/8LY7VwoTA2Vn0GtDd2FGbn5hdeODP30cXp6m8EhqNUyJ90VZ8Hl5L8+edwXXyiIX4se278Rd9QJT42NTc73e3KQ4/bWenzSVP/T/3e1+3SAVvOT36gd63W//fd3KaCANvO/R96V13/X2yTZNE3ZeDx5P4PvatV/7+2gW2AR0tZX4aepv9D7yrGO7VwoaslAbab+z/0pM38rn/1QHmgYclANTAYzYljcGuKMdQirxaBg1t2EPJAOrJa51Z/9kdsPvehjWyV/zeFtmmisL4dDkTzqr7o9HEuxRqO2Nl9HT/5y9l35Tt92tzaln7aKtCVyxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDH/R0AAP//b9HZQw==") r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) close(r2) 1m21.634044597s ago: executing program 4 (id=8572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_switch\x00', r8}, 0x18) unshare(0x24040000) unshare(0x2c020400) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) close(r11) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x260, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3c}, @private1, [], [], 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x64, r12, 0x201, 0x70bd26, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x64}, 0x8, 0x3000000000002, 0x0, 0x20004004}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040884) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$TUNSETSTEERINGEBPF(r13, 0xb701, 0x0) 1m6.601314531s ago: executing program 35 (id=8572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_switch\x00', r8}, 0x18) unshare(0x24040000) unshare(0x2c020400) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) close(r11) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x260, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3c}, @private1, [], [], 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x64, r12, 0x201, 0x70bd26, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x64}, 0x8, 0x3000000000002, 0x0, 0x20004004}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040884) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$TUNSETSTEERINGEBPF(r13, 0xb701, 0x0) 6.234314491s ago: executing program 0 (id=9218): syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x400000) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0xe0826, &(0x7f0000000340)=ANY=[], 0x1, 0x288, &(0x7f0000000cc0)="$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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x4) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) 4.747966162s ago: executing program 2 (id=9233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r3, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0xd32, &(0x7f0000000c80)=ANY=[], 0x0) 4.693721473s ago: executing program 0 (id=9234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) r4 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r5, r5, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x10, 0x20, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r3}}}], 0x20, 0x8c1}, 0x4000) 4.693134533s ago: executing program 0 (id=9235): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) connect$can_bcm(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x20000078}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$eJzs271vG2UYAPDn7CSlXyRU5aMfQKAgylfSpKV0YAGBxFAkJBjKGJK0CnUb1ASJVhEEhMqIKjGxIEYk/gImWBAwIbHCjipVKEsLk9HZd43t2E6dOnGpfz/p3Pe9O/d9nrt77ffujQPoW6PpSxKxKyL+iIjharV+h9HqPzdWlqb/WVmaTqJcfuvvpLLf9ZWl6XzX/H0788pAROGzJA40aXfh4qWzU6XS7IWsPr547v3xhYuXnp87N3Vm9szs+ckTJ44dnXjx+OQLXckzzev6/o/mD+57/Z0rb0yfuvLuL98lef4NeXTJaLuNT5bLXW6ut3bXlJOBHgZCR4rVbhqDlf4/HMVYPXnD8dqnPQ0O2FTlcrn8QOvNy2XgLpZEryMAeiP/ok/vf/Nli4Yed4RrL1dvgNK8b2RLdctAFLJ9Bhvub7tpNCJOLf/7dbrE5jyHAACo80M6/nmu2fivELXPhe7N5lBGIuK+iNgTEccjYm9E3B9R2ffBiHiow/YbJ0nWjn8KV2tr5aTDBtaRjv9eyua26sd/+egvRopZbXcl/8Hk9Fxp9kh2TA7H4La0PtGmjR9f/f2LVttqx3/pkrafjwWzOK4ObKt/z8zU4tTt5Fzr2icR+wca8j8ZlQm8fCYgPeT7ImL/BtuYe+bbg622rZ9/G12YZyp/E/FU9fwvR935X73Qkvbzk+P3RGn2yHh+Vaz162+X32zV/m3l3wXp+d/R9Pq/mf9IUjtfu9DJ//7V0+nr5T8/b3lPs9Hrfyh5u1IeytZ9OLW4eGEiYig5WQ26dv3k6nvzer5/mv/hQ837/55YPRIHIiK9iB+OiEci4tEs9sci4vGIONTmKPz8yhPvbTz/zZXmP9PR+V8tDEXjmuaF4tmfvq9rdKST/NPzf6xSOpytuZXPv1uJq9OrGQAAAP6vChGxK5LC2M1yoTA2Vv0b/r2xo1CaX1h89vT8B+dnqr8RGInBQv6ka7jmeehEdluf1ycb6kez58ZfFrdX6mPT86WZXicPfW5ni/6f+qvY6+iATef3WtC/9H/oX/o/9C/9H/pXk/6/vRdxAFuv2ff/xz2IA9h6Df3ftB/0Eff/0L820v99ZsDdoW1fHtq6OIAttbA91v+RvILCmkIU7ogwFDap0OtPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74LwAA///lI+j0") 4.673668183s ago: executing program 2 (id=9238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 4.513760255s ago: executing program 2 (id=9239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statx(0xffffffffffffff9c, 0x0, 0x800, 0x40, 0x0) 4.512963555s ago: executing program 2 (id=9240): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.485265146s ago: executing program 2 (id=9241): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4.308706558s ago: executing program 7 (id=9242): clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 4.126053871s ago: executing program 7 (id=9244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, 0x0, 0x0) 4.125190881s ago: executing program 7 (id=9245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/image_size', 0x701041, 0x144) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff0000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) 3.980125133s ago: executing program 6 (id=9246): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x1, @none, 0x8, 0x2}, 0xe) 3.574268069s ago: executing program 6 (id=9248): pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x3, 0x0) fcntl$setpipe(r0, 0x4, 0xfffffffffffff000) 2.879675829s ago: executing program 2 (id=9250): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000980)=ANY=[@ANYBLOB="bbbbbbbbbbbb28feee412b8f86dd60ddff0000082f00fc020000000000000000000000000000fe8000000000000000000000000000aa242088"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) pivot_root(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) 2.641879792s ago: executing program 6 (id=9251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) 2.550121594s ago: executing program 6 (id=9253): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 2.408398965s ago: executing program 0 (id=9254): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xd08, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x125b828, &(0x7f0000000ac0)=ANY=[@ANYRES8, @ANYRES64, @ANYRES16=0x0, @ANYBLOB="cac92657e04b10448c4baed59dfb349f5e7cc9c31bce95c19e255e19bce219b48efed8175b1bbc50e78464c9c1d48c8c64e01ddfc4ea7571d3e4c559851f16cf8d9a4f332719e03549d0ce1a55c4813df852bc6bfa390514bdf44bc2c4477a360eb25a8ff3cfa0c27035429da9a56241822fd9149d93e4bb94cd66daac19dcfec0614a62b6ee1cc7cfd6f934f34f250e271d4b5ae39501b8db00d98106dd4d5a261d82464279029ba824b9df00101d432f5e8b73b215", @ANYRES32, @ANYRES32], 0x1, 0x2f4, &(0x7f0000000dc0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000000cc0)=""/226, 0xe2}, {0x0}, {&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000bc0)=""/252, 0xfc}], 0x5}, 0x2010) sendmsg$inet(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) 1.798555694s ago: executing program 0 (id=9258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) connect$unix(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x80000) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) 1.741968255s ago: executing program 7 (id=9259): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000052000000040000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000e2ffff5f000000600000000300000002000000000000130e0000001000000000000012050000000400000002000005070000000800000004000000e500000010000000020000000800acbef8c7090000000000008c320000050000000000000e02000000ad1196e100000000"], &(0x7f0000000780)=""/203, 0x7b, 0xcb, 0x0, 0x7ff, 0x0, @void, @value}, 0x28) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ppoll(&(0x7f0000000280)=[{r0, 0x9080}, {r3}, {r5, 0x200}], 0x3, 0x0, &(0x7f0000000340)={[0x4]}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) unshare(0x40020480) 1.672397086s ago: executing program 6 (id=9260): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 948.664226ms ago: executing program 8 (id=9261): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 871.808127ms ago: executing program 7 (id=9262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x6f4000) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS20(r6, 0x40044591, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, 0x0) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffff000) 806.164319ms ago: executing program 8 (id=9263): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 805.810599ms ago: executing program 8 (id=9264): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 801.769748ms ago: executing program 8 (id=9265): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f00000045c0)) 729.579799ms ago: executing program 8 (id=9266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000060000000b"], 0x50) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mlock2(&(0x7f0000df9000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(0x0, 0x7, 0xc8) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) 727.748ms ago: executing program 6 (id=9267): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) unshare(0x20000400) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 173.366157ms ago: executing program 8 (id=9268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x6, 0x800, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x18, 0x1, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r10}, 0x10) getpriority(0x2, r7) setns(r8, 0x24020000) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = open(&(0x7f0000000140)='./bus\x00', 0x1a187e, 0x114) fcntl$F_GET_FILE_RW_HINT(r12, 0x40d, &(0x7f0000000000)) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 509.83µs ago: executing program 0 (id=9269): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xd08, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x125b828, &(0x7f0000000ac0)=ANY=[@ANYRES8, @ANYRES64, @ANYRES16=0x0, @ANYBLOB="cac92657e04b10448c4baed59dfb349f5e7cc9c31bce95c19e255e19bce219b48efed8175b1bbc50e78464c9c1d48c8c64e01ddfc4ea7571d3e4c559851f16cf8d9a4f332719e03549d0ce1a55c4813df852bc6bfa390514bdf44bc2c4477a360eb25a8ff3cfa0c27035429da9a56241822fd9149d93e4bb94cd66daac19dcfec0614a62b6ee1cc7cfd6f934f34f250e271d4b5ae39501b8db00d98106dd4d5a261d82464279029ba824b9df00101d432f5e8b73b215", @ANYRES32, @ANYRES32], 0x1, 0x2f4, &(0x7f0000000dc0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000000cc0)=""/226, 0xe2}, {0x0}, {&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000bc0)=""/252, 0xfc}], 0x5}, 0x2010) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 7 (id=9270): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) rt_sigaction(0x208019, 0x0, 0x0, 0x8, &(0x7f0000000440)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003080), 0x101000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000540)='sched_switch\x00', r3}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) kernel console output (not intermixed with test programs): ning e2fsck is recommended [ 861.614393][T30616] loop6: detected capacity change from 0 to 512 [ 861.624424][T30613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8158'. [ 861.640174][T30613] Cannot find del_set index 3 as target [ 861.659559][ T29] audit: type=1326 audit(1747154107.818:20081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30603 comm="syz.7.8155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 861.683273][ T29] audit: type=1326 audit(1747154107.818:20082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30603 comm="syz.7.8155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 861.706977][ T29] audit: type=1326 audit(1747154107.818:20083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30603 comm="syz.7.8155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 861.730800][ T29] audit: type=1326 audit(1747154107.818:20084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30603 comm="syz.7.8155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 861.754646][ T29] audit: type=1326 audit(1747154107.818:20085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30603 comm="syz.7.8155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 861.778367][ T29] audit: type=1326 audit(1747154107.818:20086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30603 comm="syz.7.8155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 861.802510][ T29] audit: type=1326 audit(1747154107.818:20087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30603 comm="syz.7.8155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 861.828857][T26913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.839576][T30616] EXT4-fs (loop6): too many log groups per flexible block group [ 861.847304][T30616] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 861.854398][T30616] EXT4-fs (loop6): mount failed [ 861.942759][T30627] loop6: detected capacity change from 0 to 1024 [ 861.951502][T30627] EXT4-fs: Ignoring removed bh option [ 861.956941][T30627] EXT4-fs: inline encryption not supported [ 861.967846][T30627] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 861.979463][T30627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 861.999296][T30627] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 2: comm syz.6.8163: lblock 2 mapped to illegal pblock 2 (length 1) [ 862.015708][T30627] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 48: comm syz.6.8163: lblock 0 mapped to illegal pblock 48 (length 1) [ 862.033043][T30627] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.8163: Failed to acquire dquot type 0 [ 862.062238][T30634] loop2: detected capacity change from 0 to 512 [ 862.157459][T30627] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 862.170570][T30634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 862.183909][T30627] EXT4-fs error (device loop6): ext4_evict_inode:259: inode #11: comm syz.6.8163: mark_inode_dirty error [ 862.196500][T30634] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.207835][T30627] EXT4-fs warning (device loop6): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 862.231197][T30627] EXT4-fs (loop6): 1 orphan inode deleted [ 862.247221][ T31] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 862.298958][T30627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.338901][ T31] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 862.394075][T30643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.403880][T30627] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.404964][T30643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.422756][T30627] EXT4-fs error (device loop6): __ext4_get_inode_loc:4450: comm syz.6.8163: Invalid inode table block 1 in block_group 0 [ 862.440436][T30627] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 862.450242][T30627] EXT4-fs error (device loop6): ext4_quota_off:7219: inode #3: comm syz.6.8163: mark_inode_dirty error [ 862.538729][T30643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.547629][T30643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.604681][T23432] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 862.616831][T30648] netlink: 'syz.6.8169': attribute type 13 has an invalid length. [ 862.679132][T30650] loop2: detected capacity change from 0 to 128 [ 862.780889][T30655] can0: slcan on ttyS3. [ 862.862328][T30668] loop0: detected capacity change from 0 to 8192 [ 863.029627][ T9] Process accounting resumed [ 863.151848][T30651] can0 (unregistered): slcan off ttyS3. [ 863.242407][T30711] FAULT_INJECTION: forcing a failure. [ 863.242407][T30711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.255600][T30711] CPU: 1 UID: 0 PID: 30711 Comm: syz.0.8181 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 863.255733][T30711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 863.255749][T30711] Call Trace: [ 863.255755][T30711] [ 863.255762][T30711] __dump_stack+0x1d/0x30 [ 863.255788][T30711] dump_stack_lvl+0xe8/0x140 [ 863.255813][T30711] dump_stack+0x15/0x1b [ 863.255846][T30711] should_fail_ex+0x265/0x280 [ 863.255937][T30711] should_fail+0xb/0x20 [ 863.255991][T30711] should_fail_usercopy+0x1a/0x20 [ 863.256017][T30711] strncpy_from_user+0x25/0x230 [ 863.256050][T30711] ? __kmalloc_cache_noprof+0x189/0x320 [ 863.256079][T30711] __se_sys_memfd_create+0x1ff/0x590 [ 863.256106][T30711] __x64_sys_memfd_create+0x31/0x40 [ 863.256169][T30711] x64_sys_call+0x122f/0x2fb0 [ 863.256261][T30711] do_syscall_64+0xd0/0x1a0 [ 863.256293][T30711] ? clear_bhb_loop+0x40/0x90 [ 863.256319][T30711] ? clear_bhb_loop+0x40/0x90 [ 863.256339][T30711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.256361][T30711] RIP: 0033:0x7f8c69fde969 [ 863.256460][T30711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.256508][T30711] RSP: 002b:00007f8c68646e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 863.256531][T30711] RAX: ffffffffffffffda RBX: 0000000000000785 RCX: 00007f8c69fde969 [ 863.256546][T30711] RDX: 00007f8c68646ef0 RSI: 0000000000000000 RDI: 00007f8c6a061444 [ 863.256562][T30711] RBP: 0000200000001900 R08: 00007f8c68646bb7 R09: 00007f8c68646e40 [ 863.256578][T30711] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000200 [ 863.256669][T30711] R13: 00007f8c68646ef0 R14: 00007f8c68646eb0 R15: 0000200000000340 [ 863.256694][T30711] [ 863.581052][T30718] loop4: detected capacity change from 0 to 128 [ 863.664381][T30722] loop6: detected capacity change from 0 to 1024 [ 863.684219][T30722] EXT4-fs: Ignoring removed bh option [ 863.689774][T30722] EXT4-fs: inline encryption not supported [ 863.736817][T30722] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 863.755184][T30722] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 863.777914][T30722] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 2: comm syz.6.8186: lblock 2 mapped to illegal pblock 2 (length 1) [ 863.802182][T30722] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 48: comm syz.6.8186: lblock 0 mapped to illegal pblock 48 (length 1) [ 863.847183][T30722] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.8186: Failed to acquire dquot type 0 [ 863.859144][T30722] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 863.869942][T30722] EXT4-fs error (device loop6): ext4_evict_inode:259: inode #11: comm syz.6.8186: mark_inode_dirty error [ 863.881922][T30722] EXT4-fs warning (device loop6): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 863.892704][T30722] EXT4-fs (loop6): 1 orphan inode deleted [ 863.899055][T30722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.977967][ T2512] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 864.002748][ T2512] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 864.025429][T30722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.038872][T30722] EXT4-fs error (device loop6): __ext4_get_inode_loc:4450: comm syz.6.8186: Invalid inode table block 1 in block_group 0 [ 864.089885][T30722] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 864.108248][T30722] EXT4-fs error (device loop6): ext4_quota_off:7219: inode #3: comm syz.6.8186: mark_inode_dirty error [ 864.123537][T30729] loop4: detected capacity change from 0 to 512 [ 864.143633][T30729] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 864.175836][T30729] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.8188: invalid indirect mapped block 2683928664 (level 1) [ 864.217177][T30729] EXT4-fs (loop4): Remounting filesystem read-only [ 864.237021][T30729] EXT4-fs (loop4): 1 truncate cleaned up [ 864.247839][T30729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.393041][T23635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.772523][T30746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8191'. [ 866.160430][T30774] __nla_validate_parse: 1 callbacks suppressed [ 866.160451][T30774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8199'. [ 866.201546][T30774] Cannot find del_set index 3 as target [ 866.277488][T30773] loop4: detected capacity change from 0 to 512 [ 866.286610][T30773] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 866.302356][T30778] FAULT_INJECTION: forcing a failure. [ 866.302356][T30778] name failslab, interval 1, probability 0, space 0, times 0 [ 866.315076][T30778] CPU: 0 UID: 0 PID: 30778 Comm: syz.6.8202 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 866.315104][T30778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 866.315116][T30778] Call Trace: [ 866.315215][T30778] [ 866.315225][T30778] __dump_stack+0x1d/0x30 [ 866.315252][T30778] dump_stack_lvl+0xe8/0x140 [ 866.315276][T30778] dump_stack+0x15/0x1b [ 866.315297][T30778] should_fail_ex+0x265/0x280 [ 866.315332][T30778] ? nfnetlink_rcv+0x53d/0x1690 [ 866.315357][T30778] should_failslab+0x8c/0xb0 [ 866.315395][T30778] __kmalloc_cache_noprof+0x4c/0x320 [ 866.315421][T30778] ? mutex_lock+0xd/0x30 [ 866.315491][T30778] nfnetlink_rcv+0x53d/0x1690 [ 866.315527][T30778] ? mod_objcg_state+0x40e/0x530 [ 866.315555][T30778] ? mod_objcg_state+0x40e/0x530 [ 866.315583][T30778] ? xas_load+0x413/0x430 [ 866.315604][T30778] ? __rcu_read_unlock+0x4f/0x70 [ 866.315662][T30778] ? memcg_list_lru_alloc+0xc2/0x490 [ 866.315735][T30778] ? mod_objcg_state+0x40e/0x530 [ 866.315763][T30778] ? mod_objcg_state+0x40e/0x530 [ 866.315791][T30778] ? should_fail_ex+0x30/0x280 [ 866.315876][T30778] ? __rcu_read_unlock+0x4f/0x70 [ 866.315899][T30778] ? should_fail_ex+0xdb/0x280 [ 866.315960][T30778] netlink_unicast+0x5a1/0x670 [ 866.315991][T30778] netlink_sendmsg+0x58b/0x6b0 [ 866.316011][T30778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.316036][T30778] __sock_sendmsg+0x142/0x180 [ 866.316063][T30778] ____sys_sendmsg+0x31e/0x4e0 [ 866.316085][T30778] ___sys_sendmsg+0x17b/0x1d0 [ 866.316120][T30778] __x64_sys_sendmsg+0xd4/0x160 [ 866.316202][T30778] x64_sys_call+0x2999/0x2fb0 [ 866.316230][T30778] do_syscall_64+0xd0/0x1a0 [ 866.316259][T30778] ? clear_bhb_loop+0x40/0x90 [ 866.316287][T30778] ? clear_bhb_loop+0x40/0x90 [ 866.316310][T30778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.316363][T30778] RIP: 0033:0x7f896218e969 [ 866.316378][T30778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.316401][T30778] RSP: 002b:00007f89607f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.316425][T30778] RAX: ffffffffffffffda RBX: 00007f89623b5fa0 RCX: 00007f896218e969 [ 866.316441][T30778] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 866.316516][T30778] RBP: 00007f89607f7090 R08: 0000000000000000 R09: 0000000000000000 [ 866.316528][T30778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.316544][T30778] R13: 0000000000000000 R14: 00007f89623b5fa0 R15: 00007ffcdba3b7a8 [ 866.316595][T30778] [ 866.458224][T30773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8201'. [ 866.600996][T30780] Cannot find del_set index 3 as target [ 866.651530][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 866.651546][ T29] audit: type=1400 audit(1747154112.808:20236): avc: denied { bind } for pid=30782 comm="syz.6.8203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 866.822220][ T29] audit: type=1400 audit(1747154112.978:20237): avc: denied { tracepoint } for pid=30782 comm="syz.6.8203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 866.843191][T30784] tipc: Enabled bearer , priority 0 [ 866.859526][ T29] audit: type=1326 audit(1747154113.018:20238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30794 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275190e969 code=0x7ffc0000 [ 866.882868][ T29] audit: type=1326 audit(1747154113.018:20239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30794 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275190e969 code=0x7ffc0000 [ 866.900767][T30790] loop7: detected capacity change from 0 to 8192 [ 866.906098][ T29] audit: type=1326 audit(1747154113.018:20240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30794 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f275190e969 code=0x7ffc0000 [ 866.935573][ T29] audit: type=1326 audit(1747154113.018:20241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30794 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275190e969 code=0x7ffc0000 [ 866.958808][ T29] audit: type=1326 audit(1747154113.018:20242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30794 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275190e969 code=0x7ffc0000 [ 866.982083][ T29] audit: type=1326 audit(1747154113.018:20243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30794 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f275190e969 code=0x7ffc0000 [ 867.100005][T30801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8207'. [ 867.102128][ T29] audit: type=1326 audit(1747154113.258:20244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30794 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275190e969 code=0x7ffc0000 [ 867.132243][ T29] audit: type=1326 audit(1747154113.258:20245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30794 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275190e969 code=0x7ffc0000 [ 867.156369][ T31] tipc: Resetting bearer [ 867.164765][T30782] tipc: Resetting bearer [ 867.188064][T30782] tipc: Disabling bearer [ 867.716113][T30817] can0: slcan on ttyS3. [ 867.863046][T30824] loop6: detected capacity change from 0 to 8192 [ 867.930728][T30839] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8212'. [ 867.959879][T30839] Cannot find del_set index 3 as target [ 868.090715][T30851] loop4: detected capacity change from 0 to 1024 [ 868.115066][T30853] tipc: Enabling of bearer rejected, already enabled [ 868.127444][T30812] can0 (unregistered): slcan off ttyS3. [ 868.148291][T30851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 868.323625][T23635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.739916][T30873] netlink: 'syz.4.8218': attribute type 13 has an invalid length. [ 868.875607][T30878] loop4: detected capacity change from 0 to 2048 [ 868.968153][T30880] loop6: detected capacity change from 0 to 1024 [ 869.004888][T30880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.055963][T30890] loop7: detected capacity change from 0 to 512 [ 869.150497][T30890] EXT4-fs (loop7): too many log groups per flexible block group [ 869.158258][T30890] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 869.228734][T30890] EXT4-fs (loop7): mount failed [ 869.320732][T30898] can0: slcan on ttyS3. [ 869.405751][T30902] loop4: detected capacity change from 0 to 8192 [ 869.440038][T30917] loop7: detected capacity change from 0 to 1024 [ 869.511101][T30917] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.545908][T28980] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.688611][T30937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8230'. [ 869.714130][T30937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8230'. [ 869.734418][T30937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8230'. [ 869.737412][T30891] can0 (unregistered): slcan off ttyS3. [ 869.781252][T26913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.897314][T30947] tipc: Enabling of bearer rejected, already enabled [ 869.947951][T30952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8236'. [ 870.030611][T30952] Cannot find del_set index 3 as target [ 870.056804][T30960] netlink: 'syz.4.8238': attribute type 4 has an invalid length. [ 870.066940][T30954] can0: slcan on ttyS3. [ 870.073675][T30960] netlink: 'syz.4.8238': attribute type 4 has an invalid length. [ 870.122784][T30971] loop4: detected capacity change from 0 to 512 [ 870.130402][ T9] Process accounting resumed [ 870.143195][T30962] loop7: detected capacity change from 0 to 8192 [ 870.155121][T30971] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 870.270701][T30971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8240'. [ 870.362171][T30971] Cannot find del_set index 3 as target [ 870.375332][T30998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8242'. [ 870.387686][T30949] can0 (unregistered): slcan off ttyS3. [ 870.556333][T31014] loop4: detected capacity change from 0 to 1024 [ 870.579016][T31014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.777962][T31015] loop7: detected capacity change from 0 to 8192 [ 870.959081][T23635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.042252][T31041] loop4: detected capacity change from 0 to 512 [ 871.178632][T31041] EXT4-fs (loop4): too many log groups per flexible block group [ 871.186351][T31041] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 871.193449][T31041] EXT4-fs (loop4): mount failed [ 871.453982][T31056] __nla_validate_parse: 2 callbacks suppressed [ 871.454001][T31056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8257'. [ 871.502824][T31056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8257'. [ 871.555403][T31056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8257'. [ 871.569201][T31054] can0: slcan on ttyS3. [ 871.712155][T31077] netlink: 'syz.4.8259': attribute type 13 has an invalid length. [ 871.739601][T31084] loop7: detected capacity change from 0 to 512 [ 871.753950][T31084] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 871.804783][T31084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8258'. [ 871.861404][T31084] Cannot find del_set index 3 as target [ 871.971627][T31047] can0 (unregistered): slcan off ttyS3. [ 872.006450][T31108] loop7: detected capacity change from 0 to 512 [ 872.063339][T31108] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 872.112760][T31108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8262'. [ 872.153757][T31108] Cannot find del_set index 3 as target [ 872.185791][T31121] loop4: detected capacity change from 0 to 1024 [ 872.221755][T31121] EXT4-fs: Ignoring removed bh option [ 872.227379][T31121] EXT4-fs: inline encryption not supported [ 872.235033][T31130] loop7: detected capacity change from 0 to 512 [ 872.247995][T31121] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 872.262109][T31130] EXT4-fs (loop7): too many log groups per flexible block group [ 872.269886][T31130] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 872.320150][T31121] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 872.330617][T31130] EXT4-fs (loop7): mount failed [ 872.342189][T31121] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.8266: lblock 2 mapped to illegal pblock 2 (length 1) [ 872.388705][T31121] __quota_error: 169 callbacks suppressed [ 872.388759][T31121] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 872.404248][T31121] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.8266: lblock 0 mapped to illegal pblock 48 (length 1) [ 872.420970][T31121] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 872.430036][T31121] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.8266: Failed to acquire dquot type 0 [ 872.441735][T31143] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8269'. [ 872.452504][T31121] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 872.462315][T31121] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.8266: mark_inode_dirty error [ 872.473727][T31143] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8269'. [ 872.496889][T31143] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8269'. [ 872.521003][T31121] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 872.547612][T31121] EXT4-fs (loop4): 1 orphan inode deleted [ 872.547574][ T29] audit: type=1326 audit(1747154118.708:20415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31145 comm="syz.7.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 872.553838][T31121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.597450][ T415] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 872.623791][ T29] audit: type=1326 audit(1747154118.708:20416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31145 comm="syz.7.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 872.647515][ T29] audit: type=1326 audit(1747154118.738:20417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31145 comm="syz.7.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 872.667317][T31152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8271'. [ 872.671328][ T29] audit: type=1326 audit(1747154118.738:20418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31145 comm="syz.7.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 872.695162][T31152] Cannot find del_set index 3 as target [ 872.703601][ T29] audit: type=1326 audit(1747154118.738:20419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31145 comm="syz.7.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 872.703643][ T29] audit: type=1326 audit(1747154118.738:20420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31145 comm="syz.7.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 872.703676][ T29] audit: type=1326 audit(1747154118.738:20421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31145 comm="syz.7.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 872.703708][ T29] audit: type=1326 audit(1747154118.738:20422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31145 comm="syz.7.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 872.710533][ T415] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 872.819523][T31121] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.829069][T31121] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz.4.8266: Invalid inode table block 1 in block_group 0 [ 872.843529][T31121] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 872.853366][T31121] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz.4.8266: mark_inode_dirty error [ 872.909361][T31158] can0: slcan on ttyS3. [ 872.978221][T31170] netlink: 36 bytes leftover after parsing attributes in process `kfree'. [ 873.024600][T31165] loop7: detected capacity change from 0 to 8192 [ 873.086184][T31188] loop4: detected capacity change from 0 to 512 [ 873.127293][T31188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.151096][T31188] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 873.207728][T31149] can0 (unregistered): slcan off ttyS3. [ 873.515632][T31216] FAULT_INJECTION: forcing a failure. [ 873.515632][T31216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.528994][T31216] CPU: 0 UID: 0 PID: 31216 Comm: syz.2.8286 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 873.529045][T31216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 873.529061][T31216] Call Trace: [ 873.529075][T31216] [ 873.529138][T31216] __dump_stack+0x1d/0x30 [ 873.529162][T31216] dump_stack_lvl+0xe8/0x140 [ 873.529181][T31216] dump_stack+0x15/0x1b [ 873.529196][T31216] should_fail_ex+0x265/0x280 [ 873.529287][T31216] should_fail+0xb/0x20 [ 873.529315][T31216] should_fail_usercopy+0x1a/0x20 [ 873.529459][T31216] _copy_from_user+0x1c/0xb0 [ 873.529558][T31216] input_event_from_user+0x5f/0x160 [ 873.529594][T31216] ? input_inject_event+0xd9/0xf0 [ 873.529620][T31216] evdev_write+0x1b1/0x290 [ 873.529743][T31216] ? __pfx_evdev_write+0x10/0x10 [ 873.529791][T31216] vfs_write+0x269/0x8d0 [ 873.529847][T31216] ? __rcu_read_unlock+0x4f/0x70 [ 873.529870][T31216] ? __fget_files+0x184/0x1c0 [ 873.529964][T31216] ksys_write+0xda/0x1a0 [ 873.529990][T31216] __x64_sys_write+0x40/0x50 [ 873.530078][T31216] x64_sys_call+0x2cdd/0x2fb0 [ 873.530164][T31216] do_syscall_64+0xd0/0x1a0 [ 873.530187][T31216] ? clear_bhb_loop+0x40/0x90 [ 873.530248][T31216] ? clear_bhb_loop+0x40/0x90 [ 873.530270][T31216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.530297][T31216] RIP: 0033:0x7f05ee36e969 [ 873.530314][T31216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.530334][T31216] RSP: 002b:00007f05ec9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 873.530427][T31216] RAX: ffffffffffffffda RBX: 00007f05ee595fa0 RCX: 00007f05ee36e969 [ 873.530443][T31216] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000007 [ 873.530535][T31216] RBP: 00007f05ec9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 873.530601][T31216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.530617][T31216] R13: 0000000000000000 R14: 00007f05ee595fa0 R15: 00007fffd88034c8 [ 873.530637][T31216] [ 873.587450][T31205] Falling back ldisc for ttyS3. [ 873.848954][T31230] loop7: detected capacity change from 0 to 1024 [ 873.884984][T31230] EXT4-fs: Ignoring removed bh option [ 873.890725][T31230] EXT4-fs: inline encryption not supported [ 873.964630][T23635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.977615][T31230] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 874.061430][T31230] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 874.178346][T31230] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 2: comm syz.7.8290: lblock 2 mapped to illegal pblock 2 (length 1) [ 874.203060][T31230] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 48: comm syz.7.8290: lblock 0 mapped to illegal pblock 48 (length 1) [ 874.228827][T31230] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.8290: Failed to acquire dquot type 0 [ 874.247348][T31230] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 874.266332][T31230] EXT4-fs error (device loop7): ext4_evict_inode:259: inode #11: comm syz.7.8290: mark_inode_dirty error [ 874.305190][T31230] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 874.330673][T31230] EXT4-fs (loop7): 1 orphan inode deleted [ 874.336837][ T9] Process accounting resumed [ 874.357234][T18623] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 874.357629][T31230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.384154][T18623] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 0 [ 874.443652][T31230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.459015][T31230] EXT4-fs error (device loop7): __ext4_get_inode_loc:4450: comm syz.7.8290: Invalid inode table block 1 in block_group 0 [ 874.487362][T31230] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 874.514618][T31230] EXT4-fs error (device loop7): ext4_quota_off:7219: inode #3: comm syz.7.8290: mark_inode_dirty error [ 875.804788][T31298] FAULT_INJECTION: forcing a failure. [ 875.804788][T31298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.817981][T31298] CPU: 0 UID: 0 PID: 31298 Comm: syz.7.8311 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 875.818056][T31298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 875.818069][T31298] Call Trace: [ 875.818076][T31298] [ 875.818084][T31298] __dump_stack+0x1d/0x30 [ 875.818104][T31298] dump_stack_lvl+0xe8/0x140 [ 875.818129][T31298] dump_stack+0x15/0x1b [ 875.818216][T31298] should_fail_ex+0x265/0x280 [ 875.818254][T31298] should_fail+0xb/0x20 [ 875.818282][T31298] should_fail_usercopy+0x1a/0x20 [ 875.818326][T31298] _copy_from_iter+0xcf/0xdd0 [ 875.818351][T31298] ? __build_skb_around+0x1a0/0x200 [ 875.818451][T31298] ? __alloc_skb+0x223/0x320 [ 875.818483][T31298] netlink_sendmsg+0x471/0x6b0 [ 875.818508][T31298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.818527][T31298] __sock_sendmsg+0x142/0x180 [ 875.818591][T31298] ____sys_sendmsg+0x31e/0x4e0 [ 875.818624][T31298] ___sys_sendmsg+0x17b/0x1d0 [ 875.818660][T31298] __x64_sys_sendmsg+0xd4/0x160 [ 875.818748][T31298] x64_sys_call+0x2999/0x2fb0 [ 875.818768][T31298] do_syscall_64+0xd0/0x1a0 [ 875.818806][T31298] ? clear_bhb_loop+0x40/0x90 [ 875.818833][T31298] ? clear_bhb_loop+0x40/0x90 [ 875.818860][T31298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.818888][T31298] RIP: 0033:0x7f33e115e969 [ 875.818905][T31298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.818967][T31298] RSP: 002b:00007f33df7c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.818986][T31298] RAX: ffffffffffffffda RBX: 00007f33e1385fa0 RCX: 00007f33e115e969 [ 875.819003][T31298] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 875.819019][T31298] RBP: 00007f33df7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 875.819088][T31298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.819104][T31298] R13: 0000000000000000 R14: 00007f33e1385fa0 R15: 00007ffc913f8878 [ 875.819125][T31298] [ 876.113265][T31301] loop7: detected capacity change from 0 to 512 [ 876.150544][T31301] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 876.168109][T31301] Cannot find del_set index 3 as target [ 876.306366][T31311] FAULT_INJECTION: forcing a failure. [ 876.306366][T31311] name failslab, interval 1, probability 0, space 0, times 0 [ 876.319177][T31311] CPU: 1 UID: 0 PID: 31311 Comm: syz.6.8315 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 876.319204][T31311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 876.319216][T31311] Call Trace: [ 876.319223][T31311] [ 876.319231][T31311] __dump_stack+0x1d/0x30 [ 876.319251][T31311] dump_stack_lvl+0xe8/0x140 [ 876.319332][T31311] dump_stack+0x15/0x1b [ 876.319348][T31311] should_fail_ex+0x265/0x280 [ 876.319400][T31311] should_failslab+0x8c/0xb0 [ 876.319431][T31311] __kmalloc_noprof+0xa5/0x3e0 [ 876.319451][T31311] ? fib_trie_table+0x2f/0xf0 [ 876.319497][T31311] fib_trie_table+0x2f/0xf0 [ 876.319522][T31311] fib_new_table+0xd7/0x1c0 [ 876.319549][T31311] inet_rtm_newroute+0x95/0x140 [ 876.319628][T31311] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 876.319659][T31311] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 876.319686][T31311] ? avc_has_perm_noaudit+0x1b1/0x200 [ 876.319709][T31311] netlink_rcv_skb+0x120/0x220 [ 876.319808][T31311] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 876.319841][T31311] rtnetlink_rcv+0x1c/0x30 [ 876.319889][T31311] netlink_unicast+0x5a1/0x670 [ 876.319921][T31311] netlink_sendmsg+0x58b/0x6b0 [ 876.319943][T31311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.319963][T31311] __sock_sendmsg+0x142/0x180 [ 876.320055][T31311] __sys_sendto+0x268/0x330 [ 876.320103][T31311] __x64_sys_sendto+0x76/0x90 [ 876.320137][T31311] x64_sys_call+0x2eb6/0x2fb0 [ 876.320212][T31311] do_syscall_64+0xd0/0x1a0 [ 876.320236][T31311] ? clear_bhb_loop+0x40/0x90 [ 876.320301][T31311] ? clear_bhb_loop+0x40/0x90 [ 876.320324][T31311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.320345][T31311] RIP: 0033:0x7f896218e969 [ 876.320361][T31311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.320378][T31311] RSP: 002b:00007f89607f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 876.320399][T31311] RAX: ffffffffffffffda RBX: 00007f89623b5fa0 RCX: 00007f896218e969 [ 876.320412][T31311] RDX: 0000000000000078 RSI: 0000200000000180 RDI: 0000000000000006 [ 876.320425][T31311] RBP: 00007f89607f7090 R08: 0000000000000000 R09: 0000000000000000 [ 876.320438][T31311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.320450][T31311] R13: 0000000000000000 R14: 00007f89623b5fa0 R15: 00007ffcdba3b7a8 [ 876.320469][T31311] [ 876.575576][T31314] __nla_validate_parse: 5 callbacks suppressed [ 876.575595][T31314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8317'. [ 876.611277][T31312] netlink: 'syz.7.8314': attribute type 4 has an invalid length. [ 876.619115][T31312] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8314'. [ 876.635016][T31314] Cannot find del_set index 3 as target [ 876.638606][T31312] : renamed from bond0 [ 876.731525][T31331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=31331 comm=syz.6.8324 [ 876.771729][T31334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8325'. [ 876.788739][T31334] Cannot find del_set index 3 as target [ 877.270989][T31371] netlink: 'syz.7.8330': attribute type 13 has an invalid length. [ 877.546572][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 877.546608][ T29] audit: type=1326 audit(1747154123.698:20773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 877.585331][T31380] netlink: 36 bytes leftover after parsing attributes in process `kfree'. [ 877.656786][ T29] audit: type=1326 audit(1747154123.738:20774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 877.680076][ T29] audit: type=1326 audit(1747154123.738:20775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 877.703330][ T29] audit: type=1326 audit(1747154123.738:20776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 877.726582][ T29] audit: type=1326 audit(1747154123.738:20777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 877.749849][ T29] audit: type=1326 audit(1747154123.738:20778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 877.773188][ T29] audit: type=1326 audit(1747154123.738:20779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 877.796370][ T29] audit: type=1326 audit(1747154123.738:20780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 877.819575][ T29] audit: type=1326 audit(1747154123.738:20781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 877.842657][ T29] audit: type=1326 audit(1747154123.738:20782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31379 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 878.208774][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8341'. [ 878.315635][T31403] Cannot find del_set index 3 as target [ 878.664612][T31431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 878.698651][T31431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8353'. [ 878.723230][T31435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8355'. [ 878.738614][T31435] Cannot find del_set index 3 as target [ 878.937866][T31442] cgroup: fork rejected by pids controller in /syz4 [ 879.061806][T31565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.070480][T31565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.108363][T31456] can0: slcan on ttyS3. [ 879.170995][T31573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8369'. [ 879.180159][T31449] can0 (unregistered): slcan off ttyS3. [ 879.221707][T31565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.227023][T31573] Cannot find del_set index 3 as target [ 879.230317][T31565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.801353][T31614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8380'. [ 879.845130][T31614] Cannot find del_set index 3 as target [ 879.879056][T31621] can0: slcan on ttyS3. [ 880.147676][T31649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8389'. [ 880.267214][T31633] can0 (unregistered): slcan off ttyS3. [ 880.269525][T31669] FAULT_INJECTION: forcing a failure. [ 880.269525][T31669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 880.286122][T31669] CPU: 0 UID: 0 PID: 31669 Comm: syz.4.8394 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 880.286192][T31669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 880.286209][T31669] Call Trace: [ 880.286218][T31669] [ 880.286229][T31669] __dump_stack+0x1d/0x30 [ 880.286256][T31669] dump_stack_lvl+0xe8/0x140 [ 880.286302][T31669] dump_stack+0x15/0x1b [ 880.286323][T31669] should_fail_ex+0x265/0x280 [ 880.286374][T31669] should_fail_alloc_page+0xf2/0x100 [ 880.286489][T31669] __alloc_frozen_pages_noprof+0xff/0x360 [ 880.286526][T31669] alloc_pages_mpol+0xb3/0x250 [ 880.286557][T31669] alloc_pages_noprof+0x90/0x130 [ 880.286588][T31669] bpf_prog_test_run_xdp+0x760/0x8f0 [ 880.286760][T31669] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 880.286801][T31669] bpf_prog_test_run+0x20a/0x390 [ 880.286849][T31669] __sys_bpf+0x3dc/0x790 [ 880.286919][T31669] __x64_sys_bpf+0x41/0x50 [ 880.286953][T31669] x64_sys_call+0x2478/0x2fb0 [ 880.287035][T31669] do_syscall_64+0xd0/0x1a0 [ 880.287058][T31669] ? clear_bhb_loop+0x40/0x90 [ 880.287080][T31669] ? clear_bhb_loop+0x40/0x90 [ 880.287112][T31669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.287208][T31669] RIP: 0033:0x7f275190e969 [ 880.287228][T31669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 880.287251][T31669] RSP: 002b:00007f274ff77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.287343][T31669] RAX: ffffffffffffffda RBX: 00007f2751b35fa0 RCX: 00007f275190e969 [ 880.287360][T31669] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 880.287376][T31669] RBP: 00007f274ff77090 R08: 0000000000000000 R09: 0000000000000000 [ 880.287393][T31669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.287408][T31669] R13: 0000000000000000 R14: 00007f2751b35fa0 R15: 00007ffc82bc4f88 [ 880.287432][T31669] [ 880.641435][T31688] can0: slcan on ttyS3. [ 880.929401][T31679] can0 (unregistered): slcan off ttyS3. [ 881.011403][T31741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 881.709111][T31791] can0: slcan on ttyS3. [ 882.441334][T31846] FAULT_INJECTION: forcing a failure. [ 882.441334][T31846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 882.454479][T31846] CPU: 0 UID: 0 PID: 31846 Comm: syz.7.8434 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 882.454524][T31846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 882.454539][T31846] Call Trace: [ 882.454546][T31846] [ 882.454555][T31846] __dump_stack+0x1d/0x30 [ 882.454580][T31846] dump_stack_lvl+0xe8/0x140 [ 882.454662][T31846] dump_stack+0x15/0x1b [ 882.454680][T31846] should_fail_ex+0x265/0x280 [ 882.454714][T31846] should_fail+0xb/0x20 [ 882.454745][T31846] should_fail_usercopy+0x1a/0x20 [ 882.454765][T31846] _copy_to_user+0x20/0xa0 [ 882.454829][T31846] simple_read_from_buffer+0xb5/0x130 [ 882.454856][T31846] proc_fail_nth_read+0x100/0x140 [ 882.454891][T31846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 882.454917][T31846] vfs_read+0x1a0/0x6f0 [ 882.454942][T31846] ? __rcu_read_unlock+0x4f/0x70 [ 882.455033][T31846] ? __fget_files+0x184/0x1c0 [ 882.455064][T31846] ksys_read+0xda/0x1a0 [ 882.455092][T31846] __x64_sys_read+0x40/0x50 [ 882.455118][T31846] x64_sys_call+0x2d77/0x2fb0 [ 882.455143][T31846] do_syscall_64+0xd0/0x1a0 [ 882.455168][T31846] ? clear_bhb_loop+0x40/0x90 [ 882.455190][T31846] ? clear_bhb_loop+0x40/0x90 [ 882.455212][T31846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.455235][T31846] RIP: 0033:0x7f33e115d37c [ 882.455315][T31846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 882.455334][T31846] RSP: 002b:00007f33df7c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 882.455376][T31846] RAX: ffffffffffffffda RBX: 00007f33e1385fa0 RCX: 00007f33e115d37c [ 882.455392][T31846] RDX: 000000000000000f RSI: 00007f33df7c70a0 RDI: 0000000000000005 [ 882.455407][T31846] RBP: 00007f33df7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 882.455422][T31846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.455451][T31846] R13: 0000000000000000 R14: 00007f33e1385fa0 R15: 00007ffc913f8878 [ 882.455475][T31846] [ 882.672741][T31852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.681491][T31852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.795822][T31852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.804533][T31852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.121994][T31786] can0 (unregistered): slcan off ttyS3. [ 883.132026][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 883.132042][ T29] audit: type=1400 audit(1747154129.288:21144): avc: denied { ioctl } for pid=31881 comm="syz.2.8438" path="socket:[100692]" dev="sockfs" ino=100692 ioctlcmd=0x8932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 883.274762][ T29] audit: type=1326 audit(1747154129.428:21145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31896 comm="syz.6.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 883.298492][ T29] audit: type=1326 audit(1747154129.428:21146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31896 comm="syz.6.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 883.322122][ T29] audit: type=1326 audit(1747154129.428:21147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31896 comm="syz.6.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 883.322182][ T29] audit: type=1326 audit(1747154129.428:21148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31896 comm="syz.6.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 883.430677][T31901] netlink: 'syz.6.8442': attribute type 13 has an invalid length. [ 883.474900][ T29] audit: type=1326 audit(1747154129.628:21149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31923 comm="syz.7.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 883.500748][T31928] __nla_validate_parse: 1 callbacks suppressed [ 883.500769][T31928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8446'. [ 883.516434][ T29] audit: type=1326 audit(1747154129.628:21150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31923 comm="syz.7.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 883.540250][ T29] audit: type=1326 audit(1747154129.628:21151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31923 comm="syz.7.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 883.563983][ T29] audit: type=1326 audit(1747154129.628:21152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31923 comm="syz.7.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 883.587654][ T29] audit: type=1326 audit(1747154129.628:21153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31923 comm="syz.7.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33e115e969 code=0x7ffc0000 [ 883.664810][T32036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8451'. [ 883.710206][ T1040] Process accounting resumed [ 883.808365][T32049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.817332][T32049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.901748][T32056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 883.939482][T32056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8458'. [ 883.949654][T32049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.958174][T32049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.127745][T32062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8462'. [ 884.188166][T32067] netlink: 36 bytes leftover after parsing attributes in process `kfree'. [ 884.339726][T32076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8466'. [ 884.382824][T32076] Cannot find del_set index 3 as target [ 884.564714][T32089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8472'. [ 884.579238][T32089] Cannot find del_set index 3 as target [ 884.648560][T32097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8474'. [ 884.660308][T32097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8474'. [ 884.696571][T32099] netlink: 36 bytes leftover after parsing attributes in process `kfree'. [ 884.835287][T32204] vlan2: entered allmulticast mode [ 884.946284][T32225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=32225 comm=syz.2.8487 [ 885.280768][ T3393] Process accounting resumed [ 885.311535][T32332] can0: slcan on ttyS3. [ 885.447290][T32332] can0 (unregistered): slcan off ttyS3. [ 885.648053][T32490] bond1: entered promiscuous mode [ 885.653190][T32490] bond1: entered allmulticast mode [ 885.680511][T32490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 885.790755][T32603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 885.889027][T32613] can0: slcan on ttyS3. [ 886.131310][T32645] bond1: entered promiscuous mode [ 886.136496][T32645] bond1: entered allmulticast mode [ 886.142705][T32645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.197603][T32604] can0 (unregistered): slcan off ttyS3. [ 886.232846][T32662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 886.259106][T32668] Cannot find del_set index 3 as target [ 886.449374][T32765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 886.543191][ T337] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 886.796145][ T456] Cannot find del_set index 3 as target [ 886.895878][ T473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 887.026935][ T486] Cannot find del_set index 3 as target [ 887.076456][ T465] xt_hashlimit: size too large, truncated to 1048576 [ 887.597785][T25835] Process accounting resumed [ 888.041700][ T619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 888.101752][ T626] Cannot find del_set index 3 as target [ 888.145176][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 888.145193][ T29] audit: type=1400 audit(1747154134.298:21628): avc: denied { mounton } for pid=624 comm="syz.4.8572" path=2F3532392FE91F7189591E9233614B dev="tmpfs" ino=2931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 888.182285][ T636] can0: slcan on ttyS3. [ 888.192129][ T637] tipc: Enabling of bearer rejected, already enabled [ 888.248383][ T29] audit: type=1326 audit(1747154134.348:21629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.6.8574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 888.271945][ T29] audit: type=1326 audit(1747154134.348:21630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.6.8574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 888.295388][ T29] audit: type=1326 audit(1747154134.348:21631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.6.8574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 888.318889][ T29] audit: type=1326 audit(1747154134.348:21632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.6.8574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 888.342452][ T29] audit: type=1326 audit(1747154134.348:21633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.6.8574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 888.360463][ T748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.365939][ T29] audit: type=1326 audit(1747154134.348:21634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.6.8574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 888.397333][ T748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.397607][ T29] audit: type=1326 audit(1747154134.348:21635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.6.8574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 888.428647][ T29] audit: type=1326 audit(1747154134.348:21636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.6.8574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 888.452154][ T29] audit: type=1326 audit(1747154134.348:21637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=631 comm="syz.6.8574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 888.578924][ T743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.591403][ T743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.608241][ T628] can0 (unregistered): slcan off ttyS3. [ 888.643175][ T770] __nla_validate_parse: 24 callbacks suppressed [ 888.643213][ T770] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8577'. [ 888.659459][ T770] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8577'. [ 889.026899][ T792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8584'. [ 889.047044][ T792] Cannot find del_set index 3 as target [ 889.154389][ T806] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8588'. [ 889.165452][ T806] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8588'. [ 889.271214][ T820] tipc: Enabling of bearer rejected, already enabled [ 889.698218][ T836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8602'. [ 889.825334][ T842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8604'. [ 889.838037][ T842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8604'. [ 889.920884][ T847] netlink: 'syz.2.8606': attribute type 13 has an invalid length. [ 890.072066][ T854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=854 comm=syz.0.8609 [ 890.193172][ T859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8609'. [ 890.244705][ T867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 890.324579][ T870] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8616'. [ 890.342445][ T870] Cannot find del_set index 3 as target [ 890.639654][ T881] tipc: Enabling of bearer rejected, already enabled [ 892.156644][ T942] ieee802154 phy0 wpan0: encryption failed: -22 [ 892.511183][ T958] Cannot find del_set index 3 as target [ 892.799487][ T960] can0: slcan on ttyS3. [ 892.917354][ T959] can0 (unregistered): slcan off ttyS3. [ 893.112553][ T1008] Cannot find del_set index 3 as target [ 893.415908][ T1014] ieee802154 phy0 wpan0: encryption failed: -22 [ 893.497036][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 893.503311][ T29] audit: type=1326 audit(1747154139.648:21707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1022 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 893.526525][ T29] audit: type=1326 audit(1747154139.648:21708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1022 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 893.598236][ T29] audit: type=1326 audit(1747154139.648:21709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1022 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 893.621395][ T29] audit: type=1326 audit(1747154139.648:21710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1022 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 893.644565][ T29] audit: type=1326 audit(1747154139.658:21711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1022 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 893.696062][ T29] audit: type=1326 audit(1747154139.848:21712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1022 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 893.719256][ T29] audit: type=1326 audit(1747154139.848:21713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1022 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 893.865559][ T29] audit: type=1326 audit(1747154139.848:21714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1022 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 893.888818][ T29] audit: type=1326 audit(1747154139.848:21715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1022 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 893.912000][ T29] audit: type=1326 audit(1747154139.848:21716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1022 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 895.065723][ T1040] Process accounting resumed [ 895.459283][ T1120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.469201][ T1120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.582886][ T1120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.591479][ T1120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.201525][ T1143] __nla_validate_parse: 4 callbacks suppressed [ 896.201543][ T1143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8703'. [ 896.321116][ T1149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=1149 comm=syz.6.8706 [ 896.383385][ T1154] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8708'. [ 896.394645][ T1155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.405022][ T1155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.418364][ T1154] Cannot find del_set index 3 as target [ 896.455818][ T1156] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8706'. [ 896.501144][ T1163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8712'. [ 896.515832][ T1163] Cannot find del_set index 3 as target [ 896.541860][ T1155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.550459][ T1155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.087349][ T1188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8720'. [ 897.101847][ T1188] Cannot find del_set index 3 as target [ 897.179726][ T1193] netlink: 'syz.6.8722': attribute type 13 has an invalid length. [ 897.229007][ T1198] can0: slcan on ttyS3. [ 897.336751][ T1219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8724'. [ 897.372757][ T1222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8725'. [ 897.390370][ T1219] Cannot find del_set index 3 as target [ 897.397129][ T1196] can0 (unregistered): slcan off ttyS3. [ 897.551411][ T1247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.563460][ T1247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.629813][ T1250] netlink: 'syz.0.8734': attribute type 13 has an invalid length. [ 897.693849][ T1247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.702478][ T1247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.071609][ T1292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=1292 comm=syz.2.8744 [ 898.195210][ T1294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8744'. [ 898.555855][ T1308] Cannot find del_set index 3 as target [ 898.631401][ T1312] netlink: 'syz.6.8753': attribute type 13 has an invalid length. [ 898.779515][ T1317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.802989][ T1317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.922979][ T1317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.931683][ T1317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.471113][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 899.471130][ T29] audit: type=1326 audit(1747154145.628:21983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1341 comm="syz.6.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 899.516049][ T29] audit: type=1326 audit(1747154145.658:21984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1341 comm="syz.6.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 899.539802][ T29] audit: type=1326 audit(1747154145.658:21985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1341 comm="syz.6.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 899.824190][ T1353] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8766'. [ 899.880250][ T1356] Cannot find del_set index 3 as target [ 900.385180][ T1386] netlink: 'syz.0.8777': attribute type 13 has an invalid length. [ 900.540526][ T1387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8774'. [ 901.100771][ T1402] FAULT_INJECTION: forcing a failure. [ 901.100771][ T1402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.113958][ T1402] CPU: 0 UID: 0 PID: 1402 Comm: syz.7.8783 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 901.114008][ T1402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 901.114027][ T1402] Call Trace: [ 901.114052][ T1402] [ 901.114063][ T1402] __dump_stack+0x1d/0x30 [ 901.114090][ T1402] dump_stack_lvl+0xe8/0x140 [ 901.114115][ T1402] dump_stack+0x15/0x1b [ 901.114144][ T1402] should_fail_ex+0x265/0x280 [ 901.114228][ T1402] should_fail+0xb/0x20 [ 901.114312][ T1402] should_fail_usercopy+0x1a/0x20 [ 901.114338][ T1402] _copy_from_user+0x1c/0xb0 [ 901.114368][ T1402] ip_rt_ioctl+0x310/0x950 [ 901.114488][ T1402] inet_ioctl+0x33f/0x3a0 [ 901.114535][ T1402] sock_do_ioctl+0x70/0x220 [ 901.114573][ T1402] sock_ioctl+0x41b/0x610 [ 901.114603][ T1402] ? __pfx_sock_ioctl+0x10/0x10 [ 901.114632][ T1402] __se_sys_ioctl+0xce/0x140 [ 901.114700][ T1402] __x64_sys_ioctl+0x43/0x50 [ 901.114721][ T1402] x64_sys_call+0x19a8/0x2fb0 [ 901.114786][ T1402] do_syscall_64+0xd0/0x1a0 [ 901.114816][ T1402] ? clear_bhb_loop+0x40/0x90 [ 901.114844][ T1402] ? clear_bhb_loop+0x40/0x90 [ 901.114874][ T1402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.114897][ T1402] RIP: 0033:0x7f33e115e969 [ 901.114917][ T1402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.114974][ T1402] RSP: 002b:00007f33df7c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 901.114998][ T1402] RAX: ffffffffffffffda RBX: 00007f33e1385fa0 RCX: 00007f33e115e969 [ 901.115013][ T1402] RDX: 0000200000000180 RSI: 000000000000890c RDI: 0000000000000003 [ 901.115025][ T1402] RBP: 00007f33df7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 901.115037][ T1402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.115048][ T1402] R13: 0000000000000000 R14: 00007f33e1385fa0 R15: 00007ffc913f8878 [ 901.115070][ T1402] [ 901.421180][ T1411] netlink: 'syz.6.8787': attribute type 4 has an invalid length. [ 901.438276][ T1411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8787'. [ 901.448039][ T1411] netlink: 'syz.6.8787': attribute type 4 has an invalid length. [ 901.564383][ T29] audit: type=1326 audit(1747154147.698:21986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.2.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 901.587970][ T29] audit: type=1326 audit(1747154147.698:21987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.2.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 901.611567][ T29] audit: type=1326 audit(1747154147.698:21988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.2.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 901.635188][ T29] audit: type=1326 audit(1747154147.698:21989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1420 comm="syz.2.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 901.753228][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8794'. [ 901.764900][ T1425] can0: slcan on ttyS3. [ 901.773994][ T1435] Cannot find del_set index 3 as target [ 901.847122][ T29] audit: type=1326 audit(1747154147.998:21990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1443 comm="syz.2.8795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 901.870845][ T29] audit: type=1326 audit(1747154147.998:21991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1443 comm="syz.2.8795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 901.894437][ T29] audit: type=1326 audit(1747154147.998:21992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1443 comm="syz.2.8795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 902.053666][ T1459] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8796'. [ 902.059511][ T1417] can0 (unregistered): slcan off ttyS3. [ 902.064481][ T1459] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8796'. [ 902.123008][T25835] Process accounting resumed [ 902.215109][ T1472] syzkaller0: entered promiscuous mode [ 902.220772][ T1472] syzkaller0: entered allmulticast mode [ 902.309734][ T1475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8801'. [ 902.333459][ T1475] bridge_slave_0 (unregistering): left allmulticast mode [ 902.340616][ T1475] bridge_slave_0 (unregistering): left promiscuous mode [ 902.347726][ T1475] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.394066][ T1484] atomic_op ffff88810fd4fd28 conn xmit_atomic 0000000000000000 [ 902.438969][ T1489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8808'. [ 902.469874][ T1489] Cannot find del_set index 3 as target [ 902.835539][ T1508] blktrace: Concurrent blktraces are not allowed on sg0 [ 903.300746][ T1524] netlink: 'syz.6.8820': attribute type 13 has an invalid length. [ 903.322883][ T1535] netlink: 'syz.7.8823': attribute type 3 has an invalid length. [ 903.422648][ T1545] blktrace: Concurrent blktraces are not allowed on sg0 [ 903.608238][ T1523] chnl_net:caif_netlink_parms(): no params data found [ 903.641972][ T1558] tipc: Enabling of bearer rejected, already enabled [ 903.710293][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.717512][ T1523] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.725006][ T1523] bridge_slave_0: entered allmulticast mode [ 903.732277][ T1523] bridge_slave_0: entered promiscuous mode [ 903.741005][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.748212][ T1523] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.755719][ T1523] bridge_slave_1: entered allmulticast mode [ 903.762639][ T1523] bridge_slave_1: entered promiscuous mode [ 903.801549][ T1523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.812689][ T1523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.845637][ T1523] team0: Port device team_slave_0 added [ 903.858057][ T1523] team0: Port device team_slave_1 added [ 903.882085][ T1523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.889137][ T1523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.915183][ T1523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.928485][ T1523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.935462][ T1523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.961568][ T1523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.975784][ T1577] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8833'. [ 904.034882][ T1586] FAULT_INJECTION: forcing a failure. [ 904.034882][ T1586] name failslab, interval 1, probability 0, space 0, times 0 [ 904.047639][ T1586] CPU: 1 UID: 0 PID: 1586 Comm: syz.0.8837 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 904.047734][ T1586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 904.047750][ T1586] Call Trace: [ 904.047758][ T1586] [ 904.047767][ T1586] __dump_stack+0x1d/0x30 [ 904.047791][ T1586] dump_stack_lvl+0xe8/0x140 [ 904.047816][ T1586] dump_stack+0x15/0x1b [ 904.047876][ T1586] should_fail_ex+0x265/0x280 [ 904.047916][ T1586] should_failslab+0x8c/0xb0 [ 904.047976][ T1586] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 904.048001][ T1586] ? sock_alloc_inode+0x34/0xa0 [ 904.048105][ T1586] ? __pfx_sock_alloc_inode+0x10/0x10 [ 904.048139][ T1586] sock_alloc_inode+0x34/0xa0 [ 904.048197][ T1586] alloc_inode+0x40/0x170 [ 904.048221][ T1586] __sock_create+0x122/0x5b0 [ 904.048251][ T1586] ? fput+0x8f/0xc0 [ 904.048268][ T1586] __sys_socket+0xb0/0x180 [ 904.048335][ T1586] __x64_sys_socket+0x3f/0x50 [ 904.048371][ T1586] x64_sys_call+0x285a/0x2fb0 [ 904.048398][ T1586] do_syscall_64+0xd0/0x1a0 [ 904.048425][ T1586] ? clear_bhb_loop+0x40/0x90 [ 904.048498][ T1586] ? clear_bhb_loop+0x40/0x90 [ 904.048596][ T1586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.048617][ T1586] RIP: 0033:0x7f8c69fde969 [ 904.048707][ T1586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.048723][ T1586] RSP: 002b:00007f8c68647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 904.048743][ T1586] RAX: ffffffffffffffda RBX: 00007f8c6a205fa0 RCX: 00007f8c69fde969 [ 904.048759][ T1586] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000025 [ 904.048782][ T1586] RBP: 00007f8c68647090 R08: 0000000000000000 R09: 0000000000000000 [ 904.048868][ T1586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.048880][ T1586] R13: 0000000000000000 R14: 00007f8c6a205fa0 R15: 00007ffcee165738 [ 904.048900][ T1586] [ 904.048912][ T1586] socket: no more sockets [ 904.253355][ T1523] hsr_slave_0: entered promiscuous mode [ 904.265313][ T1523] hsr_slave_1: entered promiscuous mode [ 904.271642][ T1523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 904.279491][ T1523] Cannot create hsr debugfs directory [ 904.437844][ T1523] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 904.449027][ T1523] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 904.479263][ T1523] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 904.507274][ T1523] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 904.626791][ T1523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.645089][ T1523] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.678203][ T1614] blktrace: Concurrent blktraces are not allowed on sg0 [ 904.687132][T18627] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.694224][T18627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.713488][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 904.713507][ T29] audit: type=1326 audit(1747154150.868:22121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1621 comm="syz.6.8852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 904.743398][ T29] audit: type=1326 audit(1747154150.868:22122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1621 comm="syz.6.8852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 904.768581][T18627] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.771253][ T29] audit: type=1326 audit(1747154150.868:22123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1621 comm="syz.6.8852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 904.775734][T18627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.799265][ T29] audit: type=1326 audit(1747154150.868:22124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1621 comm="syz.6.8852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 904.829979][ T29] audit: type=1326 audit(1747154150.868:22125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1621 comm="syz.6.8852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 904.853546][ T29] audit: type=1326 audit(1747154150.868:22126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1621 comm="syz.6.8852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 904.876254][ T1626] FAULT_INJECTION: forcing a failure. [ 904.876254][ T1626] name failslab, interval 1, probability 0, space 0, times 0 [ 904.877117][ T29] audit: type=1326 audit(1747154150.878:22127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1621 comm="syz.6.8852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 904.889692][ T1626] CPU: 1 UID: 0 PID: 1626 Comm: syz.6.8853 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 904.889794][ T1626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 904.889811][ T1626] Call Trace: [ 904.889821][ T1626] [ 904.889831][ T1626] __dump_stack+0x1d/0x30 [ 904.889858][ T1626] dump_stack_lvl+0xe8/0x140 [ 904.889884][ T1626] dump_stack+0x15/0x1b [ 904.889906][ T1626] should_fail_ex+0x265/0x280 [ 904.889979][ T1626] should_failslab+0x8c/0xb0 [ 904.890019][ T1626] kmem_cache_alloc_node_noprof+0x57/0x320 [ 904.890048][ T1626] ? __alloc_skb+0x101/0x320 [ 904.890135][ T1626] __alloc_skb+0x101/0x320 [ 904.890177][ T1626] netlink_alloc_large_skb+0xba/0xf0 [ 904.890213][ T1626] netlink_sendmsg+0x3cf/0x6b0 [ 904.890283][ T1626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.890310][ T1626] __sock_sendmsg+0x142/0x180 [ 904.890402][ T1626] ____sys_sendmsg+0x31e/0x4e0 [ 904.890434][ T1626] ___sys_sendmsg+0x17b/0x1d0 [ 904.890553][ T1626] __x64_sys_sendmsg+0xd4/0x160 [ 904.890587][ T1626] x64_sys_call+0x2999/0x2fb0 [ 904.890624][ T1626] do_syscall_64+0xd0/0x1a0 [ 904.890660][ T1626] ? clear_bhb_loop+0x40/0x90 [ 904.890771][ T1626] ? clear_bhb_loop+0x40/0x90 [ 904.890813][ T1626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.890840][ T1626] RIP: 0033:0x7f896218e969 [ 904.890860][ T1626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.890883][ T1626] RSP: 002b:00007f89607f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.890907][ T1626] RAX: ffffffffffffffda RBX: 00007f89623b5fa0 RCX: 00007f896218e969 [ 904.890983][ T1626] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 904.890994][ T1626] RBP: 00007f89607f7090 R08: 0000000000000000 R09: 0000000000000000 [ 904.891079][ T1626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.891095][ T1626] R13: 0000000000000000 R14: 00007f89623b5fa0 R15: 00007ffcdba3b7a8 [ 904.891122][ T1626] [ 905.114614][ T29] audit: type=1326 audit(1747154150.878:22128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1621 comm="syz.6.8852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 905.138164][ T29] audit: type=1326 audit(1747154150.878:22129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1621 comm="syz.6.8852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 905.161701][ T29] audit: type=1326 audit(1747154150.878:22130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1621 comm="syz.6.8852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 905.212920][ T1523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 905.212950][ T1523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 905.295652][ T1629] tipc: Enabling of bearer rejected, already enabled [ 905.331775][ T1523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.340249][ T23] Process accounting resumed [ 905.530432][ T1673] FAULT_INJECTION: forcing a failure. [ 905.530432][ T1673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.543780][ T1673] CPU: 1 UID: 0 PID: 1673 Comm: syz.0.8867 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 905.543855][ T1673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 905.543946][ T1673] Call Trace: [ 905.543955][ T1673] [ 905.543966][ T1673] __dump_stack+0x1d/0x30 [ 905.543993][ T1673] dump_stack_lvl+0xe8/0x140 [ 905.544019][ T1673] dump_stack+0x15/0x1b [ 905.544039][ T1673] should_fail_ex+0x265/0x280 [ 905.544133][ T1673] should_fail+0xb/0x20 [ 905.544165][ T1673] should_fail_usercopy+0x1a/0x20 [ 905.544237][ T1673] _copy_from_user+0x1c/0xb0 [ 905.544266][ T1673] input_event_from_user+0x5f/0x160 [ 905.544308][ T1673] ? input_inject_event+0xd9/0xf0 [ 905.544417][ T1673] evdev_write+0x1b1/0x290 [ 905.544452][ T1673] ? __pfx_evdev_write+0x10/0x10 [ 905.544559][ T1673] vfs_write+0x269/0x8d0 [ 905.544589][ T1673] ? __rcu_read_unlock+0x4f/0x70 [ 905.544611][ T1673] ? __fget_files+0x184/0x1c0 [ 905.544644][ T1673] ksys_write+0xda/0x1a0 [ 905.544751][ T1673] __x64_sys_write+0x40/0x50 [ 905.544783][ T1673] x64_sys_call+0x2cdd/0x2fb0 [ 905.544863][ T1673] do_syscall_64+0xd0/0x1a0 [ 905.544908][ T1673] ? clear_bhb_loop+0x40/0x90 [ 905.544971][ T1673] ? clear_bhb_loop+0x40/0x90 [ 905.544992][ T1673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.545012][ T1673] RIP: 0033:0x7f8c69fde969 [ 905.545044][ T1673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.545067][ T1673] RSP: 002b:00007f8c68647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 905.545104][ T1673] RAX: ffffffffffffffda RBX: 00007f8c6a205fa0 RCX: 00007f8c69fde969 [ 905.545180][ T1673] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 905.545251][ T1673] RBP: 00007f8c68647090 R08: 0000000000000000 R09: 0000000000000000 [ 905.545263][ T1673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.545274][ T1673] R13: 0000000000000000 R14: 00007f8c6a205fa0 R15: 00007ffcee165738 [ 905.545293][ T1673] [ 905.560049][ T1523] veth0_vlan: entered promiscuous mode [ 905.563026][ T1523] veth1_vlan: entered promiscuous mode [ 905.741780][ T1678] netlink: 'syz.2.8866': attribute type 13 has an invalid length. [ 905.802045][ T1523] veth0_macvtap: entered promiscuous mode [ 905.818219][ T1523] veth1_macvtap: entered promiscuous mode [ 905.831579][ T3389] Process accounting resumed [ 905.839001][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.849507][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.956778][ T1523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.965623][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.976122][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.987032][ T1523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.996422][ T1523] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.005192][ T1523] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.014109][ T1523] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.022891][ T1523] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.879045][ T1707] netlink: 'syz.2.8873': attribute type 12 has an invalid length. [ 908.953688][ T1760] capability: warning: `syz.0.8897' uses 32-bit capabilities (legacy support in use) [ 913.487143][ T1832] macsec1: entered allmulticast mode [ 913.492492][ T1832] bridge0: entered allmulticast mode [ 913.498274][ T1832] bridge0: port 1(macsec1) entered blocking state [ 913.504726][ T1832] bridge0: port 1(macsec1) entered disabled state [ 913.514533][ T1832] bridge0: left allmulticast mode [ 915.139050][ T31] bridge_slave_1: left allmulticast mode [ 915.144885][ T31] bridge_slave_1: left promiscuous mode [ 915.150638][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.201141][ T31] bridge_slave_0: left allmulticast mode [ 915.207029][ T31] bridge_slave_0: left promiscuous mode [ 915.212954][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.301026][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 915.301044][ T29] audit: type=1400 audit(1747154161.458:22186): avc: denied { validate_trans } for pid=1873 comm="syz.0.8941" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 915.355142][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.379014][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.399336][ T1878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.418049][ T31] bond0 (unregistering): Released all slaves [ 915.435804][ T1878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.437358][ T31] bond1 (unregistering): Released all slaves [ 915.480658][ T31] bond2 (unregistering): Released all slaves [ 915.502507][ T31] bond3 (unregistering): Released all slaves [ 915.521807][ T31] bond4 (unregistering): Released all slaves [ 915.542730][ T31] bond5 (unregistering): Released all slaves [ 915.566615][ T31] bond6 (unregistering): Released all slaves [ 916.233333][ T29] audit: type=1400 audit(1747154162.378:22187): avc: denied { bind } for pid=1883 comm="syz.2.8944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 916.254072][ T29] audit: type=1400 audit(1747154162.388:22188): avc: denied { setopt } for pid=1883 comm="syz.2.8944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 916.639879][ T29] audit: type=1400 audit(1747154162.458:22189): avc: denied { name_bind } for pid=1887 comm="syz.0.8945" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 916.661362][ T29] audit: type=1400 audit(1747154162.658:22190): avc: denied { ioctl } for pid=1887 comm="syz.0.8945" path="socket:[105544]" dev="sockfs" ino=105544 ioctlcmd=0x8b27 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 917.375619][ T31] hsr_slave_0: left promiscuous mode [ 917.407448][ T31] hsr_slave_1: left promiscuous mode [ 917.451028][ T31] team0 (unregistering): Port device team_slave_1 removed [ 917.469020][ T31] team0 (unregistering): Port device team_slave_0 removed [ 917.912142][ T29] audit: type=1400 audit(1747154163.998:22191): avc: denied { bind } for pid=1893 comm="syz.0.8947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 918.457327][ T29] audit: type=1400 audit(1747154164.608:22192): avc: denied { read } for pid=1908 comm="syz.6.8952" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 918.480168][ T29] audit: type=1400 audit(1747154164.608:22193): avc: denied { open } for pid=1908 comm="syz.6.8952" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 920.264839][ T29] audit: type=1400 audit(1747154166.418:22194): avc: denied { create } for pid=1931 comm="syz.6.8958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 920.304728][ T1932] netlink: 'syz.6.8958': attribute type 27 has an invalid length. [ 920.342532][ T1932] bond1: left promiscuous mode [ 920.347418][ T1932] bond1: left allmulticast mode [ 920.545859][ T1932] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8958'. [ 921.314980][ T1948] netlink: 552 bytes leftover after parsing attributes in process `syz.8.8960'. [ 922.139143][ T29] audit: type=1400 audit(1747154168.298:22195): avc: denied { connect } for pid=1961 comm="syz.6.8967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 923.000242][ T29] audit: type=1400 audit(1747154169.158:22196): avc: denied { audit_write } for pid=1977 comm="syz.0.8973" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 923.021570][ T29] audit: type=1107 audit(1747154169.158:22197): pid=1977 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 923.074870][ T1980] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8974'. [ 923.425430][ T29] audit: type=1400 audit(1747154169.578:22198): avc: denied { read } for pid=1987 comm="syz.2.8977" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 923.448639][ T29] audit: type=1400 audit(1747154169.578:22199): avc: denied { open } for pid=1987 comm="syz.2.8977" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 923.472279][ T29] audit: type=1400 audit(1747154169.578:22200): avc: denied { firmware_load } for pid=37 comm="kworker/u8:2" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 924.185989][ T2002] macsec1: entered allmulticast mode [ 924.191476][ T2002] bridge0: entered allmulticast mode [ 924.197565][ T2002] bridge0: port 3(macsec1) entered blocking state [ 924.204203][ T2002] bridge0: port 3(macsec1) entered disabled state [ 924.216615][ T2002] bridge0: left allmulticast mode [ 924.335866][ T29] audit: type=1400 audit(1747154170.478:22201): avc: denied { block_suspend } for pid=2003 comm="syz.2.8982" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 927.251283][ T29] audit: type=1400 audit(1747154173.148:22202): avc: denied { recv } for pid=2031 comm="syz.7.8993" saddr=10.128.0.163 src=49856 daddr=10.128.1.16 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 927.409491][ T29] audit: type=1326 audit(1747154173.448:22203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 927.433126][ T29] audit: type=1326 audit(1747154173.448:22204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 927.456723][ T29] audit: type=1326 audit(1747154173.448:22205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 927.480496][ T29] audit: type=1326 audit(1747154173.448:22206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 927.503993][ T29] audit: type=1326 audit(1747154173.448:22207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 927.527574][ T29] audit: type=1326 audit(1747154173.448:22208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 927.551223][ T29] audit: type=1326 audit(1747154173.448:22209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 927.574723][ T29] audit: type=1326 audit(1747154173.448:22210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 927.598271][ T29] audit: type=1326 audit(1747154173.448:22211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 929.706474][ T2077] kernel profiling enabled (shift: 63) [ 929.712060][ T2077] profiling shift: 63 too large [ 932.750220][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 932.750238][ T29] audit: type=1400 audit(1747154178.908:22243): avc: denied { read } for pid=2120 comm="syz.6.9021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 933.019226][ T2130] vhci_hcd: default hub control req: 8010 v0002 i0000 l86 [ 933.034032][ T2128] tipc: Enabling of bearer rejected, already enabled [ 933.159841][ T29] audit: type=1326 audit(1747154179.318:22244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.0.9024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 933.183684][ T29] audit: type=1326 audit(1747154179.318:22245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.0.9024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 933.207363][ T29] audit: type=1326 audit(1747154179.318:22246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.0.9024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 933.231178][ T29] audit: type=1326 audit(1747154179.318:22247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.0.9024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 933.254869][ T29] audit: type=1326 audit(1747154179.318:22248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.0.9024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 933.279102][ T29] audit: type=1326 audit(1747154179.378:22249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.0.9024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 933.302782][ T29] audit: type=1326 audit(1747154179.378:22250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.0.9024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 933.326394][ T29] audit: type=1326 audit(1747154179.378:22251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.0.9024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 933.350041][ T29] audit: type=1326 audit(1747154179.378:22252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.0.9024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c69fde969 code=0x7ffc0000 [ 933.414631][ T2136] IPv6: sit1: Disabled Multicast RS [ 933.476651][ T2149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.491814][ T2149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.763894][ T2180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.846445][ T2180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.927783][ T2192] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9048'. [ 936.744866][ T2230] veth1_to_team: entered promiscuous mode [ 936.908914][ T2230] veth1_to_team (unregistering): left promiscuous mode [ 937.238148][ T2230] team0: Port device team_slave_1 removed [ 940.424628][ T2274] vti0: entered allmulticast mode [ 942.090550][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 942.090566][ T29] audit: type=1326 audit(1747154188.248:22291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2322 comm="syz.6.9096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 942.143246][ T29] audit: type=1326 audit(1747154188.278:22292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2322 comm="syz.6.9096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 942.166894][ T29] audit: type=1326 audit(1747154188.278:22293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2322 comm="syz.6.9096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 942.190846][ T29] audit: type=1326 audit(1747154188.278:22294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2322 comm="syz.6.9096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 942.214444][ T29] audit: type=1326 audit(1747154188.278:22295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2322 comm="syz.6.9096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 942.311947][ T29] audit: type=1400 audit(1747154188.348:22296): avc: denied { write } for pid=2324 comm="syz.6.9097" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 942.391026][ T2328] veth1_to_team: entered promiscuous mode [ 942.933488][ T2320] veth1_to_team: left promiscuous mode [ 943.450610][ T2353] tipc: Enabled bearer , priority 0 [ 943.463711][ T2353] tipc: Disabling bearer [ 943.725110][ T29] audit: type=1400 audit(1747154189.878:22297): avc: denied { bind } for pid=2358 comm="syz.2.9109" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 943.745605][ T29] audit: type=1400 audit(1747154189.878:22298): avc: denied { node_bind } for pid=2358 comm="syz.2.9109" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 943.852599][ T29] audit: type=1326 audit(1747154189.998:22299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2364 comm="syz.2.9111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 943.876199][ T29] audit: type=1326 audit(1747154189.998:22300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2364 comm="syz.2.9111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f05ee36e969 code=0x7ffc0000 [ 943.996606][ T2374] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9115'. [ 945.086716][ T2406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.110965][ T2406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.362075][ T2419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.371028][ T2419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.383540][ T2419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 948.583515][ T2439] syzkaller0: entered promiscuous mode [ 948.589154][ T2439] syzkaller0: entered allmulticast mode [ 949.101903][ T2460] netlink: 'syz.2.9144': attribute type 3 has an invalid length. [ 949.119417][ T2460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.131033][ T2460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.536953][ T2474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.549598][ T2474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.582263][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 949.582279][ T29] audit: type=1326 audit(1747154195.738:22347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2478 comm="syz.8.9149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 949.616559][ T29] audit: type=1326 audit(1747154195.768:22348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2478 comm="syz.8.9149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 949.640280][ T29] audit: type=1326 audit(1747154195.768:22349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2478 comm="syz.8.9149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 949.663914][ T29] audit: type=1326 audit(1747154195.768:22350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2478 comm="syz.8.9149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 949.715198][ T2463] chnl_net:caif_netlink_parms(): no params data found [ 949.725829][ T29] audit: type=1400 audit(1747154195.858:22351): avc: denied { execute } for pid=2484 comm="syz.8.9151" name="file0" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 949.748635][ T29] audit: type=1400 audit(1747154195.868:22352): avc: denied { read } for pid=2486 comm="syz.7.9152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 949.900524][ T2463] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.907693][ T2463] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.915463][ T2463] bridge_slave_0: entered allmulticast mode [ 949.922618][ T2463] bridge_slave_0: entered promiscuous mode [ 949.931979][ T2463] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.939214][ T2463] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.940162][ T29] audit: type=1400 audit(1747154196.098:22353): avc: denied { wake_alarm } for pid=2496 comm="syz.8.9156" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 949.947234][ T2463] bridge_slave_1: entered allmulticast mode [ 949.974977][ T2463] bridge_slave_1: entered promiscuous mode [ 950.028334][ T2463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.236160][ T2463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.400915][ T2463] team0: Port device team_slave_0 added [ 950.411930][ T2463] team0: Port device team_slave_1 added [ 950.440899][ T2463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.448080][ T2463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.474109][ T2463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.488487][ T2463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.495508][ T2463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.521524][ T2463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.566122][ T2463] hsr_slave_0: entered promiscuous mode [ 950.572717][ T2463] hsr_slave_1: entered promiscuous mode [ 950.580450][ T2463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 950.589786][ T2463] Cannot create hsr debugfs directory [ 950.701938][ T2520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.711307][ T2520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.138991][ T2463] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 951.151599][ T2463] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 951.172172][ T2463] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 951.185826][ T2463] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 951.259199][ T2463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.300328][ T2463] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.341496][T18627] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.348636][T18627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.440495][T18627] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.447665][T18627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.466804][ T2463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 951.550968][ T2463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.743873][ T29] audit: type=1326 audit(1747154197.898:22354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.6.9171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 951.767626][ T29] audit: type=1326 audit(1747154197.898:22355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.6.9171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 951.791223][ T29] audit: type=1326 audit(1747154197.898:22356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.6.9171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f896218e969 code=0x7ffc0000 [ 951.870697][ T2532] netlink: 'syz.2.9167': attribute type 4 has an invalid length. [ 952.024566][ T2463] veth0_vlan: entered promiscuous mode [ 952.050852][ T2463] veth1_vlan: entered promiscuous mode [ 952.215251][ T2463] veth0_macvtap: entered promiscuous mode [ 952.298911][ T2463] veth1_macvtap: entered promiscuous mode [ 952.401755][ T2463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.412350][ T2463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.422278][ T2463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.432774][ T2463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.458402][ T2463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.901904][ T2571] macsec0: entered promiscuous mode [ 952.907248][ T2571] macsec0: entered allmulticast mode [ 952.985959][ T2575] netlink: 5 bytes leftover after parsing attributes in process `syz.7.9177'. [ 953.006506][ T2575] 0ªX¹¦D: renamed from gretap0 [ 953.014276][ T2575] 0ªX¹¦D: entered allmulticast mode [ 953.030806][ T2575] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 953.144836][ T2463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.155358][ T2463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.165212][ T2463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.175694][ T2463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.048164][ T2463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.188420][ T2463] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.197235][ T2463] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.206026][ T2463] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.214777][ T2463] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.431714][ T2596] veth1_to_bond: entered allmulticast mode [ 955.438725][ T2596] veth1_to_bond: left allmulticast mode [ 955.937971][ T2602] usb usb8: usbfs: process 2602 (syz.6.9184) did not claim interface 0 before use [ 956.107715][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 956.107735][ T29] audit: type=1400 audit(1747154202.258:22389): avc: denied { name_bind } for pid=2609 comm="syz.6.9187" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 956.174275][ T2619] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9187'. [ 956.184410][ T29] audit: type=1400 audit(1747154202.328:22390): avc: denied { ioctl } for pid=2609 comm="syz.6.9187" path="socket:[107235]" dev="sockfs" ino=107235 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 957.097572][ T29] audit: type=1326 audit(1747154203.238:22391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2632 comm="syz.8.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 957.097613][ T29] audit: type=1326 audit(1747154203.238:22392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2632 comm="syz.8.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 957.097647][ T29] audit: type=1326 audit(1747154203.238:22393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2632 comm="syz.8.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 957.097746][ T29] audit: type=1326 audit(1747154203.238:22394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2632 comm="syz.8.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 957.097826][ T29] audit: type=1326 audit(1747154203.238:22395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2632 comm="syz.8.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 957.097916][ T29] audit: type=1326 audit(1747154203.238:22396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2632 comm="syz.8.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 957.098017][ T29] audit: type=1326 audit(1747154203.238:22397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2632 comm="syz.8.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 957.098051][ T29] audit: type=1326 audit(1747154203.238:22398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2632 comm="syz.8.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 958.034151][ T2606] chnl_net:caif_netlink_parms(): no params data found [ 958.181531][ T2606] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.181602][ T2606] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.181827][ T2606] bridge_slave_0: entered allmulticast mode [ 958.182399][ T2606] bridge_slave_0: entered promiscuous mode [ 958.183322][ T2606] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.183352][ T2606] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.183539][ T2606] bridge_slave_1: entered allmulticast mode [ 958.184149][ T2606] bridge_slave_1: entered promiscuous mode [ 958.257900][ T2606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.281613][ T2606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.366378][ T2606] team0: Port device team_slave_0 added [ 958.368390][ T2606] team0: Port device team_slave_1 added [ 958.418596][ T2606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.418620][ T2606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.418707][ T2606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.419892][ T2606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.419904][ T2606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.420008][ T2606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.470420][ T2606] hsr_slave_0: entered promiscuous mode [ 958.471529][ T2606] hsr_slave_1: entered promiscuous mode [ 958.472606][ T2606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.472620][ T2606] Cannot create hsr debugfs directory [ 958.911014][ T2606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 958.921520][ T2659] tmpfs: Unsupported parameter 'huge' [ 958.932554][ T2606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 958.956725][ T2606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 958.973096][ T2606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 958.992496][ T2606] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.999683][ T2606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.007142][ T2606] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.014275][ T2606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.060102][ T2606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.073164][ T2606] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.411460][ T2606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.736279][ T2679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=2679 comm=syz.7.9203 [ 962.084478][ T2692] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 962.634731][ T2606] veth0_vlan: entered promiscuous mode [ 962.763363][ T2606] veth1_vlan: entered promiscuous mode [ 962.782560][ T2606] veth0_macvtap: entered promiscuous mode [ 962.803541][ T2606] veth1_macvtap: entered promiscuous mode [ 962.816010][ T2606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.826769][ T2606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.836776][ T2606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.847269][ T2606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.857173][ T2606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.867684][ T2606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.879822][ T2606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.896089][ T2606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.906825][ T2606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.916887][ T2606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.927389][ T2606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.937338][ T2606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.947803][ T2606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.083557][ T2606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.096121][ T2606] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.105016][ T2606] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.113800][ T2606] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.122551][ T2606] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.499010][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 963.499028][ T29] audit: type=1326 audit(1747154209.658:22439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2732 comm="syz.0.9218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69639e969 code=0x7ffc0000 [ 963.929651][ T29] audit: type=1326 audit(1747154210.078:22440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2732 comm="syz.0.9218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fd69639e969 code=0x7ffc0000 [ 963.953319][ T29] audit: type=1326 audit(1747154210.078:22441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2732 comm="syz.0.9218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69639e969 code=0x7ffc0000 [ 963.976915][ T29] audit: type=1326 audit(1747154210.078:22442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2732 comm="syz.0.9218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69639e969 code=0x7ffc0000 [ 964.090080][ T29] audit: type=1326 audit(1747154210.138:22443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2732 comm="syz.0.9218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd69639e969 code=0x7ffc0000 [ 964.887212][ T29] audit: type=1326 audit(1747154211.038:22444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a40d1e969 code=0x7fc00000 [ 964.910951][ T29] audit: type=1400 audit(1747154211.038:22445): avc: denied { read } for pid=2764 comm="syz.2.9230" path="socket:[108804]" dev="sockfs" ino=108804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 964.934682][ T29] audit: type=1326 audit(1747154211.038:22446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a40d1e969 code=0x7fc00000 [ 964.958179][ T29] audit: type=1326 audit(1747154211.038:22447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.2.9230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a40d1e969 code=0x7fc00000 [ 965.028099][ T2779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.037542][ T2779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.158388][ T29] audit: type=1326 audit(1747154211.318:22448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2787 comm="syz.2.9239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a40d1e969 code=0x7ffc0000 [ 965.210131][ T2782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 966.844422][ T2819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.864328][ T2819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.903150][ T2819] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.910434][ T2819] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.942073][ T2819] bridge0: entered allmulticast mode [ 967.025508][ T2819] bridge_slave_1: left allmulticast mode [ 967.031230][ T2819] bridge_slave_1: left promiscuous mode [ 967.036920][ T2819] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.050052][ T2819] bridge_slave_0: left allmulticast mode [ 967.055797][ T2819] bridge_slave_0: left promiscuous mode [ 967.061496][ T2819] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.915386][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 968.915400][ T29] audit: type=1326 audit(1747154215.068:22464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.8.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 969.004120][ T29] audit: type=1326 audit(1747154215.098:22465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.8.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 969.027943][ T29] audit: type=1326 audit(1747154215.098:22466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.8.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 969.051548][ T29] audit: type=1326 audit(1747154215.108:22467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.8.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 969.075229][ T29] audit: type=1326 audit(1747154215.108:22468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.8.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 969.098948][ T29] audit: type=1326 audit(1747154215.108:22469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.8.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 969.122455][ T29] audit: type=1326 audit(1747154215.108:22470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.8.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 969.146125][ T29] audit: type=1326 audit(1747154215.108:22471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.8.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 969.169724][ T29] audit: type=1326 audit(1747154215.108:22472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.8.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 969.193253][ T29] audit: type=1326 audit(1747154215.108:22473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.8.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc6907fe969 code=0x7ffc0000 [ 969.564756][ T2874] netlink: 'syz.8.9268': attribute type 27 has an invalid length. [ 969.604575][ T2874] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.611853][ T2874] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.664160][ T2874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.680039][ T2874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.724446][ T2874] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.733780][ T2874] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.742774][ T2874] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.742892][ T2995] ================================================================== [ 969.751690][ T2874] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.759823][ T2995] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 969.775642][ T2995] [ 969.777979][ T2995] write to 0xffffffff8687aea0 of 8 bytes by task 2874 on cpu 1: [ 969.785637][ T2995] data_alloc+0x271/0x2b0 [ 969.790010][ T2995] prb_reserve+0x808/0xaf0 [ 969.794473][ T2995] vprintk_store+0x56d/0x860 [ 969.799089][ T2995] vprintk_emit+0x178/0x650 [ 969.803702][ T2995] dev_vprintk_emit+0x242/0x2a0 [ 969.808583][ T2995] dev_printk_emit+0x84/0xb0 [ 969.813204][ T2995] __netdev_printk+0x35c/0x3e0 [ 969.817992][ T2995] netdev_info+0x9b/0xd0 [ 969.822249][ T2995] nsim_udp_tunnel_unset_port+0x1bd/0x1e0 [ 969.828003][ T2995] __udp_tunnel_nic_device_sync+0x564/0x9c0 [ 969.833925][ T2995] __udp_tunnel_nic_del_port+0x19e/0x220 [ 969.839592][ T2995] udp_tunnel_notify_del_rx_port+0x12e/0x190 [ 969.845590][ T2995] geneve_sock_release+0x217/0x250 [ 969.850718][ T2995] geneve_stop+0xf8/0x110 [ 969.855077][ T2995] __dev_close_many+0x1e1/0x420 [ 969.859950][ T2995] __dev_change_flags+0x1e9/0x400 [ 969.865012][ T2995] netif_change_flags+0x5a/0xd0 [ 969.869901][ T2995] do_setlink+0x90e/0x27f0 [ 969.874340][ T2995] rtnl_newlink+0xd8b/0x12d0 [ 969.878956][ T2995] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 969.883922][ T2995] netlink_rcv_skb+0x120/0x220 [ 969.888736][ T2995] rtnetlink_rcv+0x1c/0x30 [ 969.893190][ T2995] netlink_unicast+0x5a1/0x670 [ 969.897972][ T2995] netlink_sendmsg+0x58b/0x6b0 [ 969.902762][ T2995] __sock_sendmsg+0x142/0x180 [ 969.907461][ T2995] ____sys_sendmsg+0x31e/0x4e0 [ 969.912251][ T2995] ___sys_sendmsg+0x17b/0x1d0 [ 969.916941][ T2995] __x64_sys_sendmsg+0xd4/0x160 [ 969.921818][ T2995] x64_sys_call+0x2999/0x2fb0 [ 969.926523][ T2995] do_syscall_64+0xd0/0x1a0 [ 969.931067][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.936989][ T2995] [ 969.939320][ T2995] read to 0xffffffff8687aea0 of 16 bytes by task 2995 on cpu 0: [ 969.946962][ T2995] _prb_read_valid+0x1bc/0x920 [ 969.951757][ T2995] prb_read_valid+0x3c/0x60 [ 969.956295][ T2995] syslog_print+0x23a/0x540 [ 969.960812][ T2995] do_syslog+0x52b/0x7e0 [ 969.965064][ T2995] __x64_sys_syslog+0x41/0x50 [ 969.969750][ T2995] x64_sys_call+0x2ea0/0x2fb0 [ 969.974444][ T2995] do_syscall_64+0xd0/0x1a0 [ 969.978961][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.984953][ T2995] [ 969.987277][ T2995] Reported by Kernel Concurrency Sanitizer on: [ 969.993436][ T2995] CPU: 0 UID: 0 PID: 2995 Comm: klogd Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 970.005430][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 970.015498][ T2995] ================================================================== [ 970.115915][ T2876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.124598][ T2876] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.134437][ T2876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.