last executing test programs: 6.332499224s ago: executing program 0 (id=155): unshare(0x8040480) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002080), 0x60800, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100dc000000000000001400000008001d00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x24}}, 0x0) 5.945029953s ago: executing program 0 (id=160): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x7ff, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r3, &(0x7f0000000200)=""/209, 0x128) tkill(r2, 0x7) listen(r1, 0x5) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$kcm(0x29, 0x7, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x1, 0x3, 0x2, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, 0x3a) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="49da4f78eda085f947bee77e1000912f011222419ec21a0939191546b6839f9db45c122f5df49b1ad6f8d50d9d659bac0cf451cc90f3d040088631bbfbb74e8c4a3fcfb27f2531d4a4aca0aa95ee373cde1bcb6dd34f3a194070b00c041b12ffde3269b202c585a1fe02828ff38011a78643b0e6ee12cd5f79c99a8975be2895606445b76f7de83a333536410efc1469ad414deab375c9ce7c56f1536e72b3bdc8befa0d174ddbaea6b792e15d4627f9d018d714da2ba83f69fcc4ce5c3fc23e04f96ec09694e61086eff73eb696e0eff6fb5cd0c696ed41cbb0a8e9152ad934b2c69a3dda46ecae576742786d226546d800e3908c", 0xf5}, {&(0x7f0000000300)="18879794aac29fa950f168394bd4e6c9b43aa963b23a0dd4149a235f6bd1cb3b977013829fc5fcb4db0500cd66aa4c4bebf7edafe0d0aeade54ad1b4e56b94190482a24368c660f222a6efb4b26b44d58876185c735ae6e2e73871aa859298ca13a2b0e80dff8956f0674b235128d07bb4cba8284614cc15cdcd8011dc5963cece28", 0x82}], 0x2}}], 0x1, 0x844) 5.889760847s ago: executing program 0 (id=161): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b04ac1414"], 0x20}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) syz_io_uring_setup(0x3587, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000440), 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_uid}]}}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1000000, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200001aa, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) keyctl$link(0x8, 0x0, 0xfffffffffffffffa) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x7}}, {{@in6=@private0, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) 5.616855957s ago: executing program 0 (id=168): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0xffdffffe, 0x0, 0x40, 0x2, 0x0, 0x0, 0x9}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x29, 0x60400, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}) close(r5) (async) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r8}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="0019f945adc3dd61c8000400000000", @ANYRESHEX=r11, @ANYBLOB=',k']) 4.741297381s ago: executing program 3 (id=181): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fchdir(r0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="0200f1d95a8828f82ee1609893ec87b6d373f0f7eae1935e45eb2b117d81c23fb3d3464d9e7e42e9200f236c9bd1a37cd5eb55a12c9b2866dffe8fe7192ca099bb50fddee6c783976a1833c13dabd207f8eda8f954d4bb59ec292d2e1778151edef2e735f12701cdee8d6ba92b3b2a0ec0368e44b3d60e3238af1bffd1e1ca8993700d67f41a80c70c53c47fcf2bfb8d405252c9fe758c4e042af1ba1c279f5732f334cb7326424ee7545f86228631ad3b95558879b19925c147ece499ca433f88b1934d6540649fa829b8ad94411f67bbf2d6209f07c8c582915f83cf0b10a33339903cb9578cfbbb8a608eb44e4c"], 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_int(r2, 0x10d, 0xa1, &(0x7f0000000000), &(0x7f0000000240)=0x4) setuid(0xee00) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 4.677373656s ago: executing program 3 (id=183): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 4.464191382s ago: executing program 3 (id=186): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0xffff, &(0x7f0000000000)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_pgetevents(r4, 0x106a729f, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0xd8, 0x1403, 0x200, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xce0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r5 = syz_usb_connect(0x4, 0xc22, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0xd1, 0x48, 0xa2, 0x10, 0x1f4d, 0x9016, 0xe5c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc10, 0x4, 0x4, 0x3, 0x80, 0x8, [{{0x9, 0x4, 0x5c, 0xf0, 0xa, 0x6b, 0x31, 0xd3, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x5, 0x5}, {0x6, 0x24, 0x1a, 0x1, 0x422083593e698925}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x80, 0x6, 0x9, 0x20b8, 0x3}]}], [{{0x9, 0x5, 0x5, 0x8, 0x40, 0xa, 0x27, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0xb, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0xa7}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x1, 0x77, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3df, 0x1, 0x7, 0x8, [@generic={0xe, 0x9, "dc9447839a695ab3cf0bf186"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x5, 0x4, 0x6, [@generic={0x2e, 0x3a, "57657b1388b254ba0d241d402092ecf36d94c264ce15161781d20c8a0b18952f1f863da7f290fadbb17f34ed"}, @generic={0xb4, 0xb, "326d039eeac9e50c1bf70492f88ed4b9df927f03260d58b65096cc0c694e383c9e9dfdc2dd096e765c03b33f31278ee087dcca13dab9e2ae6bd28027f1367bfb1e9d0c0741d8e0cfe7711fff465428269fbddba9ec0247dfda12d2811d0030fd3dfcd4f0268061dac25f101c5e6d80285cb1cfc2efdba2fa794a981d9742d254a503dc2f185621642eed775e6ee64cd9920455dd2d6c153ee67ccf288f85d4e19f8f545730db704783e446726bf0fc2b50e3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x3, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xd0a}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0xa2, 0x6, 0x9e, [@generic={0x69, 0x0, "7c3478558d3729247396bc557d766a1bf01ebcae6231a72b63c20460ea0432a3667ba75fccc8aafd1c46ec310729035f3e0cc471559a1e5854c14b03ec7b7f9cf4b76d1bd4a52c246e9aaf505bddb29af6328dac09163b391d34538759fd3aeaeee6972c0aaa03"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x40, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x81, 0x18, 0x5, [@generic={0x3c, 0x3, "26c6888b16c3ccac07bd603f38cc2960e916ca0572a7f14a14b367f36cc5a20307f6aa32e7cfda02ad24e556bcc18382314db1c78f33fb19ae67"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x3ff, 0x40, 0x5, 0x6, [@generic={0x20, 0x22, "326ae45dd91ca38394249723df10be40b1517ba38f7e6e78ef355a7e1e87"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x7, 0x9, 0xf, [@generic={0x2c, 0x31, "0e5d43800d95df3abadbb66b0cbd024e3b48f0a78d168d3c64bded200607350a58302df08d147c097775"}, @generic={0x56, 0x8, "eed66de832d9dfb472ccd541dd78141b140354cba690b074daef4b6414a41cf6db3f7226f4f0c8228f6c69f68ffd1f83f6ac151c684e560d5ff8625b015fee3bb07f500ea75c82bb029ef8d5bdd4e91f1beaff6d"}]}}]}}, {{0x9, 0x4, 0x3, 0x2, 0x4, 0x8a, 0xe7, 0x63, 0x2, [@generic={0xcb, 0x18, "f8f1cfa7e143540c70f39b8acddbf438ecbf7cb932025c09f5481eb412e07b694b67781a1af76a78c6a7b1ede247a3213f9f07e885a705a6fb52ff132ab15ff01e55d852ecdf9a0a4dd57db2ec76a4cb470aa8cc5794589a61786f5621d6320b7a896c3f9c083e191ac22f7e139c6d949cb1f2900209bc00b1a48d21dbdb367c9ec89fdd7059bb126b98cc6e74f71023eed5e0b5fc1e5fa0e3c5b8edf980703617dfde6751dc78d2305367ff7ecb1d81fd2b4293a09f314242cb8219c150a0d02ddc1e8c490626484e"}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x88, 0x1, 0x5, 0x9, "acaef9fd47f2fa9c"}, @as_header={0x7, 0x24, 0x1, 0x3f, 0xfb, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x2, 0x0, 0x9, "126cb02c68b42ec50a"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0xd2, 0xa, "79f1d3"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x454e, 0x27, "bf336111"}]}], [{{0x9, 0x5, 0xd, 0xc, 0x10, 0x4, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xb, 0x800}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x6, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8f}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0xcb, 0x5, 0x1, [@generic={0xd7, 0xf, "d4e56fa3c1f20bd489260d185bf64e679e0337a3922a3b46bb65dd6b8b0f2f34154adb3a70624465f2b12b8966ae1797de070f96e3fff5ce8faa00a860abb8c2d6218dbef4d01c803aecf990049ee3c31399125d00be92b1f19b83d7f1083b29411753d68458cefe8de500c9d719ec1a678a643c9e49eb84291ab2cfebde56751981fee0f8c1135761a4ebde4e13833d707f73a03926f8ceacf3c5dcc7e52973b17f9b1af3af89cb03832d87836cb9b798a44b71ed22e8a868034750220f870ee022636f269906348d7bd5d8323d9ca813593d2464"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x1, 0x3, 0x9, [@generic={0xca, 0xd, "f351d4e825537e01fa64da6ba9fa7a5fbb7a70f1f72df0d340c458ecc54d0b12cf83a6ba7a7517d9c16ce89b2e793632c96c89fd305f844c5fd0054227f9c6ba686bad40d34c08345a4b2474c8898bfc184723d296ea8e994ec552c570b3f3877ccb793733ec8ba097564941514d4de3655272654a5294ff29963b59f949b0f3bc820a945502ca528fa5d3f00e6ccf12d8369695cade389f0d1c801c743005a33f2b67d28d9fc2a5296caf85fdc2e72e439e5e0a10294f384aa3648487ca55d84de038fa8069e1ac"}]}}]}}, {{0x9, 0x4, 0xf1, 0x34, 0x1, 0x7e, 0x29, 0x15, 0x80, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xc1, 0x2, 0x1, 0x4, "bbe9fce1a160668d7e"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x4, 0xb9, "d4d7", "f366db"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x101, 0x7, 0x7, "10266f4906"}]}], [{{0x9, 0x5, 0x7, 0x3, 0x40, 0x1, 0xb, 0x41, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0xa, 0x9}, @generic={0xcf, 0x24, "58ae33351dbcb0e1ea6dade286f16cc4e067e1973e2b8af162e33e0ddb6801222379176163913ea6683c05c1e2fe807ae03439e1e202328b618bbbb85a0b2323d7dbc539c35783cdc73ad590413bfc05a168ad196c503822180b9d4c245bb4947a515ac32b65e8fd32b44f29dbb0711e97f1e6c42c73d878ff65c5537baf9886ada5e493140271b07beebc9ba0a7f0514e28ad0bf87a58ebf7f6f92010ec84718ae050adb100508f0fee78b634764ad18f445aa351b3b2e520e284392b41b321923d364edcb3b2a802fcff3627"}]}}]}}, {{0x9, 0x4, 0xd9, 0x7, 0xf, 0xff, 0x4, 0x33, 0x8b, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "203d1871c6"}, {0x5, 0x24, 0x0, 0x21b}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x200, 0x0, 0xf6}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x800, 0x19}]}], [{{0x9, 0x5, 0x1, 0x1, 0x8, 0x5, 0xb, 0x9, [@generic={0xb3, 0xf, "529a843477025c219de5b4020bfedfa5e26f1b3b8da912739a2ae4fc114dd43c38fe78f8a4f0453f9827127d29fff3bfe124e763ee0a1269e1394debc3dfb5bcf5fcf7ee7cab221c63e94d1dd187e666e69f64fdf5af44fba7f3584ebac52fe4b6c51164c41d4907453a5b13900f7427612d66822bf4935ec52af001593e8ec48e940697a040662bd843402228235582f9cbb453d47708c1522bb903913b393170f72567ecb877207e6707b4a408deb6f7"}, @generic={0x65, 0x22, "2320aa1a2262fc35e5b8f9dbcdfd78c0fff7f743224e6880a066ecc4fe89a134007e20a4b69ff9583b4167d181dde14c4c1aa192b7bbaa869c0fe82caf80fb627611e067cd4b83df2401d92fc8390b5732633986b90b0685a26b5a953b369b03b4791e"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x5, 0xc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x0, 0x10, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x6}, @generic={0x88, 0x31, "3fccf02bbfefbaafd0fa668cdfb7c585f2f77deecb61f3e38961de7bf09fc0d8b06e199f78f4381592be06a5c7e5d4483b0d82d65796f5ecb2a657d8366cabc0eedffdf92b39ab65b48c9ecf7c199f6d0086a06a27139a2b64efc776c311c91c42a3231584cd2d73d7f8c3f763d42c1756940ad3868624dc504c434c216942d30e28dddf2c7f"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x9aedd51deebc17c3, 0x8, 0x84, 0x8, [@generic={0xb, 0x9, "c01e219076aa779324"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xe, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x4, 0x95, 0x9, [@generic={0xc6, 0x7, "cb8ad566098099ebd63c862622c73f27efe0b4bc09e0f5a874b20903ac3df4eb6d28f2da68a7003872d7b1d583b1403b5d70d7ac12ecc6233d1b535c01e7ad5753225190a72f53b15a6db94ed35cd4e7ecdeb0ca413cc00b2bc928d60b2acf0ea87c1c004b2175b72b7ea1a887d98532fb45fd37404ccf28d5d770a19e2f305f8b5b15c007f804709c2c698ae2bcb898c0486c35a7d8e8ed7d387a7a7f9769cf857e7fb9e957af7de30ccf9fb57f18e520fbc03fe383ea572fff3907395991b4f0d6a190"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x24b}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x4, 0xf, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x6, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x6, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x9, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7, 0x4}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x1, 0x6, 0x0, [@generic={0x83, 0x22, "4e0c61ca84ae5000b6f87eff05b254f861a2373823e1eb8faf0c2e54f373ea3efb9a76ed751c5089ff41d3b1c3db17a7b9acdcd0db529d890d9847dc3ee98da1706d98c75fec7599145396a6afaf97e06edad697de4aeeab1f17948b31ecec9ecfee310704674ba8432d4f64d82fa55ec2c0dc3d958fe03512f85d27a18c0e11af"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x7}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x1, 0x3, 0xfa, [@generic={0x9d, 0x21, "901723c097f73f9b6a8ece401403aaeb4388e4a76b84bc038121222d34a1b2143ff3dd52ff9af2c3b9700d0c9c52c5385628c69a217119218603dd4e5bf6b885368c01a512b9867634beaa03c27ee11d3437a2f450ee30e658095a1a735bf06613d4658c6ccd4c68a4ef9c5fa89117e487f425f096d0206810592f439401fe682ac0dcabf25208257e68d7ff2871255bc4c8c798f3aef2a507877c"}, @generic={0x58, 0x21, "ab9a9e5b937054ac784ce4b2277c8b93a0845b055e9d2012239c4a6a66345c702363b85dcda6d00acb6957ddb1b5d3991010d585881ada9b377f2db5324f91b2c4f979d95bb993a0cfa54f79a9edaaee06496f3dbe28"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0xf, 0xee, 0x5, [@generic={0x6, 0x4, "ab941601"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x0, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xd, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x9, 0xf7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x1}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x0, 0x0, 0x1, 0xff, 0x10}, 0xe3, &(0x7f0000000340)={0x5, 0xf, 0xe3, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0xc, 0x1, 0x4, 0x0, 0x800, [0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xde, 0x30, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x1, 0x7}, @generic={0xbd, 0x10, 0xb, "d5df74f506e66c72085245a3de3aa06bd3e0b3ca30b2ab86a89a200862e2f65048297cb3fd84c6141e5940a50d5d00ac59323ca89460fcf80ace7fa6910fd09329b5ececd43bc7dd588a883589b5947493b2bec93dc706c991fe79ff27ad2c39087e0539e930fa86b24f7984c27028ce2b061d3ae23eb34aedac323fa4902ac9be220713bba060b496d00d81e4e1089336893e41adb4bc9cca30a3ac1acafc1088416f0bd9763fcaad01c39363cc71219db93644939695b4eb3b"}]}, 0x1, [{0x1e, &(0x7f00000000c0)=@string={0x1e, 0x3, "7751303f9cb0528f1f9a50506ce5ef3d20452a724c06e89566d0d555"}}]}) syz_usb_disconnect(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.304857427s ago: executing program 3 (id=199): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x52c, &(0x7f0000000880)="$eJzs3dFrLFcZAPBvJtnb5N7UpOqDFqzFVm6qZpM03jb4UBVEnwpqxddrTDYhZJO9JBt7E4pN8Q8QRLTgiz75IvgHCNIX30Uo6ItPoqJoe6sPCm1HZnb23pvNbpJ73WQg+f3gZOfMzM73nQ179pydYSeAS+vJiJiOiJGIeCYiJsv1aVnioFPy/d6588pyXpLIspfeSiIp13WP9Uj5eK182lhEfP0rEd9Ojsbd2dvfWGo2G9tlfba9mbybZfsz65tLa421xtbCwvxzi88v3licG0o7pyLihS/99Uff//mXX/j1Z17+082/T383T+u/WfZq9LRjmDpNrxWvRddoRGyfRbCKjBYt7LhRcS4AABwvH+9/MCI+UYz/J2OkGM0BAAAAF0n2+Yl4N4nIAAAAgAsrjYiJSNJ6eb3vRKRpvd65hvfDcTVttnban15t7W6t5NsipqKWrq43G3PltQNTUUvy+nx5jW23/mxPfSEiHouIH06OF/X6cqu5UvWXHwAAAHBJXOuZ//97sjP/LxxUnBwAAAAwPFNVJwAAAACcOfN/AAAAuPjM/wEAAOBC++qLL+Yl697/euWfsbvR+s7MSmNno765u1xfbm3fqq+1WmvFb/ZtnnS8Zqt167OxtXt7tt3Yac/u7O3f3GztbrVvrh+6BTYAAABwjh77+Bt/SCLi4HPjRcldKbfVIrKR+3cerSJD4KykD7LzX84uD+D83f/5Pl5hHsD5M6SHy6tWdQJA5ZITtg+8eOe3w88FAAA4G9c/Ovj8/1urlaYGnLHy/H9y0vwfuHhGqk4AqEzn/N/7WUfV2QDnqXbcCMCkAC68dDjn/0+4lDDRoQAAQMUmipKk9XIeMBFpWq9HPFrcFqCWrK43G3MR8YGI+P1k7ZG8Pl88MzGaBwAAAAAAAAAAAAAAAAAAAAAAAIBTyrIksocx88eHehoAAABw/iLSv3XvzHV98umJ3u8HriT/mSweI+Lln7z049tL7fb2fL7+7bvr26+X65+t4hsMAAAAoFd3nt6dxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAML1z55XlbjnPuP/4YkRM9Ys/GmPF41jUIuLqv5IYve95SUSMDCH+wWsR8ZF+8ZM8rZgqszgU/0pEGhHjw4rf9/U/Jn504l8bQny4zN7I+58v9Hv/pfFk8dj//Tdalv/X4P4vvdv/jQzo/x4ddNDa4erjb/5ydmD81yIeH+3f/3TjJ/nx+sR/6pRt/NY39vcHbct+FnG9X/+XHI412968Nbuztz+zvrm01lhrbC0szD+3+PzijcW52dX1ZqP82zfGDz72q/fv1d470v6rx/S/RfsHvP5Pn7L97715+86HOos9/5moxU+zbPqp/v//wqeOxu9+9n2y3Cuv569h+vo3+8Z/4he/e2JQbnn7Vwa0f+yE9k+fsv3PfO17fz7lrgDAOdjZ299YajYb2xYsPMBCPu6sPI0kkji6aan6xDoLr5bvsaVm9902pCP/ppwc3V3zdnn8ISZfQV8EAACcrXuD/t4tSTUJAQAAAAAAAAAAAAAAAAAAwCV04s+ADdqURsQpf06sN+ZBNU0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjW/wIAAP//ngbSgw==") execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}]}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2800000000000000001000085100000000000000002000000000000ff00000100"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) unshare(0x68040200) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) ioctl$EVIOCRMFF(r6, 0x40085503, 0x0) socket(0x10, 0x803, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x138, 0x11, 0x148, 0x0, 0x0, 0x238, 0x2a8, 0x2a8, 0x238, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x50}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 3.190718626s ago: executing program 0 (id=201): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd7, 0x3, 0x5, 0x0, 0x20000008, 0x4, 0x0, 0x0, 0x0, 0x200000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}}, 0x10000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_open_procfs(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000000201030000000000000000000000000706001240000400000c000d0708000200ac141439080015"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) mq_unlink(&(0x7f0000000340)='eth0\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r10}, 0x10) 2.961441653s ago: executing program 0 (id=208): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000500)={[{@data_err_abort}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000740)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000000c0)=0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000003140)=ANY=[@ANYBLOB="18fdff00008be31ca40003b09d850099b4b4ab853315d0521fe8b7e9a1ef8d5e5b96998dfe5b6e176fd0ec7a27be9abe94ea28bd2d086b960b23f3d825e4228a5c45df611d4d336897f0bc15a45349a8ed0828a1eaf96557784ad21472d7f6c53a333db9d35f3bba5bdcfe9e13e856c53330fdf4a61d1670b7d1938bd4a298625f51b6de8d7ae288bc68223049e1381737b9efa05d0b9d37a832dd950c7b0987c60b5fd74ec44459a3ac7b02"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000301010100000017008700000a000080"], 0x30}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000420029020000000a0015000000000000"], 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp={0x27, 0x0}, 0x80, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYRES32=r7], 0x0) sendmmsg(r2, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)="961eaf46", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="c264d7619ac9c383b01f3ea2ed6af9dd84523003d70c83984affcfd1fc3d2324fd211d5f893b41c175ca178e8ca23b8f1c0b4264646ff1a7ed0ccbc04c48816e7567a75acc63ef106470d79699c763ffd5b575a3e80c66dc710610118f96c16e8067f5b30ba06595e737ad3aaaaac123e72ff909708ec3527520abb1dc4e84b77cbe199117d25e9c86f5f01553c99bc3cf714c716472f04f2d16ff130893c2c79a60463bf121e649adb053ed1328d526", 0xb0}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f00000003c0)="4f50bf773f0802fd1dc1b7766fd352ceac5aff53b134ae2a8849f84eced2fdfc7ab5c5e55a4445d42726dd9397bf376e1c0f3b319dfa5c9c33946c8db5a60d0b364f38edc26666b960ac7ae2795d0da0def3b124391a0f68b8a97f47b6077495fb314c7ee2f39ecbf592d1f420517180b4b43784578b36821f75c8626b5ec42d893cb0dae34b8e045ea3262e4fe800e570349bdbd7be903970f82b9c31f6d41c38ce0a75063f3d9106e2f0392859e99c280f9c82661720d251140ee831b9ab4651eb24ad9acb3e10f20604c411d97ea43cad82e098ef8d73556d84a3d729b101ec", 0xe1}, {&(0x7f0000000700)="a15ac90a020b3b443f075470291a0746c39111c4b0ee1d07f925435c129e2c95e17b757f2639fcf12da670106d4b7597459366c43de1a61f922b4b3e83161cb185965d22b1936b0ad33357d26264b640cb031b36fd3f93c825b1ff9e8e15a458e56b31b7fbb6f7d63b520ad166426208a212efda89edd4a1daa9007761c511a536e2def470de3413a9044c8bc0f0e6f9250a35060153be0d4213a7952d2b2b5aec8c3ad54608428bac89e9d9f87692228c16eecbb6e87e5b909ba77362d07cc2520f8cf10ce0875cb58f6a", 0xcb}, {&(0x7f0000001940)="a80fe66fe0c895f2abb3a5b38556856ac5a98112415fe2acbadd34af7153d6825600513c384c6d1b002722216af155f160ea1851260f25e7450c6b092512a596ec47951ad15231049a92244026b3df3481a72feea70125d3c286acc1466f15f70fcc1cf445b087ca47a831217c6adee643203a38c19eb7a78e4845211a3c44a69f24ed2fe4a1f788fbe32aec948865f049fcc147d52ed0fca48f9ee97ce09e0f9f350eed1e705c9ef774c146335a2126baa211a4100d9b416343752c77acd26118c2dae40c673e682d03e5a601c74086d5413d6adf5d2cdee756cc7982c4a5685dc85548286e69b296f7", 0xea}, {&(0x7f0000000240)="1f283164f156f3cf4e7830caf7b99d3b866613f4b5dd6278459b8b283d632a25655d92698a03843bd65a67e6cc051734390abdef1d34b79461d5aa0e263bf8ddfb90875d394be04197ef9449500f2307db26f1cd38a8a88b97075084760340265de1af0cf386d3acd834213dc3ec0edd4fc37bb7e7bf50c1f91534bcf33f5808985a3aa5a9985a0538b68c8f5982b0c6b91760c6", 0x94}], 0x6}}, {{&(0x7f0000000580)=@nfc={0x27, r7, 0x1, 0x55fdaffeb68ee8b4}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001a40)="50e659447a4104dee51ddfe86b65f88f327922a58ee29bbf368a54da6a4a5a43fc26f543933cb115d33e3720ea71f81074bf5edb12a1e16fe792e2dfd224a896b68038cbb01ed0ab1d130087e7d70c8ed29bff5347be17e15b35b195c00f6d0b9b0d2da84c62ee9f1743a2f3b6e0f74ed3d3cf66f712a6fe332d3afd572d5d0e17b02be64ed8d3650de2694579a01509ea4881684740eba990d93a9c2708f5a4a2dedeb98e1a497a3509d4a04e29b71ed7bdc33d757d5c77be3055b7c5f02699a0b11a73e9728fa8697328517aa5d917af5c4ffd8109195db992632fa0a379503c0a8b8aed7f27b39e328d4f", 0xec}, {&(0x7f0000000800)="0cca38a0dc04179806c011dd7f9b60f6050bcc5a1598db2bfd8f77d972177fafa568e26ceb00d3a6f3a4c11f8babfe520dbd8b9b8f71e5efc23b93df79a38a86f5c63bb2f54710b4b941a20666d259d7b213727316f1de0403774be0cc", 0x5d}, {&(0x7f0000000600)='0x0, &(0x7f0000004140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) io_uring_enter(r3, 0x11d30, 0x0, 0x0, 0x0, 0x0) 2.200869428s ago: executing program 1 (id=222): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) signalfd(0xffffffffffffffff, &(0x7f0000002340), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) shutdown(r0, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=") unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_rtt_tx\x00', r1, 0x0, 0x7a8}, 0x18) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x547, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0xd3d19000) madvise(&(0x7f0000a99000/0x4000)=nil, 0x4000, 0x15) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000a4eaa23d7aacca6e88ba0000000000bc000000ff00c7ac928a000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000080000b802424a785b9b97adbd19b3d286000000000000000000009a5d15f1000032c07c3dd26996a64e0116ee6ddb1939b254f26fe9f718393e318b182673e657b0aee7620416274736246e94a08557c8153dec8ad41fe33c285055537fb3140b90728b91a485a2a742af161a5e8090f27adb5a51f22359d60f47c45783e40bf1f7a1bc1d1f32ca1bd2244f2ef7f6d4907fb0b21af8bb70af89cadd27f4f902992562d2dbddb713bfa3537eb9733091c28690a2da9ac590", @ANYRES32=r7, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.928015758s ago: executing program 1 (id=226): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1020000, &(0x7f0000000540), 0x1, 0x4b0, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='big_key\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 1.870303233s ago: executing program 3 (id=227): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x5}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) (async) r3 = fsopen(&(0x7f0000000300)='bpf\x00', 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x4000, 0x4) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x728, 0x588, 0x0, 0x378, 0x0, 0x378, 0x658, 0x658, 0x658, 0x658, 0x658, 0x6, &(0x7f0000000240), {[{{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d5], 0xbb3, 0x3, 0x2}}, @common=@rt={{0x138}, {0x1, [0x200, 0x8], 0x9, 0x10, 0x7fa7aad92c914104, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, @local, @empty, @private0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x23}, @mcast1, @local, @mcast2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}], 0xb}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x2, 0x0, [0x8, 0xc, 0xfff, 0x611f, 0x1, 0x5, 0x8, 0xfff, 0x0, 0x6, 0x60, 0xd, 0x7d, 0x40, 0xfff], 0x10}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0x0, 0x0, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xff000000, 0xff000000], 'ip6gretap0\x00', 'bridge0\x00', {}, {0xff}, 0x4, 0x81, 0x6, 0x44}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@remote, 0x14, 0x23, 0x141}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0xffffffff, 0xffffffff, 0xff], [0xffffffff, 0x0, 0x0, 0xffffff00], 'veth0_to_hsr\x00', 'caif0\x00', {}, {}, 0x3b, 0x10, 0x0, 0x29}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x788) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000002f40), 0xffffffffffffffff) (async, rerun: 64) sendmsg$FOU_CMD_GET(r6, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="6ac85100ad029c121ab2136a0310abb7908ff239b03f5cf8489705c9a175989ec6c30600", @ANYBLOB="74da71ffbe055ccbed0233897f3284d25a9cdc3cc768355895bb7e0e08d547fd9be16d0b793d98e68e1006ec5efa348bf022c231d9822f6e9ae34d9517ba7ab8a856b05e59daa7f2b086fa998024546778a1db386cfecbbce104c37dde3185e64eced1183e35fe534b78f8082d841df560c0f8afff555487a11d5f4fa50d2d0c13dbf38f9d47b266907c3ee6a8f95f4e8fec53fd4ab662979b55ceea77101682fe", @ANYRESOCT=r4, @ANYBLOB="06000a004e240000"], 0x2c}, 0x1, 0x0, 0x0, 0xc004844}, 0x0) (async, rerun: 64) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000000280)="87", 0x1, 0x800, &(0x7f0000000380)={0xa, 0x4e24, 0x2, @remote, 0x5}, 0x1c) (async) setsockopt(r7, 0x1000, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x68, 0x0, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:utempter_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev}]}, 0x68}, 0x2, 0x34005}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x50}}, 0x45) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000100)={0x2, 0x1}) r10 = fsmount(r3, 0x0, 0x0) (async) r11 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x4, r11, 0x0, 0x0, 0x0) r12 = add_key$fscrypt_provisioning(&(0x7f0000000640), &(0x7f0000001640)={'syz', 0x2}, &(0x7f0000001680)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r11, &(0x7f0000000600)=[{&(0x7f00000004c0)="dd5bc1b1841185972635d595c626bf9046b0681e4967adb6a87c3eb7039596bba3bc24b2fd453f667778c0d933d84026aec5431bfda4706757ad1cd5505823843f5ef2dc6757f21ad55a6d70956417f3741c5cc3384ee18cf21e828f628305c5ca81013782985258", 0x68}, {&(0x7f0000000580)="3014fa81facce9fef390cbde2a751d2846345cd481a0c56ca8eb0c814e68031738329ed2f793710717c0425453c8b878ca43a01ff08e14bd2c3e4e081fe9cd99527b7585bd49bcecd7e53199e8a496b06fd64dc0ba76", 0x56}, {&(0x7f0000001580)="9879037b30e3f46c3274a32fab24f7b3a3ca55f04c37eeb3b2f55fc6fa93cfd149fff060019a4a391d895a33bfa04925e1420d07556513e1c7af76ccef3930cb15127ddc1f3558ad63f42331a0fdeb4771668888d50361983075138fa92ffc1c31ebd09d9b57e0acbfc0c15b20e0e0e6bf6c00a60c94a42908dda3fc84e7a96738971fad290ca91bdab961dd5aa874b2cd7fc11165ae3264058dd68f83f33d4f4146f0", 0xa3}], 0x3, r12) fchdir(r10) (async) mkdir(&(0x7f0000000000)='./control\x00', 0x0) (async) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) 1.765636551s ago: executing program 1 (id=228): r0 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x7d, [@multicast2, @multicast2, @remote, @loopback]}, @lsrr={0x83, 0x3}]}}}}}}, 0x0) unshare(0x6020400) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) modify_ldt$write(0x1, 0xfffffffffffffffd, 0x0) setsockopt(r0, 0x8cc, 0x0, &(0x7f0000000080)="3c3886fce623411c58ca33f31bc3a7198469859c754fdf2f5a7a1ae4c9573502e049d370b9f2d719e00be64b5e9501a0839c69", 0x33) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r3 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x20800, 0x54, 0x6}, 0x18) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="be", 0x1}, {0x0}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280000000c0000025bbbdfa41ccf", @ANYRES32=r6], 0x20, 0x2404e804}, 0xc6) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB="fe0106000001020003000f004c0d06008514183fa206499cd1f1b5725c97ad95e3ccf965da8a5d38f11628288aa8b348f20280e19fa1dab2dd54a84bbbddc66b2982cb9b10244fda66bd85199666a2339663fac21b03a75ff2aa2f6da2c63819eeb8cb2f6e33cf423523555a2907bb15951094906e1ab57d882e01f4f7326da00a53cc64ca248eaa46294f50738b6d2f473cb31f6d2b4626346840"], 0x14) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$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") socket(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r8, &(0x7f0000000000)={0x24, @long={0x3, 0xfffe, {0x124a6333d1185a5c}}}, 0x14) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="5140ebbeb00722b8298e52fb1d2c03b9c3ef5682a04f5ce120814694d63cf03bebcf4bb1f1b6eee7fc4a0204a38791fd113ce227693d68af0609b1db194274dc80cca2cb4205e06d6754f5e8f8710a4b130f842b85ee759a49330545d3aad490f0b44706e361c079238f47b542fb1757f0ca44f5d1e42e7295bdee50938803614619abedcd86386fd0a7640890e653f1b2dbdea3c930613622cf417255b06c3ee7526d0152b9c2361aae77d7169863f1f6d3e394e221662baeda3c34908becabc9", @ANYRESHEX=r10, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="05898d1a5efc8864a91f291e406ba74095ed2400"/35, @ANYRES16=r12, @ANYBLOB="010000000000000000001c000000180001801400020076657468315f746f5f626f6e64000000"], 0x2c}}, 0x4000000) 1.704633965s ago: executing program 3 (id=229): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2, 0x0, 0x10000000000}, 0x18) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_NAME={0x6, 0x1, '-\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffdfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd77, 0x4, @perf_config_ext, 0x0, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r13, &(0x7f0000000280), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x4}, {0xfffffffe, 0x7}], 0xee01}, 0x18, 0x0) ioctl$FIONREAD(r13, 0x541b, &(0x7f0000000080)) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r14, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033200fe08000e7f0061cd915a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) epoll_create1(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0), 0x1000000}, 0x20) 1.172844784s ago: executing program 2 (id=237): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{0x800, 0x34, 0x9, 0x8000}, {0x5, 0x3, 0x0, 0x9}, {0x65, 0x7, 0x3, 0x5}, {0x6, 0x3, 0x7, 0xd7}, {0x0, 0xf1, 0x1, 0x1}, {0x1, 0x2, 0x7, 0xb6}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r4 = socket$inet_sctp(0x2, 0x0, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x3}, 0x8) 852.911997ms ago: executing program 1 (id=242): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 690.43544ms ago: executing program 1 (id=245): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x5, 0x6}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x1) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000000)={0x2a, 0x3}, 0xc) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000340)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000480)={'\x00', 0x3, 0x6, 0x6d, 0x1, 0x9, r8}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$qrtr(r7, &(0x7f00000000c0)={0x2a, 0x1, 0xf0ff}, 0xc) 469.041586ms ago: executing program 4 (id=249): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = epoll_create1(0x0) r2 = mq_open(&(0x7f0000000280)='$.+]q-{\x00', 0x40, 0x100, &(0x7f0000000040)={0xb, 0x5, 0x20000000000, 0x30e2}) mq_timedsend(r2, &(0x7f00000000c0)="74966f2472e4459d8776", 0xa, 0x9, &(0x7f0000000140)) pipe2$9p(&(0x7f00000001c0), 0x82000) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0xee01, 0x0, 0x1000) 468.742326ms ago: executing program 4 (id=250): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x2004, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x1000000, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 325.202596ms ago: executing program 2 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r3) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x8, 0x800000, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80a) 301.805958ms ago: executing program 2 (id=252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) (rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='svcrdma_rq_post_err\x00', r3}, 0x18) (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r4 = syz_open_pts(r0, 0x141601) write(r4, &(0x7f0000000440)="63bc362cd7", 0x5) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00005200060005000100000008", @ANYRES32=r5], 0x2c}}, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340), 0xc0000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1e00000006000000000000000700000000000000", @ANYRES32=r1, @ANYBLOB="71c800"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05000000050000000000000000000000000000000100000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) (async) msgctl$IPC_SET(0x0, 0x1, 0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) munlockall() (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800e00010069703665727370616e0000001800028008000d00030000000400120008000c0003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 232.370853ms ago: executing program 4 (id=253): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000100000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_pidfd_open(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sigaltstack(0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rmdir(&(0x7f00000000c0)='./file0\x00') 232.198933ms ago: executing program 2 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = memfd_secret(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000040000000000000000800000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa1000000000000ffbfa400000000000007840000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000ffffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x24f5, &(0x7f0000000780)={0x0, 0x100c297, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000004140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) io_uring_enter(r3, 0x11d30, 0x0, 0x0, 0x0, 0x0) 214.607924ms ago: executing program 2 (id=255): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 181.989457ms ago: executing program 4 (id=256): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) memfd_secret(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x70, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x70}}, 0x200000c4) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) 84.906994ms ago: executing program 4 (id=257): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff01000000"], 0x5b0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 20.975278ms ago: executing program 4 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/image_size', 0x2, 0x214) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x400c080) 0s ago: executing program 2 (id=259): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x70, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf251b00000010002e800c0004000202aaaaaaaaaaaa0c00060003000000000000000c00060003000000030000000c000600020000000000000008000300", @ANYRES32=r3, @ANYBLOB="10002e800c"], 0x70}, 0x1, 0x0, 0x0, 0x54}, 0x80) kernel console output (not intermixed with test programs): [ 19.155441][ T29] audit: type=1400 audit(1739576499.222:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 25.438719][ T29] audit: type=1400 audit(1739576505.502:82): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.439520][ T3288] cgroup: Unknown subsys name 'net' [ 25.461606][ T29] audit: type=1400 audit(1739576505.502:83): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.488961][ T29] audit: type=1400 audit(1739576505.532:84): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.615462][ T3288] cgroup: Unknown subsys name 'cpuset' [ 25.621474][ T3288] cgroup: Unknown subsys name 'rlimit' [ 25.750011][ T29] audit: type=1400 audit(1739576505.812:85): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.773461][ T29] audit: type=1400 audit(1739576505.812:86): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.793944][ T29] audit: type=1400 audit(1739576505.812:87): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.814380][ T29] audit: type=1400 audit(1739576505.812:88): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.834730][ T29] audit: type=1400 audit(1739576505.812:89): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.840232][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.859514][ T29] audit: type=1400 audit(1739576505.812:90): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.891312][ T29] audit: type=1400 audit(1739576505.942:91): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.922353][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.114908][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 27.158674][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 27.181943][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 27.210143][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 27.268242][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 27.283058][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.290245][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.297480][ T3298] bridge_slave_0: entered allmulticast mode [ 27.303841][ T3298] bridge_slave_0: entered promiscuous mode [ 27.312691][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.319826][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.326942][ T3298] bridge_slave_1: entered allmulticast mode [ 27.333305][ T3298] bridge_slave_1: entered promiscuous mode [ 27.369250][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.376335][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.383516][ T3302] bridge_slave_0: entered allmulticast mode [ 27.390668][ T3302] bridge_slave_0: entered promiscuous mode [ 27.410948][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.424333][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.431472][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.438786][ T3302] bridge_slave_1: entered allmulticast mode [ 27.445299][ T3302] bridge_slave_1: entered promiscuous mode [ 27.457773][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.464878][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.472160][ T3303] bridge_slave_0: entered allmulticast mode [ 27.478665][ T3303] bridge_slave_0: entered promiscuous mode [ 27.485300][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.492324][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.499552][ T3303] bridge_slave_1: entered allmulticast mode [ 27.505878][ T3303] bridge_slave_1: entered promiscuous mode [ 27.512740][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.526485][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.533621][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.540941][ T3297] bridge_slave_0: entered allmulticast mode [ 27.547244][ T3297] bridge_slave_0: entered promiscuous mode [ 27.575850][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.584992][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.592103][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.600303][ T3297] bridge_slave_1: entered allmulticast mode [ 27.606991][ T3297] bridge_slave_1: entered promiscuous mode [ 27.613157][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.620331][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.627506][ T3300] bridge_slave_0: entered allmulticast mode [ 27.634050][ T3300] bridge_slave_0: entered promiscuous mode [ 27.649554][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.666609][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.673704][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.680837][ T3300] bridge_slave_1: entered allmulticast mode [ 27.687366][ T3300] bridge_slave_1: entered promiscuous mode [ 27.694024][ T3298] team0: Port device team_slave_0 added [ 27.700653][ T3298] team0: Port device team_slave_1 added [ 27.707702][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.737911][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.747589][ T3302] team0: Port device team_slave_0 added [ 27.753519][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.760501][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.786426][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.798343][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.812281][ T3302] team0: Port device team_slave_1 added [ 27.821763][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.828874][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.854808][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.866268][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.876316][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.904774][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.914416][ T3303] team0: Port device team_slave_0 added [ 27.925638][ T3297] team0: Port device team_slave_0 added [ 27.932443][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.939432][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.965403][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.980020][ T3303] team0: Port device team_slave_1 added [ 27.986264][ T3297] team0: Port device team_slave_1 added [ 28.003656][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.010651][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.036710][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.059096][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.066101][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.092045][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.105164][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.112156][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.138240][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.149601][ T3300] team0: Port device team_slave_0 added [ 28.156326][ T3300] team0: Port device team_slave_1 added [ 28.172824][ T3298] hsr_slave_0: entered promiscuous mode [ 28.178918][ T3298] hsr_slave_1: entered promiscuous mode [ 28.197756][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.204792][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.231801][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.249028][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.256008][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.282060][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.307183][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.314145][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.340193][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.353279][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.360314][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.386471][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.415070][ T3302] hsr_slave_0: entered promiscuous mode [ 28.421259][ T3302] hsr_slave_1: entered promiscuous mode [ 28.427968][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.435590][ T3302] Cannot create hsr debugfs directory [ 28.450193][ T3303] hsr_slave_0: entered promiscuous mode [ 28.456312][ T3303] hsr_slave_1: entered promiscuous mode [ 28.462090][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.469775][ T3303] Cannot create hsr debugfs directory [ 28.509334][ T3297] hsr_slave_0: entered promiscuous mode [ 28.515312][ T3297] hsr_slave_1: entered promiscuous mode [ 28.521172][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.528799][ T3297] Cannot create hsr debugfs directory [ 28.540211][ T3300] hsr_slave_0: entered promiscuous mode [ 28.546877][ T3300] hsr_slave_1: entered promiscuous mode [ 28.552591][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.561006][ T3300] Cannot create hsr debugfs directory [ 28.692113][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.707587][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.716047][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.726723][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.761262][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.770267][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.778821][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.787411][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.820303][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.829576][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.840500][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.851936][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.870719][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.879546][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.888802][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.905918][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.943235][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.952680][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.966389][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.974827][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.983804][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.020615][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.032949][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.048586][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.057721][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.064862][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.081994][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.094576][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.101724][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.111829][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.145626][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.156140][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.163234][ T1572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.172579][ T1572] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.179889][ T1572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.195425][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.202498][ T1572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.217755][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.228352][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.243770][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.253290][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.260422][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.280008][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.303089][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.314602][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.321690][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.352062][ T1572] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.359149][ T1572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.372202][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.391741][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.398831][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.407666][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.414711][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.461062][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.472654][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.538849][ T3298] veth0_vlan: entered promiscuous mode [ 29.573331][ T3303] veth0_vlan: entered promiscuous mode [ 29.585970][ T3303] veth1_vlan: entered promiscuous mode [ 29.595808][ T3298] veth1_vlan: entered promiscuous mode [ 29.609990][ T3303] veth0_macvtap: entered promiscuous mode [ 29.618007][ T3303] veth1_macvtap: entered promiscuous mode [ 29.634522][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.647369][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.661911][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.677478][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.685588][ T3298] veth0_macvtap: entered promiscuous mode [ 29.695818][ T3298] veth1_macvtap: entered promiscuous mode [ 29.703212][ T3303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.712026][ T3303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.720870][ T3303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.729637][ T3303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.775660][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.786239][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.800740][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.809316][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.819801][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.832068][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.845232][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.864317][ T3298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.873140][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.881874][ T3298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.890642][ T3298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.937312][ T3297] veth0_vlan: entered promiscuous mode [ 29.945148][ T3297] veth1_vlan: entered promiscuous mode [ 29.951609][ T3302] veth0_vlan: entered promiscuous mode [ 29.965538][ T3300] veth0_vlan: entered promiscuous mode [ 29.987168][ T3302] veth1_vlan: entered promiscuous mode [ 29.996875][ T3297] veth0_macvtap: entered promiscuous mode [ 30.017899][ T3297] veth1_macvtap: entered promiscuous mode [ 30.025464][ T3300] veth1_vlan: entered promiscuous mode [ 30.056590][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.067178][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.077039][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.087532][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.105480][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.116195][ T3302] veth0_macvtap: entered promiscuous mode [ 30.123479][ T3302] veth1_macvtap: entered promiscuous mode [ 30.138472][ T3445] capability: warning: `syz.2.7' uses 32-bit capabilities (legacy support in use) [ 30.143635][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.158300][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.168204][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.178839][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.192919][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.205922][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.216421][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.226358][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.236844][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.246655][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.257155][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.288343][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.301003][ T3300] veth0_macvtap: entered promiscuous mode [ 30.319023][ T3297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.327865][ T3297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.336767][ T3297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.345502][ T3297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.358205][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.369287][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.380039][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.390646][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.400482][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.411118][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.423090][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.431951][ T3300] veth1_macvtap: entered promiscuous mode [ 30.459093][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.467876][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.476648][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.485453][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.501439][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.511967][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.521881][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.532743][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.542758][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.553408][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.553799][ T3459] mmap: syz.1.12 (3459) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.563393][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.585947][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.597193][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.610196][ T3459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 30.629665][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 30.629677][ T29] audit: type=1400 audit(1739576510.692:150): avc: denied { create } for pid=3457 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 30.629939][ T3458] capability: warning: `syz.1.12' uses deprecated v2 capabilities in a way that may be insecure [ 30.667936][ T29] audit: type=1400 audit(1739576510.732:151): avc: denied { setopt } for pid=3457 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 30.667997][ T3458] syz.1.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 30.702196][ T3458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=3458 comm=syz.1.12 [ 30.707303][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.725457][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.735307][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.745876][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.755926][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.766428][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.776695][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.787257][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.807868][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.844831][ T29] audit: type=1400 audit(1739576510.892:152): avc: denied { create } for pid=3462 comm="syz.1.13" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.865527][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.866254][ T29] audit: type=1400 audit(1739576510.892:153): avc: denied { map } for pid=3462 comm="syz.1.13" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.875121][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.898894][ T29] audit: type=1400 audit(1739576510.892:154): avc: denied { read write } for pid=3462 comm="syz.1.13" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.907757][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.907799][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.939105][ T29] audit: type=1400 audit(1739576511.002:155): avc: denied { create } for pid=3464 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.969098][ T29] audit: type=1400 audit(1739576511.002:156): avc: denied { setopt } for pid=3464 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.992078][ T29] audit: type=1400 audit(1739576511.062:157): avc: denied { read } for pid=3464 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.036375][ T29] audit: type=1400 audit(1739576511.082:158): avc: denied { create } for pid=3464 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.056792][ T29] audit: type=1400 audit(1739576511.082:159): avc: denied { write } for pid=3464 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.097539][ C0] hrtimer: interrupt took 47243 ns [ 31.253650][ T3486] loop2: detected capacity change from 0 to 512 [ 31.286127][ T3486] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.312396][ T3491] netlink: 'syz.0.19': attribute type 11 has an invalid length. [ 31.328965][ T3486] EXT4-fs (loop2): 1 orphan inode deleted [ 31.335349][ T3486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.348766][ T3486] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.348875][ T40] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 31.428941][ T3500] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 31.675214][ T3508] FAULT_INJECTION: forcing a failure. [ 31.675214][ T3508] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.688486][ T3508] CPU: 1 UID: 0 PID: 3508 Comm: syz.0.26 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 31.688530][ T3508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 31.688544][ T3508] Call Trace: [ 31.688551][ T3508] [ 31.688559][ T3508] dump_stack_lvl+0xf2/0x150 [ 31.688584][ T3508] dump_stack+0x15/0x1a [ 31.688604][ T3508] should_fail_ex+0x24a/0x260 [ 31.688630][ T3508] should_fail+0xb/0x10 [ 31.688659][ T3508] should_fail_usercopy+0x1a/0x20 [ 31.688686][ T3508] _copy_from_user+0x1c/0xa0 [ 31.688781][ T3508] __se_sys_mount+0x115/0x2d0 [ 31.688865][ T3508] ? __schedule+0x75b/0x990 [ 31.688926][ T3508] __x64_sys_mount+0x67/0x80 [ 31.688952][ T3508] x64_sys_call+0x2c84/0x2dc0 [ 31.688974][ T3508] do_syscall_64+0xc9/0x1c0 [ 31.688994][ T3508] ? clear_bhb_loop+0x55/0xb0 [ 31.689071][ T3508] ? clear_bhb_loop+0x55/0xb0 [ 31.689104][ T3508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.689132][ T3508] RIP: 0033:0x7f45c56fcde9 [ 31.689151][ T3508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.689169][ T3508] RSP: 002b:00007f45c3d61038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 31.689187][ T3508] RAX: ffffffffffffffda RBX: 00007f45c5915fa0 RCX: 00007f45c56fcde9 [ 31.689234][ T3508] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000000 [ 31.689243][ T3508] RBP: 00007f45c3d61090 R08: 0000400000002c40 R09: 0000000000000000 [ 31.689252][ T3508] R10: 0000000002970826 R11: 0000000000000246 R12: 0000000000000001 [ 31.689262][ T3508] R13: 0000000000000000 R14: 00007f45c5915fa0 R15: 00007ffd3339a738 [ 31.689318][ T3508] [ 31.703104][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.903646][ T3512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 31.950077][ T3517] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.951237][ T3518] loop4: detected capacity change from 0 to 512 [ 31.994766][ T3518] ext4: Unknown parameter 'euid' [ 32.012480][ T3518] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 32.025375][ T3518] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 32.153264][ T3539] loop1: detected capacity change from 0 to 736 [ 32.193806][ T3539] FAULT_INJECTION: forcing a failure. [ 32.193806][ T3539] name failslab, interval 1, probability 0, space 0, times 0 [ 32.206500][ T3539] CPU: 0 UID: 0 PID: 3539 Comm: syz.1.38 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 32.206577][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 32.206587][ T3539] Call Trace: [ 32.206591][ T3539] [ 32.206597][ T3539] dump_stack_lvl+0xf2/0x150 [ 32.206619][ T3539] dump_stack+0x15/0x1a [ 32.206650][ T3539] should_fail_ex+0x24a/0x260 [ 32.206675][ T3539] should_failslab+0x8f/0xb0 [ 32.206766][ T3539] kmem_cache_alloc_noprof+0x52/0x320 [ 32.206825][ T3539] ? getname_kernel+0x3d/0x1f0 [ 32.206858][ T3539] getname_kernel+0x3d/0x1f0 [ 32.206881][ T3539] kern_path+0x21/0x120 [ 32.207031][ T3539] unix_find_other+0xc9/0x5c0 [ 32.207133][ T3539] ? release_sock+0x117/0x150 [ 32.207217][ T3539] unix_dgram_connect+0x2c3/0x840 [ 32.207245][ T3539] ? __pfx_unix_dgram_connect+0x10/0x10 [ 32.207346][ T3539] __sys_connect+0x18f/0x1b0 [ 32.207375][ T3539] __x64_sys_connect+0x41/0x50 [ 32.207399][ T3539] x64_sys_call+0x22a7/0x2dc0 [ 32.207415][ T3539] do_syscall_64+0xc9/0x1c0 [ 32.207434][ T3539] ? clear_bhb_loop+0x55/0xb0 [ 32.207455][ T3539] ? clear_bhb_loop+0x55/0xb0 [ 32.207498][ T3539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.207517][ T3539] RIP: 0033:0x7f5f612ccde9 [ 32.207529][ T3539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.207542][ T3539] RSP: 002b:00007f5f5f937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 32.207556][ T3539] RAX: ffffffffffffffda RBX: 00007f5f614e5fa0 RCX: 00007f5f612ccde9 [ 32.207580][ T3539] RDX: 0000000000000004 RSI: 000040000057eff8 RDI: 0000000000000004 [ 32.207589][ T3539] RBP: 00007f5f5f937090 R08: 0000000000000000 R09: 0000000000000000 [ 32.207597][ T3539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.207605][ T3539] R13: 0000000000000000 R14: 00007f5f614e5fa0 R15: 00007ffef8119968 [ 32.207655][ T3539] [ 32.219114][ T24] IPVS: starting estimator thread 0... [ 32.244992][ T3541] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 32.303407][ T3549] loop4: detected capacity change from 0 to 1024 [ 32.372071][ T3550] IPVS: using max 2832 ests per chain, 141600 per kthread [ 32.463333][ T3549] ======================================================= [ 32.463333][ T3549] WARNING: The mand mount option has been deprecated and [ 32.463333][ T3549] and is ignored by this kernel. Remove the mand [ 32.463333][ T3549] option from the mount to silence this warning. [ 32.463333][ T3549] ======================================================= [ 32.504750][ T3549] EXT4-fs: inline encryption not supported [ 32.525582][ T3549] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.543098][ T3549] EXT4-fs error (device loop4): ext4_map_blocks:705: inode #3: block 1: comm syz.4.37: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.628630][ T3567] loop3: detected capacity change from 0 to 512 [ 32.654706][ T3549] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.37: Failed to acquire dquot type 0 [ 32.668937][ T3567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.682213][ T3549] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.37: Freeing blocks not in datazone - block = 0, count = 4096 [ 32.683053][ T3567] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.713155][ T3549] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.37: Invalid inode bitmap blk 0 in block_group 0 [ 32.726050][ T3549] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 32.735024][ T50] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.739733][ T3549] EXT4-fs (loop4): 1 orphan inode deleted [ 32.750301][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 32.755356][ T3549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.835961][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.837922][ T3577] loop1: detected capacity change from 0 to 256 [ 32.904373][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.230325][ T3601] FAULT_INJECTION: forcing a failure. [ 33.230325][ T3601] name failslab, interval 1, probability 0, space 0, times 0 [ 33.243061][ T3601] CPU: 1 UID: 0 PID: 3601 Comm: syz.0.57 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 33.243126][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 33.243134][ T3601] Call Trace: [ 33.243142][ T3601] [ 33.243149][ T3601] dump_stack_lvl+0xf2/0x150 [ 33.243175][ T3601] dump_stack+0x15/0x1a [ 33.243190][ T3601] should_fail_ex+0x24a/0x260 [ 33.243269][ T3601] should_failslab+0x8f/0xb0 [ 33.243300][ T3601] kmem_cache_alloc_noprof+0x52/0x320 [ 33.243397][ T3601] ? skb_clone+0x154/0x1f0 [ 33.243419][ T3601] skb_clone+0x154/0x1f0 [ 33.243442][ T3601] packet_rcv_spkt+0xc7/0x3b0 [ 33.243466][ T3601] ? __pfx_packet_rcv_spkt+0x10/0x10 [ 33.243489][ T3601] __netif_receive_skb_core+0x954/0x2350 [ 33.243620][ T3601] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 33.243648][ T3601] ? __list_del_entry_valid_or_report+0x66/0x130 [ 33.243680][ T3601] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 33.243708][ T3601] ? __list_del_entry_valid_or_report+0x66/0x130 [ 33.243733][ T3601] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 33.243890][ T3601] ? get_partial_node+0x2ca/0x310 [ 33.243918][ T3601] __netif_receive_skb_list_core+0x115/0x520 [ 33.243945][ T3601] netif_receive_skb_list_internal+0x4e4/0x660 [ 33.243971][ T3601] netif_receive_skb_list+0x31/0x230 [ 33.244030][ T3601] bpf_test_run_xdp_live+0xe10/0x1040 [ 33.244087][ T3601] ? __pfx_autoremove_wake_function+0x10/0x10 [ 33.244114][ T3601] ? 0xffffffffa0003b40 [ 33.244128][ T3601] ? bpf_test_run_xdp_live+0x2b1/0x1040 [ 33.244239][ T3601] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 33.244289][ T3601] ? __rcu_read_unlock+0x4e/0x70 [ 33.244312][ T3601] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 33.244338][ T3601] bpf_prog_test_run+0x20f/0x3a0 [ 33.244369][ T3601] __sys_bpf+0x400/0x7a0 [ 33.244450][ T3601] __x64_sys_bpf+0x43/0x50 [ 33.244469][ T3601] x64_sys_call+0x2914/0x2dc0 [ 33.244493][ T3601] do_syscall_64+0xc9/0x1c0 [ 33.244523][ T3601] ? clear_bhb_loop+0x55/0xb0 [ 33.244547][ T3601] ? clear_bhb_loop+0x55/0xb0 [ 33.244598][ T3601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.244656][ T3601] RIP: 0033:0x7f45c56fcde9 [ 33.244671][ T3601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.244688][ T3601] RSP: 002b:00007f45c3d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 33.244778][ T3601] RAX: ffffffffffffffda RBX: 00007f45c5915fa0 RCX: 00007f45c56fcde9 [ 33.244790][ T3601] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 33.244801][ T3601] RBP: 00007f45c3d61090 R08: 0000000000000000 R09: 0000000000000000 [ 33.244810][ T3601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 33.244850][ T3601] R13: 0000000000000000 R14: 00007f45c5915fa0 R15: 00007ffd3339a738 [ 33.244865][ T3601] [ 33.561267][ T3605] loop2: detected capacity change from 0 to 512 [ 33.603806][ T3605] EXT4-fs (loop2): 1 orphan inode deleted [ 33.611140][ T3605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.623850][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 33.644699][ T3605] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.705173][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.802108][ T3619] loop2: detected capacity change from 0 to 2048 [ 33.854738][ T3618] infiniband syz!: set active [ 33.859515][ T3618] infiniband syz!: added team_slave_0 [ 33.866230][ T3619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.933930][ T3618] RDS/IB: syz!: added [ 33.955724][ T3618] smc: adding ib device syz! with port count 1 [ 33.962608][ T3618] smc: ib device syz! port 1 has pnetid [ 33.963992][ T3634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.65'. [ 34.025856][ T3637] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.025926][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.082050][ T3642] FAULT_INJECTION: forcing a failure. [ 34.082050][ T3642] name failslab, interval 1, probability 0, space 0, times 0 [ 34.085714][ T3639] loop4: detected capacity change from 0 to 512 [ 34.094864][ T3642] CPU: 0 UID: 0 PID: 3642 Comm: syz.1.68 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 34.094938][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 34.094947][ T3642] Call Trace: [ 34.094955][ T3642] [ 34.095031][ T3642] dump_stack_lvl+0xf2/0x150 [ 34.095057][ T3642] dump_stack+0x15/0x1a [ 34.095076][ T3642] should_fail_ex+0x24a/0x260 [ 34.095101][ T3642] should_failslab+0x8f/0xb0 [ 34.095152][ T3642] __kmalloc_node_noprof+0xad/0x410 [ 34.095174][ T3642] ? alloc_slab_obj_exts+0x32/0x80 [ 34.095192][ T3642] alloc_slab_obj_exts+0x32/0x80 [ 34.095209][ T3642] __memcg_slab_post_alloc_hook+0x31b/0x660 [ 34.095233][ T3642] kmem_cache_alloc_node_noprof+0x22e/0x320 [ 34.095318][ T3642] ? __alloc_skb+0x10b/0x310 [ 34.095347][ T3642] __alloc_skb+0x10b/0x310 [ 34.095379][ T3642] alloc_skb_with_frags+0x80/0x450 [ 34.095397][ T3642] ? avc_has_perm+0xd4/0x160 [ 34.095466][ T3642] sock_alloc_send_pskb+0x435/0x4f0 [ 34.095491][ T3642] unix_stream_sendmsg+0x365/0x800 [ 34.095523][ T3642] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 34.095578][ T3642] __sock_sendmsg+0x140/0x180 [ 34.095680][ T3642] ____sys_sendmsg+0x326/0x4b0 [ 34.095702][ T3642] __sys_sendmsg+0x19d/0x230 [ 34.095739][ T3642] __x64_sys_sendmsg+0x46/0x50 [ 34.095837][ T3642] x64_sys_call+0x2734/0x2dc0 [ 34.095859][ T3642] do_syscall_64+0xc9/0x1c0 [ 34.095885][ T3642] ? clear_bhb_loop+0x55/0xb0 [ 34.095963][ T3642] ? clear_bhb_loop+0x55/0xb0 [ 34.095986][ T3642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.096009][ T3642] RIP: 0033:0x7f5f612ccde9 [ 34.096051][ T3642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.096067][ T3642] RSP: 002b:00007f5f5f937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.096084][ T3642] RAX: ffffffffffffffda RBX: 00007f5f614e5fa0 RCX: 00007f5f612ccde9 [ 34.096095][ T3642] RDX: 0000000000020001 RSI: 0000400000000d40 RDI: 0000000000000003 [ 34.096106][ T3642] RBP: 00007f5f5f937090 R08: 0000000000000000 R09: 0000000000000000 [ 34.096117][ T3642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.096127][ T3642] R13: 0000000000000000 R14: 00007f5f614e5fa0 R15: 00007ffef8119968 [ 34.096192][ T3642] [ 34.438751][ T3639] EXT4-fs (loop4): 1 orphan inode deleted [ 34.445998][ T3639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.458629][ T3401] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 34.480796][ T3661] loop1: detected capacity change from 0 to 512 [ 34.488252][ T3662] FAULT_INJECTION: forcing a failure. [ 34.488252][ T3662] name failslab, interval 1, probability 0, space 0, times 0 [ 34.500932][ T3662] CPU: 0 UID: 0 PID: 3662 Comm: syz.0.72 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 34.501033][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 34.501042][ T3662] Call Trace: [ 34.501048][ T3662] [ 34.501055][ T3662] dump_stack_lvl+0xf2/0x150 [ 34.501093][ T3662] dump_stack+0x15/0x1a [ 34.501113][ T3662] should_fail_ex+0x24a/0x260 [ 34.501137][ T3662] ? do_proc_control+0x1c4/0x850 [ 34.501172][ T3662] should_failslab+0x8f/0xb0 [ 34.501195][ T3662] __kmalloc_cache_noprof+0x4e/0x320 [ 34.501271][ T3662] do_proc_control+0x1c4/0x850 [ 34.501350][ T3662] ? should_fail_ex+0xd7/0x260 [ 34.501374][ T3662] usbdev_ioctl+0x1c03/0x3f20 [ 34.501403][ T3662] ? do_vfs_ioctl+0x98b/0x1590 [ 34.501426][ T3662] ? selinux_file_ioctl+0x2f7/0x380 [ 34.501469][ T3662] ? __fget_files+0x17c/0x1c0 [ 34.501495][ T3662] ? __pfx_usbdev_ioctl+0x10/0x10 [ 34.501519][ T3662] __se_sys_ioctl+0xc9/0x140 [ 34.501541][ T3662] __x64_sys_ioctl+0x43/0x50 [ 34.501565][ T3662] x64_sys_call+0x1690/0x2dc0 [ 34.501635][ T3662] do_syscall_64+0xc9/0x1c0 [ 34.501726][ T3662] ? clear_bhb_loop+0x55/0xb0 [ 34.501763][ T3662] ? clear_bhb_loop+0x55/0xb0 [ 34.501787][ T3662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.501854][ T3662] RIP: 0033:0x7f45c56fcde9 [ 34.501868][ T3662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.501881][ T3662] RSP: 002b:00007f45c3d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.501904][ T3662] RAX: ffffffffffffffda RBX: 00007f45c5916080 RCX: 00007f45c56fcde9 [ 34.501936][ T3662] RDX: 0000400000000040 RSI: 00000000c0185500 RDI: 0000000000000004 [ 34.501948][ T3662] RBP: 00007f45c3d40090 R08: 0000000000000000 R09: 0000000000000000 [ 34.501959][ T3662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.501971][ T3662] R13: 0000000000000000 R14: 00007f45c5916080 R15: 00007ffd3339a738 [ 34.501987][ T3662] [ 34.605244][ T3661] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.683833][ T3618] +}[@ (3618) used greatest stack depth: 10680 bytes left [ 34.692303][ T3639] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.703480][ T3661] EXT4-fs (loop1): 1 orphan inode deleted [ 34.736481][ T3661] EXT4-fs (loop1): 1 truncate cleaned up [ 34.769278][ T3661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.786751][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.791828][ T3668] smc: net device bond0 applied user defined pnetid SYZ0 [ 34.813062][ T3668] smc: net device bond0 erased user defined pnetid SYZ0 [ 34.842714][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.842751][ T3668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.75'. [ 34.910212][ T3682] FAULT_INJECTION: forcing a failure. [ 34.910212][ T3682] name failslab, interval 1, probability 0, space 0, times 0 [ 34.922993][ T3682] CPU: 0 UID: 0 PID: 3682 Comm: syz.4.79 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 34.923017][ T3682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 34.923028][ T3682] Call Trace: [ 34.923036][ T3682] [ 34.923043][ T3682] dump_stack_lvl+0xf2/0x150 [ 34.923147][ T3682] dump_stack+0x15/0x1a [ 34.923165][ T3682] should_fail_ex+0x24a/0x260 [ 34.923316][ T3682] should_failslab+0x8f/0xb0 [ 34.923343][ T3682] kmem_cache_alloc_node_noprof+0x59/0x320 [ 34.923446][ T3682] ? __alloc_skb+0x10b/0x310 [ 34.923477][ T3682] __alloc_skb+0x10b/0x310 [ 34.923505][ T3682] ? audit_log_start+0x34c/0x6b0 [ 34.923535][ T3682] audit_log_start+0x368/0x6b0 [ 34.923566][ T3682] audit_seccomp+0x4b/0x130 [ 34.923591][ T3682] __seccomp_filter+0x6fa/0x1180 [ 34.923713][ T3682] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 34.923739][ T3682] ? vfs_write+0x644/0x920 [ 34.923758][ T3682] ? __schedule+0x75b/0x990 [ 34.923842][ T3682] __secure_computing+0x9f/0x1c0 [ 34.923863][ T3682] syscall_trace_enter+0xd1/0x1f0 [ 34.923959][ T3682] do_syscall_64+0xaa/0x1c0 [ 34.924029][ T3682] ? clear_bhb_loop+0x55/0xb0 [ 34.924130][ T3682] ? clear_bhb_loop+0x55/0xb0 [ 34.924149][ T3682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.924168][ T3682] RIP: 0033:0x7f9018c7cde9 [ 34.924180][ T3682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.924193][ T3682] RSP: 002b:00007f90172e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 34.924234][ T3682] RAX: ffffffffffffffda RBX: 00007f9018e95fa0 RCX: 00007f9018c7cde9 [ 34.924243][ T3682] RDX: 0000400000000340 RSI: 0000400000000380 RDI: 0000000000000065 [ 34.924253][ T3682] RBP: 00007f90172e1090 R08: 0000000000000000 R09: 0000000000000000 [ 34.924261][ T3682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.924270][ T3682] R13: 0000000000000000 R14: 00007f9018e95fa0 R15: 00007ffc516ac318 [ 34.924283][ T3682] [ 35.132359][ T3687] loop0: detected capacity change from 0 to 2048 [ 35.200304][ T3687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.230085][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.247637][ T3701] netlink: 64 bytes leftover after parsing attributes in process `+}[@'. [ 35.303504][ T3710] loop2: detected capacity change from 0 to 512 [ 35.320995][ T3710] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.354083][ T3716] loop0: detected capacity change from 0 to 512 [ 35.362827][ T3716] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.385389][ T3716] EXT4-fs (loop0): 1 truncate cleaned up [ 35.391536][ T3716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.407867][ T3710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.420572][ T3710] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.432469][ T3710] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm +}[@: corrupted xattr block 32: bad e_name length [ 35.478747][ T3710] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 35.495307][ T3710] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm +}[@: corrupted xattr block 32: bad e_name length [ 35.504541][ T3723] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.89: corrupted xattr block 32: bad e_name length [ 35.510253][ T3710] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 35.532966][ T3710] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm +}[@: corrupted xattr block 32: bad e_name length [ 35.548347][ T3710] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 35.564938][ T3723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 35.575308][ T3723] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.89: corrupted xattr block 32: bad e_name length [ 35.590584][ T3723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 35.622365][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.659182][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 35.659250][ T29] audit: type=1326 audit(1739576515.722:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c56fcde9 code=0x7ffc0000 [ 35.689323][ T29] audit: type=1326 audit(1739576515.722:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f45c56fcde9 code=0x7ffc0000 [ 35.712510][ T29] audit: type=1326 audit(1739576515.722:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c56fcde9 code=0x7ffc0000 [ 35.735753][ T29] audit: type=1326 audit(1739576515.722:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f45c56fcde9 code=0x7ffc0000 [ 35.759264][ T29] audit: type=1326 audit(1739576515.722:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c56fcde9 code=0x7ffc0000 [ 35.782806][ T29] audit: type=1326 audit(1739576515.722:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f45c56fcde9 code=0x7ffc0000 [ 35.804209][ T3736] FAULT_INJECTION: forcing a failure. [ 35.804209][ T3736] name failslab, interval 1, probability 0, space 0, times 0 [ 35.806111][ T29] audit: type=1400 audit(1739576515.722:381): avc: denied { write } for pid=3715 comm="syz.0.92" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.818661][ T3736] CPU: 0 UID: 0 PID: 3736 Comm: syz.2.95 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 35.818683][ T3736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 35.818693][ T3736] Call Trace: [ 35.818699][ T3736] [ 35.818706][ T3736] dump_stack_lvl+0xf2/0x150 [ 35.818732][ T3736] dump_stack+0x15/0x1a [ 35.818749][ T3736] should_fail_ex+0x24a/0x260 [ 35.818774][ T3736] should_failslab+0x8f/0xb0 [ 35.818798][ T3736] kmem_cache_alloc_noprof+0x52/0x320 [ 35.818815][ T3736] ? vm_area_dup+0x2c/0x130 [ 35.818835][ T3736] vm_area_dup+0x2c/0x130 [ 35.818853][ T3736] __split_vma+0xf7/0x6a0 [ 35.818874][ T3736] vms_gather_munmap_vmas+0x171/0x7a0 [ 35.818900][ T3736] ? mntput_no_expire+0x70/0x3d0 [ 35.818922][ T3736] do_vmi_align_munmap+0x1a4/0x390 [ 35.818954][ T3736] do_vmi_munmap+0x1eb/0x230 [ 35.818980][ T3736] do_munmap+0x8b/0xc0 [ 35.819007][ T3736] __se_sys_mremap+0xa72/0xf10 [ 35.819029][ T3736] ? fput+0x1c4/0x200 [ 35.819047][ T3736] __x64_sys_mremap+0x67/0x80 [ 35.819066][ T3736] x64_sys_call+0x27e8/0x2dc0 [ 35.819088][ T3736] do_syscall_64+0xc9/0x1c0 [ 35.819111][ T3736] ? clear_bhb_loop+0x55/0xb0 [ 35.819133][ T3736] ? clear_bhb_loop+0x55/0xb0 [ 35.819154][ T3736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.819176][ T3736] RIP: 0033:0x7fcd9ea1cde9 [ 35.819190][ T3736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.819203][ T3736] RSP: 002b:00007fcd9d060038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 35.819218][ T3736] RAX: ffffffffffffffda RBX: 00007fcd9ec36080 RCX: 00007fcd9ea1cde9 [ 35.819228][ T3736] RDX: 0000000000800000 RSI: 0000000000002000 RDI: 0000400000ceb000 [ 35.819238][ T3736] RBP: 00007fcd9d060090 R08: 0000400000130000 R09: 0000000000000000 [ 35.819249][ T3736] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 35.819259][ T3736] R13: 0000000000000000 R14: 00007fcd9ec36080 R15: 00007ffc8c664988 [ 35.819273][ T3736] [ 36.043709][ T29] audit: type=1326 audit(1739576515.722:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c56fcde9 code=0x7ffc0000 [ 36.066991][ T29] audit: type=1326 audit(1739576515.722:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c56fcde9 code=0x7ffc0000 [ 36.090662][ T29] audit: type=1400 audit(1739576515.832:384): avc: denied { create } for pid=3735 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 36.116845][ T3732] loop3: detected capacity change from 0 to 128 [ 36.137964][ T3732] FAT-fs (loop3): Directory bread(block 32) failed [ 36.144931][ T3732] FAT-fs (loop3): Directory bread(block 33) failed [ 36.151716][ T3732] FAT-fs (loop3): Directory bread(block 34) failed [ 36.160098][ T3732] FAT-fs (loop3): Directory bread(block 35) failed [ 36.166817][ T3732] FAT-fs (loop3): Directory bread(block 36) failed [ 36.169963][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.173431][ T3732] FAT-fs (loop3): Directory bread(block 37) failed [ 36.189403][ T3732] FAT-fs (loop3): Directory bread(block 38) failed [ 36.196002][ T3732] FAT-fs (loop3): Directory bread(block 39) failed [ 36.202605][ T3732] FAT-fs (loop3): Directory bread(block 40) failed [ 36.209539][ T3732] FAT-fs (loop3): Directory bread(block 41) failed [ 36.241114][ T3743] loop1: detected capacity change from 0 to 256 [ 36.336834][ T3751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 36.381986][ T3757] FAULT_INJECTION: forcing a failure. [ 36.381986][ T3757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.395232][ T3757] CPU: 0 UID: 0 PID: 3757 Comm: syz.4.106 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 36.395253][ T3757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 36.395262][ T3757] Call Trace: [ 36.395267][ T3757] [ 36.395273][ T3757] dump_stack_lvl+0xf2/0x150 [ 36.395296][ T3757] dump_stack+0x15/0x1a [ 36.395313][ T3757] should_fail_ex+0x24a/0x260 [ 36.395409][ T3757] should_fail+0xb/0x10 [ 36.395428][ T3757] should_fail_usercopy+0x1a/0x20 [ 36.395453][ T3757] _copy_from_user+0x1c/0xa0 [ 36.395564][ T3757] copy_msghdr_from_user+0x54/0x2a0 [ 36.395588][ T3757] ? __fget_files+0x17c/0x1c0 [ 36.395615][ T3757] __sys_sendmmsg+0x1e8/0x4b0 [ 36.395709][ T3757] __x64_sys_sendmmsg+0x57/0x70 [ 36.395729][ T3757] x64_sys_call+0x29aa/0x2dc0 [ 36.395751][ T3757] do_syscall_64+0xc9/0x1c0 [ 36.395772][ T3757] ? clear_bhb_loop+0x55/0xb0 [ 36.395876][ T3757] ? clear_bhb_loop+0x55/0xb0 [ 36.395895][ T3757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.395915][ T3757] RIP: 0033:0x7f9018c7cde9 [ 36.395928][ T3757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.395995][ T3757] RSP: 002b:00007f90172e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 36.396010][ T3757] RAX: ffffffffffffffda RBX: 00007f9018e95fa0 RCX: 00007f9018c7cde9 [ 36.396047][ T3757] RDX: 0000000000000003 RSI: 0000400000004540 RDI: 0000000000000003 [ 36.396107][ T3757] RBP: 00007f90172e1090 R08: 0000000000000000 R09: 0000000000000000 [ 36.396118][ T3757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.396129][ T3757] R13: 0000000000000000 R14: 00007f9018e95fa0 R15: 00007ffc516ac318 [ 36.396145][ T3757] [ 36.771986][ T3771] loop4: detected capacity change from 0 to 256 [ 36.782043][ T3771] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.961461][ T3777] loop1: detected capacity change from 0 to 256 [ 37.007872][ T3777] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 37.028597][ T3779] loop3: detected capacity change from 0 to 256 [ 37.054823][ T3779] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 37.080676][ T3779] FAULT_INJECTION: forcing a failure. [ 37.080676][ T3779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.093819][ T3779] CPU: 0 UID: 0 PID: 3779 Comm: syz.3.115 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 37.093912][ T3779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 37.093922][ T3779] Call Trace: [ 37.093929][ T3779] [ 37.093934][ T3779] dump_stack_lvl+0xf2/0x150 [ 37.093957][ T3779] dump_stack+0x15/0x1a [ 37.093975][ T3779] should_fail_ex+0x24a/0x260 [ 37.093998][ T3779] should_fail+0xb/0x10 [ 37.094096][ T3779] should_fail_usercopy+0x1a/0x20 [ 37.094125][ T3779] _copy_from_user+0x1c/0xa0 [ 37.094153][ T3779] do_arpt_set_ctl+0x42f/0xa20 [ 37.094176][ T3779] ? _raw_spin_unlock_bh+0x36/0x40 [ 37.094279][ T3779] nf_setsockopt+0x195/0x1b0 [ 37.094306][ T3779] ip_setsockopt+0xea/0x100 [ 37.094325][ T3779] udp_setsockopt+0x95/0xb0 [ 37.094340][ T3779] sock_common_setsockopt+0x64/0x80 [ 37.094412][ T3779] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 37.094443][ T3779] __sys_setsockopt+0x187/0x200 [ 37.094488][ T3779] __x64_sys_setsockopt+0x66/0x80 [ 37.094560][ T3779] x64_sys_call+0x282e/0x2dc0 [ 37.094582][ T3779] do_syscall_64+0xc9/0x1c0 [ 37.094634][ T3779] ? clear_bhb_loop+0x55/0xb0 [ 37.094655][ T3779] ? clear_bhb_loop+0x55/0xb0 [ 37.094711][ T3779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.094734][ T3779] RIP: 0033:0x7fae91a3cde9 [ 37.094755][ T3779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.094769][ T3779] RSP: 002b:00007fae900a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 37.094784][ T3779] RAX: ffffffffffffffda RBX: 00007fae91c55fa0 RCX: 00007fae91a3cde9 [ 37.094793][ T3779] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 37.094803][ T3779] RBP: 00007fae900a1090 R08: 0000000000000438 R09: 0000000000000000 [ 37.094813][ T3779] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.094824][ T3779] R13: 0000000000000000 R14: 00007fae91c55fa0 R15: 00007ffe9a16a8b8 [ 37.094839][ T3779] [ 37.336596][ T3788] FAULT_INJECTION: forcing a failure. [ 37.336596][ T3788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.349762][ T3788] CPU: 1 UID: 0 PID: 3788 Comm: syz.4.119 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 37.349790][ T3788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 37.349799][ T3788] Call Trace: [ 37.349804][ T3788] [ 37.349810][ T3788] dump_stack_lvl+0xf2/0x150 [ 37.349832][ T3788] dump_stack+0x15/0x1a [ 37.349888][ T3788] should_fail_ex+0x24a/0x260 [ 37.349910][ T3788] should_fail+0xb/0x10 [ 37.349929][ T3788] should_fail_usercopy+0x1a/0x20 [ 37.349956][ T3788] _copy_to_user+0x20/0xa0 [ 37.349985][ T3788] rng_dev_read+0x3e8/0x700 [ 37.350048][ T3788] vfs_readv+0x3e2/0x660 [ 37.350066][ T3788] ? __pfx_rng_dev_read+0x10/0x10 [ 37.350159][ T3788] __x64_sys_preadv+0xf4/0x1c0 [ 37.350197][ T3788] x64_sys_call+0x2680/0x2dc0 [ 37.350216][ T3788] do_syscall_64+0xc9/0x1c0 [ 37.350237][ T3788] ? clear_bhb_loop+0x55/0xb0 [ 37.350320][ T3788] ? clear_bhb_loop+0x55/0xb0 [ 37.350370][ T3788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.350392][ T3788] RIP: 0033:0x7f9018c7cde9 [ 37.350405][ T3788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.350494][ T3788] RSP: 002b:00007f90172e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 37.350510][ T3788] RAX: ffffffffffffffda RBX: 00007f9018e95fa0 RCX: 00007f9018c7cde9 [ 37.350520][ T3788] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000003 [ 37.350530][ T3788] RBP: 00007f90172e1090 R08: 0000000000000000 R09: 0000000000000000 [ 37.350542][ T3788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 37.350609][ T3788] R13: 0000000000000000 R14: 00007f9018e95fa0 R15: 00007ffc516ac318 [ 37.350625][ T3788] [ 37.628397][ T3797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 37.648982][ T3796] loop1: detected capacity change from 0 to 512 [ 37.660497][ T3799] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.723214][ T3796] EXT4-fs (loop1): 1 orphan inode deleted [ 37.732561][ T3799] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.748510][ T3401] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 37.754954][ T3796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.784763][ T3796] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.844063][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.860144][ T3813] loop4: detected capacity change from 0 to 1024 [ 37.875359][ T3813] EXT4-fs: Ignoring removed nobh option [ 37.881013][ T3813] EXT4-fs: Ignoring removed bh option [ 37.895774][ T3816] FAULT_INJECTION: forcing a failure. [ 37.895774][ T3816] name failslab, interval 1, probability 0, space 0, times 0 [ 37.897265][ T3811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.908664][ T3816] CPU: 1 UID: 0 PID: 3816 Comm: syz.2.128 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 37.908697][ T3816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 37.908708][ T3816] Call Trace: [ 37.908714][ T3816] [ 37.908722][ T3816] dump_stack_lvl+0xf2/0x150 [ 37.908747][ T3816] dump_stack+0x15/0x1a [ 37.908765][ T3816] should_fail_ex+0x24a/0x260 [ 37.908850][ T3816] should_failslab+0x8f/0xb0 [ 37.908886][ T3816] kmem_cache_alloc_noprof+0x52/0x320 [ 37.908906][ T3816] ? audit_log_start+0x34c/0x6b0 [ 37.909059][ T3816] audit_log_start+0x34c/0x6b0 [ 37.909089][ T3816] audit_seccomp+0x4b/0x130 [ 37.909149][ T3816] __seccomp_filter+0x6fa/0x1180 [ 37.909170][ T3816] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 37.909229][ T3816] ? vfs_write+0x644/0x920 [ 37.909255][ T3816] __secure_computing+0x9f/0x1c0 [ 37.909323][ T3816] syscall_trace_enter+0xd1/0x1f0 [ 37.909344][ T3816] ? fpregs_assert_state_consistent+0x83/0xa0 [ 37.909364][ T3816] do_syscall_64+0xaa/0x1c0 [ 37.909387][ T3816] ? clear_bhb_loop+0x55/0xb0 [ 37.909411][ T3816] ? clear_bhb_loop+0x55/0xb0 [ 37.909480][ T3816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.909503][ T3816] RIP: 0033:0x7fcd9ea1cde9 [ 37.909518][ T3816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.909534][ T3816] RSP: 002b:00007fcd9d060038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 37.909550][ T3816] RAX: ffffffffffffffda RBX: 00007fcd9ec36080 RCX: 00007fcd9ea1cde9 [ 37.909561][ T3816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 37.909649][ T3816] RBP: 00007fcd9d060090 R08: 0000000000000000 R09: 0000000000000000 [ 37.909659][ T3816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.909670][ T3816] R13: 0000000000000000 R14: 00007fcd9ec36080 R15: 00007ffc8c664988 [ 37.909690][ T3816] [ 37.959280][ T3815] loop1: detected capacity change from 0 to 128 [ 38.117755][ T3815] EXT4-fs: Ignoring removed nobh option [ 38.119737][ T3813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.138179][ T3799] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.140764][ T3815] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.162474][ T3815] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.177715][ T3811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.202783][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.223831][ T3799] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.249420][ T3811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.267237][ T3823] mmap: syz.1.131 (3823): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 38.281553][ T3823] SELinux: Context system_u:object_r:bin_t:s0 is not valid (left unmapped). [ 38.281920][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.312895][ T3799] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.324906][ T3799] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.342046][ T3825] geneve2: entered promiscuous mode [ 38.343789][ T3827] FAULT_INJECTION: forcing a failure. [ 38.343789][ T3827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.347570][ T3825] geneve2: entered allmulticast mode [ 38.360710][ T3827] CPU: 0 UID: 0 PID: 3827 Comm: syz.1.133 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 38.360805][ T3827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.360816][ T3827] Call Trace: [ 38.360823][ T3827] [ 38.360830][ T3827] dump_stack_lvl+0xf2/0x150 [ 38.360855][ T3827] dump_stack+0x15/0x1a [ 38.360873][ T3827] should_fail_ex+0x24a/0x260 [ 38.360898][ T3827] should_fail+0xb/0x10 [ 38.360964][ T3827] should_fail_usercopy+0x1a/0x20 [ 38.360990][ T3827] _copy_from_user+0x1c/0xa0 [ 38.361053][ T3827] copy_msghdr_from_user+0x54/0x2a0 [ 38.361152][ T3827] ? __fget_files+0x17c/0x1c0 [ 38.361181][ T3827] __sys_sendmsg+0x13e/0x230 [ 38.361210][ T3827] __x64_sys_sendmsg+0x46/0x50 [ 38.361229][ T3827] x64_sys_call+0x2734/0x2dc0 [ 38.361252][ T3827] do_syscall_64+0xc9/0x1c0 [ 38.361291][ T3827] ? clear_bhb_loop+0x55/0xb0 [ 38.361314][ T3827] ? clear_bhb_loop+0x55/0xb0 [ 38.361341][ T3827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.361437][ T3827] RIP: 0033:0x7f5f612ccde9 [ 38.361451][ T3827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.361543][ T3827] RSP: 002b:00007f5f5f937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.361560][ T3827] RAX: ffffffffffffffda RBX: 00007f5f614e5fa0 RCX: 00007f5f612ccde9 [ 38.361571][ T3827] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000004 [ 38.361582][ T3827] RBP: 00007f5f5f937090 R08: 0000000000000000 R09: 0000000000000000 [ 38.361593][ T3827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.361603][ T3827] R13: 0000000000000000 R14: 00007f5f614e5fa0 R15: 00007ffef8119968 [ 38.361619][ T3827] [ 38.548185][ T3799] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.559416][ T3811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.586158][ T3799] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.642238][ T3811] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.666966][ T3842] loop3: detected capacity change from 0 to 512 [ 38.679729][ T3816] syz.2.128 (3816) used greatest stack depth: 10240 bytes left [ 38.699073][ T3842] EXT4-fs (loop3): 1 orphan inode deleted [ 38.709022][ T3842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.710819][ T3811] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.725332][ T3842] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.740386][ T40] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 38.740448][ T3835] loop1: detected capacity change from 0 to 8192 [ 38.757237][ T3811] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.779519][ T3850] FAULT_INJECTION: forcing a failure. [ 38.779519][ T3850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.793375][ T3850] CPU: 0 UID: 0 PID: 3850 Comm: syz.0.142 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 38.793396][ T3850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.793428][ T3850] Call Trace: [ 38.793435][ T3850] [ 38.793442][ T3850] dump_stack_lvl+0xf2/0x150 [ 38.793467][ T3850] dump_stack+0x15/0x1a [ 38.793498][ T3850] should_fail_ex+0x24a/0x260 [ 38.793522][ T3850] should_fail+0xb/0x10 [ 38.793540][ T3850] should_fail_usercopy+0x1a/0x20 [ 38.793567][ T3850] _copy_from_user+0x1c/0xa0 [ 38.793631][ T3850] __sys_bpf+0x14e/0x7a0 [ 38.793773][ T3850] __x64_sys_bpf+0x43/0x50 [ 38.793795][ T3850] x64_sys_call+0x2914/0x2dc0 [ 38.793817][ T3850] do_syscall_64+0xc9/0x1c0 [ 38.793908][ T3850] ? clear_bhb_loop+0x55/0xb0 [ 38.793997][ T3850] ? clear_bhb_loop+0x55/0xb0 [ 38.794021][ T3850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.794044][ T3850] RIP: 0033:0x7f45c56fcde9 [ 38.794056][ T3850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.794070][ T3850] RSP: 002b:00007f45c3d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 38.794157][ T3850] RAX: ffffffffffffffda RBX: 00007f45c5915fa0 RCX: 00007f45c56fcde9 [ 38.794168][ T3850] RDX: 0000000000000010 RSI: 0000400000000600 RDI: 000000000000000f [ 38.794176][ T3850] RBP: 00007f45c3d61090 R08: 0000000000000000 R09: 0000000000000000 [ 38.794186][ T3850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.794195][ T3850] R13: 0000000000000000 R14: 00007f45c5915fa0 R15: 00007ffd3339a738 [ 38.794210][ T3850] [ 38.967240][ T3811] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.006724][ T3855] FAULT_INJECTION: forcing a failure. [ 39.006724][ T3855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.019851][ T3855] CPU: 0 UID: 0 PID: 3855 Comm: syz.1.143 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 39.019871][ T3855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 39.019880][ T3855] Call Trace: [ 39.019892][ T3855] [ 39.019899][ T3855] dump_stack_lvl+0xf2/0x150 [ 39.019924][ T3855] dump_stack+0x15/0x1a [ 39.019943][ T3855] should_fail_ex+0x24a/0x260 [ 39.019970][ T3855] should_fail+0xb/0x10 [ 39.020034][ T3855] should_fail_usercopy+0x1a/0x20 [ 39.020114][ T3855] _copy_from_user+0x1c/0xa0 [ 39.020143][ T3855] move_addr_to_kernel+0x82/0x120 [ 39.020244][ T3855] __sys_connect+0x67/0x1b0 [ 39.020275][ T3855] __x64_sys_connect+0x41/0x50 [ 39.020322][ T3855] x64_sys_call+0x22a7/0x2dc0 [ 39.020343][ T3855] do_syscall_64+0xc9/0x1c0 [ 39.020376][ T3855] ? clear_bhb_loop+0x55/0xb0 [ 39.020399][ T3855] ? clear_bhb_loop+0x55/0xb0 [ 39.020479][ T3855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.020585][ T3855] RIP: 0033:0x7f5f612ccde9 [ 39.020600][ T3855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.020616][ T3855] RSP: 002b:00007f5f5f937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 39.020670][ T3855] RAX: ffffffffffffffda RBX: 00007f5f614e5fa0 RCX: 00007f5f612ccde9 [ 39.020679][ T3855] RDX: 000000000000006e RSI: 0000400000000080 RDI: 0000000000000008 [ 39.020689][ T3855] RBP: 00007f5f5f937090 R08: 0000000000000000 R09: 0000000000000000 [ 39.020698][ T3855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.020707][ T3855] R13: 0000000000000000 R14: 00007f5f614e5fa0 R15: 00007ffef8119968 [ 39.020720][ T3855] [ 39.038800][ T3858] loop0: detected capacity change from 0 to 1024 [ 39.202665][ T3858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.223463][ T3858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.236448][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.241235][ T3860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.147'. [ 39.364350][ T3868] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.427355][ T3861] loop4: detected capacity change from 0 to 128 [ 39.460166][ T3868] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.508607][ T3861] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.575644][ T3861] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.712811][ T3868] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.759483][ T3875] syz.3.150 uses obsolete (PF_INET,SOCK_PACKET) [ 39.774736][ T3875] netlink: 64 bytes leftover after parsing attributes in process `syz.3.150'. [ 39.820642][ T3868] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.883440][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.956225][ T3881] dvmrp0: entered allmulticast mode [ 39.972611][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.983675][ T3881] dvmrp0: left allmulticast mode [ 40.009804][ T3887] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 40.019248][ T3889] FAULT_INJECTION: forcing a failure. [ 40.019248][ T3889] name failslab, interval 1, probability 0, space 0, times 0 [ 40.025801][ T3887] loop4: detected capacity change from 0 to 1024 [ 40.032053][ T3889] CPU: 1 UID: 0 PID: 3889 Comm: syz.1.157 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 40.032076][ T3889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 40.032086][ T3889] Call Trace: [ 40.032135][ T3889] [ 40.032142][ T3889] dump_stack_lvl+0xf2/0x150 [ 40.032166][ T3889] dump_stack+0x15/0x1a [ 40.032248][ T3889] should_fail_ex+0x24a/0x260 [ 40.032274][ T3889] ? isofs_init_fs_context+0x32/0x130 [ 40.032298][ T3889] should_failslab+0x8f/0xb0 [ 40.032325][ T3889] __kmalloc_cache_noprof+0x4e/0x320 [ 40.032365][ T3889] ? alloc_fs_context+0x44/0x4e0 [ 40.032390][ T3889] isofs_init_fs_context+0x32/0x130 [ 40.032415][ T3889] alloc_fs_context+0x3fb/0x4e0 [ 40.032498][ T3889] fs_context_for_mount+0x21/0x30 [ 40.032521][ T3889] __se_sys_fsopen+0x96/0x1c0 [ 40.032554][ T3889] __x64_sys_fsopen+0x31/0x40 [ 40.032579][ T3889] x64_sys_call+0x358/0x2dc0 [ 40.032667][ T3889] do_syscall_64+0xc9/0x1c0 [ 40.032730][ T3889] ? clear_bhb_loop+0x55/0xb0 [ 40.032798][ T3889] ? clear_bhb_loop+0x55/0xb0 [ 40.032820][ T3889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.032879][ T3889] RIP: 0033:0x7f5f612ccde9 [ 40.032893][ T3889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.032909][ T3889] RSP: 002b:00007f5f5f937038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 40.033014][ T3889] RAX: ffffffffffffffda RBX: 00007f5f614e5fa0 RCX: 00007f5f612ccde9 [ 40.033025][ T3889] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000400000000000 [ 40.033036][ T3889] RBP: 00007f5f5f937090 R08: 0000000000000000 R09: 0000000000000000 [ 40.033047][ T3889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.033058][ T3889] R13: 0000000000000000 R14: 00007f5f614e5fa0 R15: 00007ffef8119968 [ 40.033127][ T3889] [ 40.153982][ T3894] loop1: detected capacity change from 0 to 512 [ 40.177910][ T3887] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 40.242003][ T3887] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 40.251799][ T3887] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 40.262076][ T3887] EXT4-fs (loop4): invalid journal inode [ 40.267820][ T3887] EXT4-fs (loop4): can't get journal size [ 40.284734][ T3887] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.156: blocks 2-2 from inode overlap system zone [ 40.298741][ T3887] EXT4-fs (loop4): failed to initialize system zone (-117) [ 40.306088][ T3887] EXT4-fs (loop4): mount failed [ 40.307888][ T3898] loop3: detected capacity change from 0 to 512 [ 40.318984][ T3894] EXT4-fs (loop1): 1 orphan inode deleted [ 40.334993][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 40.336421][ T3894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.360959][ T3894] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.372208][ T3898] EXT4-fs (loop3): too many log groups per flexible block group [ 40.379948][ T3898] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 40.387970][ T3898] EXT4-fs (loop3): mount failed [ 40.425355][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.497625][ T3918] team0 (unregistering): Port device team_slave_0 removed [ 40.507147][ T3918] team0 (unregistering): Port device team_slave_1 removed [ 40.532440][ T3914] loop0: detected capacity change from 0 to 512 [ 40.557008][ T3914] EXT4-fs (loop0): 1 orphan inode deleted [ 40.563102][ T3914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.575794][ T3401] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 40.588688][ T3914] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.645585][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.725220][ T3928] 9pnet_fd: Insufficient options for proto=fd [ 40.859050][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 40.859064][ T29] audit: type=1326 audit(1739576520.922:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9018c7cde9 code=0x7ffc0000 [ 40.906389][ T29] audit: type=1326 audit(1739576520.962:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9018c7cde9 code=0x7ffc0000 [ 40.929774][ T29] audit: type=1326 audit(1739576520.962:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9018c7cde9 code=0x7ffc0000 [ 40.953138][ T29] audit: type=1326 audit(1739576520.962:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9018c7cde9 code=0x7ffc0000 [ 40.976488][ T29] audit: type=1326 audit(1739576520.962:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9018c7cde9 code=0x7ffc0000 [ 40.999886][ T29] audit: type=1326 audit(1739576520.962:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9018c7cde9 code=0x7ffc0000 [ 41.023194][ T29] audit: type=1326 audit(1739576520.962:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9018c7cde9 code=0x7ffc0000 [ 41.046761][ T29] audit: type=1326 audit(1739576520.962:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9018c7cde9 code=0x7ffc0000 [ 41.070485][ T29] audit: type=1326 audit(1739576520.962:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9018c7cde9 code=0x7ffc0000 [ 41.094056][ T29] audit: type=1326 audit(1739576520.962:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9018c7cde9 code=0x7ffc0000 [ 41.217684][ T3938] loop4: detected capacity change from 0 to 512 [ 41.259463][ T3938] EXT4-fs (loop4): 1 orphan inode deleted [ 41.266832][ T3938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.280466][ T3401] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 41.292635][ T3938] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.317443][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.661500][ T3966] loop3: detected capacity change from 0 to 512 [ 41.693432][ T3966] EXT4-fs (loop3): 1 orphan inode deleted [ 41.714770][ T3966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.734513][ T3401] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 41.762132][ T3966] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.796708][ T3973] loop4: detected capacity change from 0 to 2048 [ 41.837759][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.838004][ T3973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.886503][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.925259][ T3970] loop1: detected capacity change from 0 to 164 [ 41.941726][ T3970] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 42.103576][ T3985] loop4: detected capacity change from 0 to 1024 [ 42.113099][ T3985] EXT4-fs: inline encryption not supported [ 42.128274][ T3985] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.141080][ T3985] EXT4-fs error (device loop4): ext4_map_blocks:705: inode #3: block 1: comm syz.4.188: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.156630][ T3985] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.188: Failed to acquire dquot type 0 [ 42.168140][ T3985] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.188: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.182047][ T3985] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.188: Invalid inode bitmap blk 0 in block_group 0 [ 42.195185][ T3985] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 42.203755][ T28] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.218717][ T28] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 0 [ 42.230931][ T3985] EXT4-fs (loop4): 1 orphan inode deleted [ 42.237350][ T3985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.267212][ T3985] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #2: block 16: comm syz.4.188: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 42.296819][ T3985] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 42.318378][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.571683][ T4005] loop1: detected capacity change from 0 to 256 [ 42.588690][ T4002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.195'. [ 42.719716][ T4004] FAULT_INJECTION: forcing a failure. [ 42.719716][ T4004] name failslab, interval 1, probability 0, space 0, times 0 [ 42.732476][ T4004] CPU: 1 UID: 0 PID: 4004 Comm: syz.4.196 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 42.732497][ T4004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 42.732507][ T4004] Call Trace: [ 42.732511][ T4004] [ 42.732517][ T4004] dump_stack_lvl+0xf2/0x150 [ 42.732544][ T4004] dump_stack+0x15/0x1a [ 42.732636][ T4004] should_fail_ex+0x24a/0x260 [ 42.732677][ T4004] ? __se_sys_mount+0xf2/0x2d0 [ 42.732699][ T4004] should_failslab+0x8f/0xb0 [ 42.732722][ T4004] __kmalloc_cache_noprof+0x4e/0x320 [ 42.732740][ T4004] ? memdup_user+0x9f/0xc0 [ 42.732766][ T4004] __se_sys_mount+0xf2/0x2d0 [ 42.732843][ T4004] ? fput+0x1c4/0x200 [ 42.732858][ T4004] ? ksys_write+0x176/0x1b0 [ 42.732922][ T4004] __x64_sys_mount+0x67/0x80 [ 42.732942][ T4004] x64_sys_call+0x2c84/0x2dc0 [ 42.732960][ T4004] do_syscall_64+0xc9/0x1c0 [ 42.733049][ T4004] ? clear_bhb_loop+0x55/0xb0 [ 42.733068][ T4004] ? clear_bhb_loop+0x55/0xb0 [ 42.733087][ T4004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.733106][ T4004] RIP: 0033:0x7f9018c7cde9 [ 42.733197][ T4004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.733210][ T4004] RSP: 002b:00007f90172e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.733225][ T4004] RAX: ffffffffffffffda RBX: 00007f9018e95fa0 RCX: 00007f9018c7cde9 [ 42.733234][ T4004] RDX: 0000400000000100 RSI: 0000400000000500 RDI: 0000000000000000 [ 42.733243][ T4004] RBP: 00007f90172e1090 R08: 0000400000000a40 R09: 0000000000000000 [ 42.733251][ T4004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.733260][ T4004] R13: 0000000000000000 R14: 00007f9018e95fa0 R15: 00007ffc516ac318 [ 42.733310][ T4004] [ 43.023016][ T4012] loop3: detected capacity change from 0 to 512 [ 43.037179][ T4013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.198'. [ 43.056187][ T4012] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 43.064159][ T4012] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 43.100655][ T4012] System zones: 0-1, 15-15, 18-18, 34-34 [ 43.116653][ T4012] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.123079][ T4012] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 43.137715][ T4012] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 43.145274][ T4012] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.199: bad orphan inode 16 [ 43.151013][ T4012] ext4_test_bit(bit=15, block=18) = 1 [ 43.160790][ T4012] is_bad_inode(inode)=0 [ 43.160799][ T4012] NEXT_ORPHAN(inode)=0 [ 43.160805][ T4012] max_ino=32 [ 43.160810][ T4012] i_nlink=2 [ 43.161698][ T4012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.269828][ T4032] netlink: 68 bytes leftover after parsing attributes in process `syz.4.207'. [ 43.344090][ T4040] loop0: detected capacity change from 0 to 512 [ 43.361277][ T4040] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.208: corrupted xattr block 255: invalid header [ 43.751435][ T4040] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 43.760563][ T4040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.774092][ T4040] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.208: corrupted xattr block 255: invalid header [ 43.788724][ T4040] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 43.796196][ T4040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.818478][ T4040] loop0: detected capacity change from 0 to 512 [ 43.832149][ T4040] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.842435][ T4040] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 44.004689][ T4067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.008957][ T4069] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4069 comm=syz.4.218 [ 44.013322][ T4067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.025552][ T4069] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4069 comm=syz.4.218 [ 44.103899][ T4077] loop1: detected capacity change from 0 to 512 [ 44.111140][ T4077] EXT4-fs: Ignoring removed orlov option [ 44.118831][ T4077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.138809][ T4077] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.145581][ T4077] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.222: bg 0: block 248: padding at end of block bitmap is not set [ 44.160846][ T4077] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.222: Failed to acquire dquot type 1 [ 44.172560][ T4077] EXT4-fs (loop1): 1 truncate cleaned up [ 44.179724][ T4077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.260575][ T3868] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.271852][ T3868] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.283138][ T3868] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.295260][ T3868] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.322522][ T4077] syz.1.222 (4077) used greatest stack depth: 9280 bytes left [ 44.371226][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.411747][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.435466][ T4088] loop1: detected capacity change from 0 to 512 [ 44.468540][ T4091] xt_TPROXY: Can be used only with -p tcp or -p udp [ 44.504607][ T4088] binfmt_misc: register: failed to install interpreter file ./file2 [ 44.562151][ T4099] process 'syz.3.229' launched '/dev/fd/3' with NULL argv: empty string added [ 44.585371][ T4103] delete_channel: no stack [ 44.590114][ T4103] delete_channel: no stack [ 44.594968][ T4103] delete_channel: no stack [ 44.599748][ T4103] delete_channel: no stack [ 44.604395][ T4103] delete_channel: no stack [ 44.609186][ T4103] delete_channel: no stack [ 44.616618][ T4104] loop1: detected capacity change from 0 to 512 [ 44.623411][ T4103] delete_channel: no stack [ 44.628248][ T4103] delete_channel: no stack [ 44.638521][ T4103] delete_channel: no stack [ 44.645470][ T4103] delete_channel: no stack [ 44.650056][ T4104] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.658405][ T4104] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.665811][ T4103] delete_channel: no stack [ 44.670350][ T4103] delete_channel: no stack [ 44.675195][ T4103] delete_channel: no stack [ 44.679916][ T4104] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.228: invalid indirect mapped block 256 (level 2) [ 44.694201][ T4103] delete_channel: no stack [ 44.698794][ T4103] delete_channel: no stack [ 44.703318][ T4103] delete_channel: no stack [ 44.709433][ T4104] EXT4-fs (loop1): 2 truncates cleaned up [ 44.728493][ T4103] delete_channel: no stack [ 44.735940][ T4104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.756701][ T4103] delete_channel: no stack [ 44.761370][ T4103] delete_channel: no stack [ 44.769265][ T4103] delete_channel: no stack [ 44.780833][ T4104] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 13: comm syz.1.228: lblock 0 mapped to illegal pblock 13 (length 1) [ 44.796487][ T4103] delete_channel: no stack [ 44.805554][ T4103] delete_channel: no stack [ 44.814394][ T4103] delete_channel: no stack [ 44.821275][ T4103] delete_channel: no stack [ 44.827472][ T4103] delete_channel: no stack [ 44.832233][ T4103] delete_channel: no stack [ 44.849441][ T4104] Zero length message leads to an empty skb [ 44.861319][ T4103] delete_channel: no stack [ 44.867423][ T4103] delete_channel: no stack [ 44.872125][ T4103] delete_channel: no stack [ 44.877394][ T4103] delete_channel: no stack [ 44.882472][ T4103] delete_channel: no stack [ 44.887389][ T4103] delete_channel: no stack [ 44.892204][ T4103] delete_channel: no stack [ 44.897076][ T4103] delete_channel: no stack [ 44.901878][ T4103] delete_channel: no stack [ 44.907005][ T4103] delete_channel: no stack [ 44.911875][ T4103] delete_channel: no stack [ 44.916748][ T4103] delete_channel: no stack [ 44.925132][ T4103] delete_channel: no stack [ 44.929958][ T4103] delete_channel: no stack [ 44.934868][ T4103] delete_channel: no stack [ 44.940373][ T4103] delete_channel: no stack [ 44.945673][ T4103] delete_channel: no stack [ 44.950464][ T4103] delete_channel: no stack [ 44.956258][ T4103] delete_channel: no stack [ 44.961036][ T4103] delete_channel: no stack [ 44.967307][ T4103] delete_channel: no stack [ 44.972576][ T4103] delete_channel: no stack [ 44.984144][ T4103] delete_channel: no stack [ 44.991943][ T4103] delete_channel: no stack [ 44.997441][ T4103] delete_channel: no stack [ 45.002490][ T4103] delete_channel: no stack [ 45.007872][ T4103] delete_channel: no stack [ 45.012576][ T4103] delete_channel: no stack [ 45.017789][ T4103] delete_channel: no stack [ 45.022593][ T4103] delete_channel: no stack [ 45.027825][ T4103] delete_channel: no stack [ 45.032713][ T4103] delete_channel: no stack [ 45.037916][ T4103] delete_channel: no stack [ 45.042430][ T4103] delete_channel: no stack [ 45.056275][ T4103] delete_channel: no stack [ 45.060901][ T4103] delete_channel: no stack [ 45.066469][ T4103] delete_channel: no stack [ 45.072354][ T4103] delete_channel: no stack [ 45.078133][ T4103] delete_channel: no stack [ 45.082735][ T4103] delete_channel: no stack [ 45.255056][ T4132] vlan2: entered promiscuous mode [ 45.260158][ T4132] bridge0: entered promiscuous mode [ 45.265476][ T4132] vlan2: entered allmulticast mode [ 45.270620][ T4132] bridge0: entered allmulticast mode [ 45.279101][ T4133] netlink: 'syz.4.239': attribute type 18 has an invalid length. [ 45.401005][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.436989][ T4141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 45.458285][ T4140] loop1: detected capacity change from 0 to 512 [ 45.526333][ T4140] EXT4-fs (loop1): 1 orphan inode deleted [ 45.533050][ T4140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.546015][ T40] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 45.559966][ T4140] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.589927][ T4149] rdma_op ffff888137d3c580 conn xmit_rdma 0000000000000000 [ 45.608778][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.713400][ T4163] bond1: entered promiscuous mode [ 45.718557][ T4163] bond1: entered allmulticast mode [ 45.725546][ T4163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.737441][ T4163] bond1 (unregistering): Released all slaves [ 46.054289][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 46.054316][ T29] audit: type=1400 audit(1739576526.112:1150): avc: denied { name_bind } for pid=4181 comm="syz.4.253" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 46.118360][ T4186] loop2: detected capacity change from 0 to 512 [ 46.150517][ T4186] EXT4-fs (loop2): 1 orphan inode deleted [ 46.156964][ T4186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.175186][ T28] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 46.184761][ T4186] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.185164][ T28] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 1 [ 46.242704][ T4195] netlink: 132 bytes leftover after parsing attributes in process `syz.4.258'. [ 46.256839][ T29] audit: type=1400 audit(1739576526.322:1151): avc: denied { create } for pid=4194 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.277567][ T29] audit: type=1400 audit(1739576526.342:1152): avc: denied { connect } for pid=4194 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.298903][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.373984][ T29] audit: type=1400 audit(1739576526.362:1153): avc: denied { write } for pid=4194 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.383848][ T4195] netlink: 60 bytes leftover after parsing attributes in process `syz.4.258'. [ 46.404801][ C0] ================================================================== [ 46.413372][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 46.420059][ C0] [ 46.422388][ C0] read-write to 0xffff888104135568 of 8 bytes by interrupt on cpu 1: [ 46.430456][ C0] can_receive+0x62/0x1f0 [ 46.434788][ C0] canfd_rcv+0xe7/0x180 [ 46.438947][ C0] __netif_receive_skb+0x123/0x280 [ 46.444153][ C0] process_backlog+0x22e/0x440 [ 46.448925][ C0] __napi_poll+0x63/0x3c0 [ 46.453252][ C0] net_rx_action+0x3a1/0x7f0 [ 46.457843][ C0] handle_softirqs+0xbf/0x280 [ 46.462520][ C0] do_softirq+0x5e/0x90 [ 46.466679][ C0] __local_bh_enable_ip+0x6e/0x70 [ 46.471698][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 46.476637][ C0] batadv_nc_purge_paths+0x220/0x270 [ 46.481922][ C0] batadv_nc_worker+0x3db/0xad0 [ 46.486771][ C0] process_scheduled_works+0x4db/0xa20 [ 46.492239][ C0] worker_thread+0x51d/0x6f0 [ 46.496823][ C0] kthread+0x4ae/0x520 [ 46.500888][ C0] ret_from_fork+0x4b/0x60 [ 46.505304][ C0] ret_from_fork_asm+0x1a/0x30 [ 46.510075][ C0] [ 46.512387][ C0] read-write to 0xffff888104135568 of 8 bytes by interrupt on cpu 0: [ 46.520452][ C0] can_receive+0x62/0x1f0 [ 46.524803][ C0] canfd_rcv+0xe7/0x180 [ 46.528957][ C0] __netif_receive_skb+0x123/0x280 [ 46.534069][ C0] process_backlog+0x22e/0x440 [ 46.538829][ C0] __napi_poll+0x63/0x3c0 [ 46.543152][ C0] net_rx_action+0x3a1/0x7f0 [ 46.547735][ C0] handle_softirqs+0xbf/0x280 [ 46.552405][ C0] __irq_exit_rcu+0x3a/0xc0 [ 46.556899][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 46.562534][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 46.568509][ C0] _raw_spin_lock+0x5/0x50 [ 46.572923][ C0] wg_ratelimiter_gc_entries+0x5d/0x340 [ 46.578467][ C0] process_scheduled_works+0x4db/0xa20 [ 46.583958][ C0] worker_thread+0x51d/0x6f0 [ 46.588598][ C0] kthread+0x4ae/0x520 [ 46.592673][ C0] ret_from_fork+0x4b/0x60 [ 46.597097][ C0] ret_from_fork_asm+0x1a/0x30 [ 46.601884][ C0] [ 46.604215][ C0] value changed: 0x0000000000001c1a -> 0x0000000000001c1b [ 46.611315][ C0] [ 46.613640][ C0] Reported by Kernel Concurrency Sanitizer on: [ 46.619775][ C0] CPU: 0 UID: 0 PID: 3373 Comm: kworker/0:3 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 46.630543][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 46.640600][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 46.648242][ C0] ================================================================== [ 46.713347][ T4195] netlink: 60 bytes leftover after parsing attributes in process `syz.4.258'. [ 46.790013][ C1] ================================================================== [ 46.798143][ C1] BUG: KCSAN: data-race in can_send / can_send [ 46.804336][ C1] [ 46.806653][ C1] read-write to 0xffff888104135570 of 8 bytes by interrupt on cpu 0: [ 46.814719][ C1] can_send+0x5b6/0x6d0 [ 46.818894][ C1] bcm_can_tx+0x314/0x420 [ 46.823244][ C1] bcm_tx_timeout_handler+0xea/0x280 [ 46.828543][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 46.833750][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 46.838797][ C1] handle_softirqs+0xbf/0x280 [ 46.843482][ C1] __irq_exit_rcu+0x3a/0xc0 [ 46.848002][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 46.853648][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 46.859639][ C1] __sanitizer_cov_trace_pc+0x31/0x70 [ 46.865017][ C1] get_random_bytes+0x12/0x30 [ 46.869713][ C1] nsim_dev_trap_report_work+0x46b/0x620 [ 46.875363][ C1] process_scheduled_works+0x4db/0xa20 [ 46.880922][ C1] worker_thread+0x51d/0x6f0 [ 46.885718][ C1] kthread+0x4ae/0x520 [ 46.890091][ C1] ret_from_fork+0x4b/0x60 [ 46.895373][ C1] ret_from_fork_asm+0x1a/0x30 [ 46.900250][ C1] [ 46.902669][ C1] read-write to 0xffff888104135570 of 8 bytes by interrupt on cpu 1: [ 46.910948][ C1] can_send+0x5b6/0x6d0 [ 46.915283][ C1] bcm_can_tx+0x314/0x420 [ 46.919655][ C1] bcm_tx_timeout_handler+0xea/0x280 [ 46.925134][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 46.930350][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 46.935643][ C1] handle_softirqs+0xbf/0x280 [ 46.940362][ C1] run_ksoftirqd+0x1c/0x30 [ 46.944785][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 46.949737][ C1] kthread+0x4ae/0x520 [ 46.953872][ C1] ret_from_fork+0x4b/0x60 [ 46.958310][ C1] ret_from_fork_asm+0x1a/0x30 [ 46.963085][ C1] [ 46.965405][ C1] value changed: 0x0000000000001c92 -> 0x0000000000001c93 [ 46.972781][ C1] [ 46.975189][ C1] Reported by Kernel Concurrency Sanitizer on: [ 46.981352][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 46.991971][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 47.002070][ C1] ================================================================== [ 47.012967][ C0] ================================================================== [ 47.021059][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 47.027747][ C0] [ 47.030084][ C0] read-write to 0xffff888104135508 of 8 bytes by interrupt on cpu 1: [ 47.038156][ C0] can_receive+0x4e/0x1f0 [ 47.042495][ C0] canfd_rcv+0xe7/0x180 [ 47.046654][ C0] __netif_receive_skb+0x123/0x280 [ 47.051788][ C0] process_backlog+0x22e/0x440 [ 47.056578][ C0] __napi_poll+0x63/0x3c0 [ 47.061052][ C0] net_rx_action+0x3a1/0x7f0 [ 47.065738][ C0] handle_softirqs+0xbf/0x280 [ 47.070467][ C0] do_softirq+0x5e/0x90 [ 47.074631][ C0] __local_bh_enable_ip+0x6e/0x70 [ 47.079659][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 47.084623][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 47.090401][ C0] process_scheduled_works+0x4db/0xa20 [ 47.095891][ C0] worker_thread+0x51d/0x6f0 [ 47.100502][ C0] kthread+0x4ae/0x520 [ 47.104591][ C0] ret_from_fork+0x4b/0x60 [ 47.109031][ C0] ret_from_fork_asm+0x1a/0x30 [ 47.113809][ C0] [ 47.116132][ C0] read-write to 0xffff888104135508 of 8 bytes by interrupt on cpu 0: [ 47.124201][ C0] can_receive+0x4e/0x1f0 [ 47.128535][ C0] canfd_rcv+0xe7/0x180 [ 47.132691][ C0] __netif_receive_skb+0x123/0x280 [ 47.137812][ C0] process_backlog+0x22e/0x440 [ 47.142683][ C0] __napi_poll+0x63/0x3c0 [ 47.147102][ C0] net_rx_action+0x3a1/0x7f0 [ 47.151705][ C0] handle_softirqs+0xbf/0x280 [ 47.156399][ C0] __irq_exit_rcu+0x3a/0xc0 [ 47.160922][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 47.166567][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 47.172574][ C0] __tsan_read8+0x4/0x180 [ 47.176931][ C0] kernfs_find_ns+0xae/0x1a0 [ 47.181624][ C0] kernfs_find_and_get_ns+0x55/0xb0 [ 47.186837][ C0] sysfs_unmerge_group+0x36/0xb0 [ 47.191779][ C0] pm_qos_sysfs_remove_resume_latency+0x1c/0x30 [ 47.198039][ C0] dev_pm_qos_constraints_destroy+0x2a/0x3b0 [ 47.204046][ C0] dpm_sysfs_remove+0x54/0x90 [ 47.208726][ C0] device_del+0x134/0x780 [ 47.213066][ C0] rfkill_unregister+0x80/0x170 [ 47.215707][ T4195] netlink: 60 bytes leftover after parsing attributes in process `syz.4.258'. [ 47.217916][ C0] nfc_unregister_device+0x52/0x130 [ 47.228157][ T4195] netlink: 60 bytes leftover after parsing attributes in process `syz.4.258'. [ 47.231958][ C0] nci_unregister_device+0x14c/0x160 [ 47.246183][ C0] virtual_ncidev_close+0x2a/0x50 [ 47.251216][ C0] __fput+0x2ac/0x640 [ 47.255289][ C0] ____fput+0x1c/0x30 [ 47.259280][ C0] task_work_run+0x13a/0x1a0 [ 47.263885][ C0] do_exit+0x5d8/0x17f0 [ 47.268064][ C0] do_group_exit+0x102/0x150 [ 47.272765][ C0] get_signal+0xeb9/0x1000 [ 47.277190][ C0] arch_do_signal_or_restart+0x95/0x4b0 [ 47.282771][ C0] syscall_exit_to_user_mode+0x62/0x120 [ 47.288331][ C0] do_syscall_64+0xd6/0x1c0 [ 47.292842][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.298769][ C0] [ 47.301107][ C0] value changed: 0x0000000000007655 -> 0x0000000000007656 [ 47.308223][ C0] [ 47.310542][ C0] Reported by Kernel Concurrency Sanitizer on: [ 47.316692][ C0] CPU: 0 UID: 0 PID: 4067 Comm: syz.0.208 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 47.327285][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 47.337345][ C0] ================================================================== [ 47.382617][ T4198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.259'. [ 47.392384][ T29] audit: type=1400 audit(1739576527.442:1154): avc: denied { ioctl } for pid=4197 comm="syz.2.259" path="socket:[7005]" dev="sockfs" ino=7005 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1