last executing test programs: 6m2.762993948s ago: executing program 4 (id=2144): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="28000000120001002dbd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="014200008000000008001300", @ANYRES32=0x0, @ANYBLOB="94706afa187b76a4bbbde12f9802419f90f38d64b912a3e1e731656386cde96c44d906d231e38f1566c81d6cd01ba4b2db7629832d254ce171ade7c456964b4a097c214ed9377cbcfeb5d35ba0699cfcb317860d4aa16e9038edf378b467409fc380042d10c12d0d9a7f0fb543281fd54a14369f0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 6m2.619401901s ago: executing program 4 (id=2148): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r5, 0x121500) close_range(r4, 0xffffffffffffffff, 0x0) 6m1.969007304s ago: executing program 4 (id=2153): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000000c0)='kfree\x00', r4, 0x0, 0x8000}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000009500"/24], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r6, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 6m1.922372815s ago: executing program 4 (id=2156): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="580000000206010800000000000000000a0000000900020073797a320000000005000400000000000c0007800500150005000000050005000a00000014000300686173683a69702c706f72742c69700005000100070000007dc6e3ef10e063b9787bd3e57e26c73e4400afac6226c4ed5dcd3d1aea11776bc6715a082fed76004e09a6c65addfbc718e002b31465611c9f7e869e5ae9312172a626f05b"], 0x58}}, 0x84000) r4 = syz_open_procfs(0x0, &(0x7f00000041c0)='net/packet\x00') bpf$ENABLE_STATS(0x20, &(0x7f0000001980), 0x4) preadv(r4, &(0x7f0000004300)=[{&(0x7f0000004200)=""/221, 0xdd}], 0x1, 0x10001, 0xfffffffd) pwritev(r2, &(0x7f0000001900)=[{&(0x7f00000013c0)="b2a36cdfb50ebd549d79fd958eccdfabe02dd6871d7def9ec00ca711096aefa213b3dbee29c2a76a5df58968da4c3183cafb39f6ce04bdbb8e9ce4042b42fff6fe0e71bd12e723652339b83446e8f7af64d5914f921fda2bfb2f1a4977b6b3f8f8d33e0e3e9dd3c908a348d6010df865c789ef4040800eb14033ccb94ba75b76a9ecb00b5024f5157f1af6304b41971699b0d671d1b2045f425f2b3c1d72a789e8938f2d0127523de0d664fe32bd30e3799c271b75aed348e4e5cc50f56d20aaacb21dd6963a81d3676dea2c6b8af5ece8fa52c4921a8052a2d7c428ae240232d1d07ef39d2c2f36eabdd4421201ea195e72a2", 0xf3}, {&(0x7f00000014c0)="6f485300e383aaa954ab199f1a9ed111f629e47e745c71dae2146a8733f873c30ab7f2502c4bd715ff7aff1a227489bfc4007ca91182db0703bbd97787a5e2a94f7570a492993a5d6cedd377d02eb82fc15c088244088779f93ab5af3c31cf9cd90100e743c137fa8b3ebf350b9288f2909ae3d8e64b6009faa0aac71942985c94ecb55eeb447a2f4458f8aaf5bcc5dc20c4cd03b9165dc04dd3e16142c3f2beabd09f51dbea2e9a65053d2fbe5e152da9b5b908c93c0cab250117438401", 0xbe}, {&(0x7f0000001580)="134104b19c5b9cc2aaf6a6c3b1c12c33b0b3e8566604d6ff7009ae2e6220490221c64607945a56a156ed7271b41621572c7e088d4a8f665312d0d774eccb6d7cc314e2ac5a911e49990e31397705a8d8fbced7392c21fd92a2676814776bd316241f3b63e68b3563e90174ce3034d13e321f3099a9ea2fd5594acf5cead175ef40efe4434582398a5b1a769a4f7e933d5a5862fa3347759bd5964ec8183587506fa9819ce9ffd46cabde228ef2408cf0767bfe7dd18e16a66c6b96bd280f779051a68beaefb550ab0e5486b543043fc6f1e23ec7c690abb20f5432a0c4c18298af60", 0xe2}, {&(0x7f0000001680)="595cb64ce2531f55aa1523cf09578621d2264ac9dacf7e517df059a5e5d35141f3bfa41dd55652c29ee790ebb68adbb2a954018933e5e70332cfdd74e480a1a10d5f4da95db9ba7f86155e823bbc7653d5f26d3b07c3e343671a819a8caa45abbd37ef3ba65f0575131dab5d9a79e0df17c201c235364cae25d9f1bde09a272f9a42a83f55853faab2eda67d920968ce7181224ce35439614bb523e00ae45847cdec61a629c8c3f91701abd9fec32756476c52e8cebceb0f0eeddb915b3ce6a5dc9c21b575b0ec9a292cb134ed1ede0dc4e2e8d733111a01b64a43e3c7a74a55e78d90a586", 0xe5}, {&(0x7f0000001780)="e8d4770cfbb80dc6f6b80c8585dc2b98ed54b4379574d80223fc998687246059f382dea032a5ba8e5e52976bfb1e85eef1831724b64d19bd1b5e640affe56107430d8a3c7dcb1e", 0x47}, {&(0x7f0000001800)="604fe5ef98ea1e32d4464aa2ce55e2edacf93429a2ace05394ab779d96ff615b332e0b9f7dac3d32e6fdd316a7a5ed3af7ab6bc621f97110d03aa256e65256e339067f2a61193cf630ed614b153c7bda6cf769f8e80dda5989a4a536002b069ab2b1ed83e85ff3b40e6dc39a9dc32412d80fbe55084f83a2e2a2e9972fe7ae20ff317e9db58e6793c4c0bcaa1db8749106611a0734f1b8e6e8a968956807a26f3e891d8927586d3f50d07051046a4327cbea4c02414fd3f47c631360503584bde6db75e378dcbdd71466f13efe90ff811326fb202ba92b2bae0d9990a82077bfd12fd4503d96e143f18822cf8fb9", 0xee}], 0x6, 0x9a0, 0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$cgroup_procs(r6, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="18808c51f0a4c847ab694614002491350861cb89760085bc068582baef4bd01623756092cb7342367aa23782019ea27d49aa6b7fcfdac259529f72498ceeb17f9ea179817e2cb1c1480dc53e11067fa51e66fff5d78565eef0396aec361dcec3", 0x60}, {&(0x7f0000001300)="460aa81eada9a164b8b2bb96264525906c620d87a45cf7b159c56a10cf8eb3598d5af071e5c5bbc10423da375d690579122d2689a5b685dd6a037099b3e0914f5f017b4449b2c79ff2de9aa92eeb176001897762518f3cac2c66b58566b72e109d06a36ed7d04f93def8ef864e0b48aff5d3c6d49033198c858339489d53e94dbc4f745ccd01042df557e472", 0x8c}, {&(0x7f00000001c0)="4b5240bfa1d07d5af018a88b5017f22d4a7084930ddd50f665f0b185f91fdb493839cc2dd54f85155a4800e8be81b4d0404d4de3b702d0", 0x37}, {&(0x7f0000000300)="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", 0x1000}], 0x4, 0x8, 0x449d) 6m1.6710673s ago: executing program 4 (id=2161): syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cgroup.max.descendants\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa20000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f}, 0x24}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r2 = gettid() r3 = socket(0x40000000015, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, &(0x7f0000000540)=[{}], 0x8, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0xa, 0x6}, 0x0, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r7}}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) 6m1.609639591s ago: executing program 4 (id=2162): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6m1.530658222s ago: executing program 32 (id=2162): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4m0.872067494s ago: executing program 3 (id=3654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff5b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) gettid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') fcntl$notify(r3, 0x402, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x9, 0xffffffffffffffff, 'id0\x00'}) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, 0x2000000}, 0x10) close(r5) 4m0.815075236s ago: executing program 3 (id=3656): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r3, 0x121500) close_range(r2, 0xffffffffffffffff, 0x0) 3m59.940585733s ago: executing program 3 (id=3663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) 3m59.907828584s ago: executing program 3 (id=3666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="45705cd4762fbb7a534b5ba986fc", 0x0, 0x100a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0xd, 0x7, 0x2, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x6, 0xfffffffd}}) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3m59.821070565s ago: executing program 3 (id=3671): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x30, 0x0, 0x1000000) setreuid(0xee01, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000492c000000f6ffffffffffff171185a5503f0000ec340236bbb57c792399d484d261fad27914c28763fabbff5d121370f79488293845a3455a1db510ec782cb6a991179c940de0e1c78e45bfddb08a3129c4fb862e22b7c50e89da29e28226def6a33df984d764b52f4f2c02f79e99d01dc639a170f28833c384b77e02dd4ad0ceb66d898a96f95a2442da0fc8b894f19ba0b8379347ddae9e65fbc1476da76af563d7c454ffa3bb502131afc3a9858eefc5c023cdd43381", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r4, 0xffffffffffffffff, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xfffffffffffffff5]}, 0x8, 0x800) epoll_pwait2(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={[0x6]}, 0x8) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x10, 0x70bd25, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x801) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f00000ed000/0x4000)=nil) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x4000810) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fddbdf25010000000c0006000200000000000000080001000300000008000300", @ANYRES32, @ANYBLOB="080001000200000008000300", @ANYRES32=r9, @ANYBLOB="08a467891df465c5e09649a3b1ce60000300", @ANYRES32=r10, @ANYBLOB="0c00060003000000000000000c0006000100000001000000"], 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x24048084) 3m59.065656379s ago: executing program 3 (id=3678): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {0x0}], 0x2) (fail_nth: 2) 3m44.005079142s ago: executing program 33 (id=3678): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {0x0}], 0x2) (fail_nth: 2) 3m30.386609006s ago: executing program 6 (id=4014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x23, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 3m30.353162707s ago: executing program 6 (id=4015): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2, 0xd7, 0x90, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = socket$netlink(0x10, 0x3, 0x0) close(r0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 3m30.230063839s ago: executing program 6 (id=4016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (fail_nth: 4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m29.66286305s ago: executing program 6 (id=4027): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x79) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@minixdf}, {@usrjquota}, {@oldalloc}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000000a00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r4 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000100)='stack\x00') capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x1ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}]}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, 0x0, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0xfffe, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r5, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x87, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x15, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x3d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x5, 0xc7, &(0x7f00000006c0)=""/199, 0x41000, 0x31, '\x00', 0x0, @fallback=0x35, r6, 0x8, &(0x7f00000007c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x4, 0xd2f, 0xf6}, 0x10, r8, r1, 0x3, &(0x7f0000001140)=[r3, r5, r0], &(0x7f0000001180)=[{0x1, 0x1, 0xf, 0xb}, {0x1, 0x5, 0xc, 0x7}, {0x5, 0x4, 0xa, 0x2}], 0x10, 0x8}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0x6, 0x7, 0x8, 0x1d, 0x96f3, 0x1}, &(0x7f0000000400)=0x9c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000030000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r10}, 0x18) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) pivot_root(0x0, 0x0) pwrite64(r3, &(0x7f0000000880)='u', 0x1, 0x83) 3m29.447929794s ago: executing program 6 (id=4035): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x1e, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0xe, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0x6, 0x4, 0x8, 0xfffffffffffffff0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x1, 0x7, 0x7, 0x6, 0xfffffffffffffffc}, @generic={0xff, 0x3, 0xc, 0x7, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x10000, 0x4b, &(0x7f0000000380)=""/75, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xb, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[{0x0, 0x5, 0x10, 0x3}, {0x5, 0x3, 0x10}, {0x0, 0x2, 0x7, 0xb}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x10000000000039e4}, 0x18) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x200000, 0x10}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = open$dir(&(0x7f0000000200)='./file0\x00', 0x410280, 0x160) renameat(r4, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00') r6 = syz_io_uring_setup(0xb83, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m28.827938537s ago: executing program 6 (id=4049): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x20000, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x0, 0xd}, {0x8, 0xfff1}}}, 0x24}}, 0x0) 3m28.827689547s ago: executing program 34 (id=4049): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x20000, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x0, 0xd}, {0x8, 0xfff1}}}, 0x24}}, 0x0) 2m0.350096223s ago: executing program 7 (id=5408): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cgroup.max.descendants\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f}, 0x24}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r2 = gettid() r3 = socket(0x40000000015, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, &(0x7f0000000540)=[{}], 0x8, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r7}}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1m59.452960711s ago: executing program 7 (id=5427): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) io_submit(0x0, 0x0, 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x1c, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000180)={0x2, 0x8000746, 0x64, 0x0, 0xd}) (async, rerun: 32) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800006b21000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) (rerun: 32) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01f8def1e16764f44e00005500000000", @ANYRES16=r1, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="0000000001"], 0x80}}, 0x1) 1m59.368889313s ago: executing program 7 (id=5430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x105}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="a0002e7577d4017a", 0x8}], 0x1, &(0x7f00000005c0)=ANY=[], 0xd}}], 0x1, 0x4000880) 1m59.352371873s ago: executing program 7 (id=5433): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x81ce8, 0xfffffffc, 0x49a7, 0x3, 0x4, 0x1, 0x0, 0x6}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200b703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r3 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000280)={[{@nodioread_nolock}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x7ffff000) fallocate(r4, 0x10, 0x3ff, 0x1001f0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES64=r3, @ANYRES16=r3, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800200053eaef1a5c939be940890e2d334535668ff0a13c7e195cfd87ad46c4788fc17cf2f41169d6455289da017b7a1cb484802f9507fcaa45d3678822b0d561edb73bf4a6b14672cbd1284908346a314d9f9b10521a44a05aa47e951409019406246c31a020ffd9536f883fd354c02ec1925f010000d916b7eab63e3621f6ffea2a554edbe3f2aa574ef7b3c2584c1c4a7c9e242af14583fd94b1f3cd84e62443ed56ac8d47f439f484", @ANYRES16=r9, @ANYBLOB="010026bd7000ffdbdf254b000000080003003f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4a1}, 0x40040) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) move_pages(r10, 0x2, &(0x7f0000000080)=[&(0x7f0000799000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f00000000c0)=[0x6, 0x6, 0xd2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m59.01744906s ago: executing program 7 (id=5447): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa1000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) lgetxattr(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00', 0x0, 0x0) 1m58.775302064s ago: executing program 7 (id=5454): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="b4635c39ecef396024ee8a4dd16c49e5a5a9cc7bce185833bfe1deb3e03d477f739590e8525816d5ff85b3a02fd0ec29e2f91d7b2d940b8810ad0d404bf7e60adb8414f916f7cfc398566c879d82ec76e7adf1c5a78822c2174748903850e8bfb1c5595f1018778876933e21a58eb78fa7836d2e60d2f041ab3959ee761e18f525721e41cea7fb96deddf23030549f4ea5499f4d89672578503d53ad5f0ca6f99c60e0164f93ba7c8f2b271dff8b9749503fe92225636b9e21319c48c35de1fa43bbfc35e5a1d2a5b64a0c0f5f9fc991933322c279ba6b8f68b09721ff49d7497503b3f825"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1m58.774283915s ago: executing program 35 (id=5454): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="b4635c39ecef396024ee8a4dd16c49e5a5a9cc7bce185833bfe1deb3e03d477f739590e8525816d5ff85b3a02fd0ec29e2f91d7b2d940b8810ad0d404bf7e60adb8414f916f7cfc398566c879d82ec76e7adf1c5a78822c2174748903850e8bfb1c5595f1018778876933e21a58eb78fa7836d2e60d2f041ab3959ee761e18f525721e41cea7fb96deddf23030549f4ea5499f4d89672578503d53ad5f0ca6f99c60e0164f93ba7c8f2b271dff8b9749503fe92225636b9e21319c48c35de1fa43bbfc35e5a1d2a5b64a0c0f5f9fc991933322c279ba6b8f68b09721ff49d7497503b3f825"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 3.725967168s ago: executing program 2 (id=7225): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x1000000000000000) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) 3.630249729s ago: executing program 0 (id=7228): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000e9000000000000000095000000000000006f38cad7eea4116c8c5aac0b982c6816f09ca78ddbf69012d54c28ebec4af86a38670d982a51e83689d51e63f383548b53fc25abb9df7481375488a9125c94b216d13314850fda82070f3115ac9963a058e68fd71d47c028020eaf28170b67c29bfc1800d36c8c6af49afd82d318f6bf6c800c93d81be4b6d4c4d86d300c001ab7774ba7688db1483ed0b073f7f10794e9fba964cdff8f9c54cea91ad829383b4fede6031c9a34d0ef95efe247caef987e92c5ed04435c120d9363a1d5ce118657e5667abd44937e"], &(0x7f0000000780)='GPL\x00', 0x5, 0xffffffffffffff01, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x1, 0x249}, &(0x7f0000000040), &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd, 0x0, 0x0, 0x7, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 2.992741112s ago: executing program 0 (id=7236): syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cgroup.max.descendants\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa2000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f}, 0x24}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r2 = gettid() r3 = socket(0x40000000015, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, &(0x7f0000000540)=[{}], 0x8, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r7}}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2.868596684s ago: executing program 2 (id=7237): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0x0, "47c66f8f63f0bd753d0da2ade98f5e41691a9415522d84ea245fd82275a15a9d", 0x9, 0x0, 0x400, 0x2}, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@private0, r3}, 0x14) sendto$inet6(r2, &(0x7f00000006c0)="800034ca269bb73c", 0x8, 0x400c830, &(0x7f0000000040)={0xa, 0x4e21, 0xc9, @local}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.261099316s ago: executing program 8 (id=7242): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) bind$tipc(r4, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.240802286s ago: executing program 8 (id=7243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 2.155388848s ago: executing program 8 (id=7244): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r4, 0x121500) close_range(r3, 0xffffffffffffffff, 0x0) 2.107879839s ago: executing program 0 (id=7245): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xd}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) unshare(0x28000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x4a, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 1.972735131s ago: executing program 0 (id=7247): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) readahead(r1, 0x80000001, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000680)=0x2) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}]}) pwritev(r4, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000000)=""/83, &(0x7f0000000080)=0x53) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 1.922507333s ago: executing program 0 (id=7248): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)="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", 0x1c0, 0xc0}, 0x81) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r1}, 0x38) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x8010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r4, 0x58, &(0x7f0000000300)}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) keyctl$search(0xa, r2, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.785460725s ago: executing program 2 (id=7249): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f26) 1.753236356s ago: executing program 2 (id=7250): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_adjtime(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x18) 1.53210255s ago: executing program 5 (id=7253): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x15, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x105}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="a0002e7577d4017a", 0x8}], 0x1, 0x0, 0xd}}], 0x1, 0x4000880) 1.418958063s ago: executing program 5 (id=7254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 1.363407584s ago: executing program 5 (id=7255): syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cgroup.max.descendants\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa2000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f}, 0x24}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r2 = gettid() r3 = socket(0x40000000015, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, &(0x7f0000000540)=[{}], 0x8, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r7}}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1.323171864s ago: executing program 1 (id=7256): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) bind$tipc(r4, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.320627364s ago: executing program 8 (id=7257): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x1000000000000000) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) 1.303717515s ago: executing program 1 (id=7258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x0, 0x1}, {0x8}}}, 0x24}}, 0x10) 1.233182196s ago: executing program 1 (id=7259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x8000, 0x5, 0x9, 0x0, 0x7]}, &(0x7f0000000300)=0x78) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SCSI_IOCTL_START_UNIT(r7, 0x5309) unshare(0x2c020400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000006c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) accept(r7, &(0x7f00000003c0)=@tipc, &(0x7f0000000440)=0x80) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@ifindex, r8, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r8, r10, 0x2f, 0x10, 0x4, @void, @value=r8}, 0x20) syz_read_part_table(0x5a6, &(0x7f0000000b40)="$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") 1.182152177s ago: executing program 1 (id=7260): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f26) 1.168134897s ago: executing program 1 (id=7261): syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cgroup.max.descendants\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f}, 0x24}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r2 = gettid() r3 = socket(0x40000000015, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, &(0x7f0000000540)=[{}], 0x8, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0xa, 0x6}, 0x0, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}}}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) 907.979433ms ago: executing program 2 (id=7262): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 774.191065ms ago: executing program 0 (id=7263): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe7e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x10000000, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff4}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES8, @ANYRES32=r7, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESHEX=r0], 0x0, 0x58, 0x0, 0x0, 0x0, 0x10000, @value=r7}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000035e000/0x4000)=nil, 0x4000, 0x9, 0xb, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 537.707749ms ago: executing program 5 (id=7264): getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@getqdisc={0x30, 0x26, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1, 0xffff}, {0x3, 0xf}, {0xe, 0x5}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x4004050) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fcffffff00000000490000000800010070636900110002003030308ac3771e578e05300800000031302e3000001000986ed5cb16b6e59972d1c1a9c7a09b9cc6004af88e86dfc13e12df17421a1b07015bed48f84373c954a4e22f1d9d408b6019a76d3eff0276c7dfa5bcb7d15c0a631cd740ca66ded32be629c731e5c4ce"], 0x30}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) r6 = memfd_create(&(0x7f0000000600)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc', 0xe) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)) (async) fchmod(r6, 0x6) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r5, 0x0, 0x9}, 0x18) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) (async) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x29b2, 0x4000, 0x3, 0x400250}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) 467.209221ms ago: executing program 5 (id=7265): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) mknod$loop(0x0, 0x6000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x2f, 0xfa, 0x9, 0xa7, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x0, 0x80, 0x8f, 0x8}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r5, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x1a, r7, 0x1, 0x8, 0x6, @broadcast}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x128, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4008000}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ec04f5a8321fd1d820689a0d6272b8be0e6a5110c2d1e264f7ccd450a52c6d89d7f712207e9db791ca79b72c5ea8e1395cd853e08fc2415d6f28f24d14831996df43177ff6fee6a4cba37f1e957c011f0929127f848b01007b5308527907cc2aa149926e289cfee680fef8cffcc95c6ab6512670fd3dac324ddb1de09bf622ace4bd1a4f691ae4fb85a5fec542b7196e3a0980ee820d3a04a2aef19f628806f90c84ec0309ca47eab071deb19c5723a5189d591f73c55bbea234ecdc436c2bf2d3627df7e813f537b38177c86ddbaca27f13f3"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r9 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 458.822511ms ago: executing program 8 (id=7266): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xd}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) unshare(0x28000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x4a, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX]) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 450.417841ms ago: executing program 5 (id=7267): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r4, 0x121500) close_range(r3, 0xffffffffffffffff, 0x0) 336.976713ms ago: executing program 8 (id=7268): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000e9000000000000000095000000000000006f38cad7eea4116c8c5aac0b982c6816f09ca78ddbf69012d54c28ebec4af86a38670d982a51e83689d51e63f383548b53fc25abb9df7481375488a9125c94b216d13314850fda82070f3115ac9963a058e68fd71d47c028020eaf28170b67c29bfc1800d36c8c6af49afd82d318f6bf6c800c93d81be4b6d4c4d86d300c001ab7774ba7688db1483ed0b073f7f10794e9fba964cdff8f9c54cea91ad829383b4fede6031c9a34d0ef95efe247caef987e92c5ed04435c120d9363a1d5ce118657e5667abd44937e"], &(0x7f0000000780)='GPL\x00', 0x5, 0xffffffffffffff01, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x1, 0x249}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd, 0x0, 0x0, 0x7, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 189.462956ms ago: executing program 2 (id=7269): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 0s ago: executing program 1 (id=7270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x8000, 0x5, 0x9, 0x0, 0x7]}, &(0x7f0000000300)=0x78) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SCSI_IOCTL_START_UNIT(r7, 0x5309) unshare(0x2c020400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000006c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) accept(r7, &(0x7f00000003c0)=@tipc, &(0x7f0000000440)=0x80) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@ifindex, r8, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r8, r10, 0x2f, 0x10, 0x4, @void, @value=r8}, 0x20) syz_read_part_table(0x5a6, &(0x7f0000000b40)="$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") kernel console output (not intermixed with test programs): [T25816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6350'. [ 443.698679][T25822] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6351'. [ 443.713453][T25822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6351'. [ 443.752570][T25824] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 444.002355][T25841] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6360'. [ 444.051922][T25847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6363'. [ 444.061653][T25847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6363'. [ 444.081230][T25845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6362'. [ 444.094806][T25851] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 444.373281][T25868] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6371'. [ 444.521656][T25876] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6375'. [ 444.596564][T25879] loop8: detected capacity change from 0 to 1024 [ 444.622862][T25879] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.650682][T25886] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 444.701338][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.202354][T25925] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 445.476590][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 445.476605][ T29] audit: type=1326 audit(1758087787.724:22619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25948 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 445.506605][ T29] audit: type=1326 audit(1758087787.724:22620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25948 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 445.530415][ T29] audit: type=1326 audit(1758087787.724:22621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25948 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 445.554051][ T29] audit: type=1326 audit(1758087787.724:22622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25948 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 445.577688][ T29] audit: type=1326 audit(1758087787.724:22623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25948 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 445.601382][ T29] audit: type=1326 audit(1758087787.724:22624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25948 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 445.625075][ T29] audit: type=1326 audit(1758087787.724:22625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25948 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 445.648803][ T29] audit: type=1326 audit(1758087787.724:22626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25948 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 445.672521][ T29] audit: type=1326 audit(1758087787.724:22627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25948 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 445.696208][ T29] audit: type=1326 audit(1758087787.724:22628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25948 comm="syz.2.6403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 445.790276][T25952] loop8: detected capacity change from 0 to 1024 [ 445.815917][T25952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.899330][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.911146][T25968] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 446.311054][T26002] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 446.852772][T26034] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 447.176464][T26059] loop8: detected capacity change from 0 to 1024 [ 447.191957][T26059] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.207366][T26063] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 447.291423][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.675373][T26096] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 448.328094][T26064] syz.0.6441 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 448.342291][T26064] CPU: 1 UID: 0 PID: 26064 Comm: syz.0.6441 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 448.342321][T26064] Tainted: [W]=WARN [ 448.342328][T26064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 448.342348][T26064] Call Trace: [ 448.342353][T26064] [ 448.342359][T26064] __dump_stack+0x1d/0x30 [ 448.342377][T26064] dump_stack_lvl+0xe8/0x140 [ 448.342451][T26064] dump_stack+0x15/0x1b [ 448.342467][T26064] dump_header+0x81/0x220 [ 448.342499][T26064] oom_kill_process+0x342/0x400 [ 448.342533][T26064] out_of_memory+0x979/0xb80 [ 448.342587][T26064] try_charge_memcg+0x5e6/0x9e0 [ 448.342615][T26064] obj_cgroup_charge_pages+0xa6/0x150 [ 448.342649][T26064] __memcg_kmem_charge_page+0x9f/0x170 [ 448.342700][T26064] __alloc_frozen_pages_noprof+0x188/0x360 [ 448.342740][T26064] alloc_pages_mpol+0xb3/0x250 [ 448.342785][T26064] alloc_pages_noprof+0x90/0x130 [ 448.342814][T26064] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 448.342889][T26064] __kvmalloc_node_noprof+0x30f/0x4e0 [ 448.342920][T26064] ? ip_set_alloc+0x1f/0x30 [ 448.343000][T26064] ? ip_set_alloc+0x1f/0x30 [ 448.343019][T26064] ? __kmalloc_cache_noprof+0x189/0x320 [ 448.343048][T26064] ip_set_alloc+0x1f/0x30 [ 448.343092][T26064] hash_netiface_create+0x282/0x740 [ 448.343113][T26064] ? __pfx_hash_netiface_create+0x10/0x10 [ 448.343136][T26064] ip_set_create+0x3cc/0x960 [ 448.343167][T26064] ? __nla_parse+0x40/0x60 [ 448.343235][T26064] nfnetlink_rcv_msg+0x4c6/0x590 [ 448.343272][T26064] netlink_rcv_skb+0x120/0x220 [ 448.343335][T26064] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 448.343408][T26064] nfnetlink_rcv+0x16b/0x1690 [ 448.343430][T26064] ? nlmon_xmit+0x4f/0x60 [ 448.343480][T26064] ? consume_skb+0x49/0x150 [ 448.343584][T26064] ? nlmon_xmit+0x4f/0x60 [ 448.343690][T26064] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 448.343718][T26064] ? __dev_queue_xmit+0x1200/0x2000 [ 448.343755][T26064] ? __dev_queue_xmit+0x182/0x2000 [ 448.343856][T26064] ? ref_tracker_free+0x37d/0x3e0 [ 448.343899][T26064] ? __netlink_deliver_tap+0x4dc/0x500 [ 448.344000][T26064] netlink_unicast+0x5c0/0x690 [ 448.344021][T26064] netlink_sendmsg+0x58b/0x6b0 [ 448.344045][T26064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.344138][T26064] __sock_sendmsg+0x142/0x180 [ 448.344167][T26064] ____sys_sendmsg+0x31e/0x4e0 [ 448.344195][T26064] ___sys_sendmsg+0x17b/0x1d0 [ 448.344231][T26064] __x64_sys_sendmsg+0xd4/0x160 [ 448.344327][T26064] x64_sys_call+0x191e/0x2ff0 [ 448.344349][T26064] do_syscall_64+0xd2/0x200 [ 448.344381][T26064] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 448.344437][T26064] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 448.344482][T26064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.344502][T26064] RIP: 0033:0x7f394fafeba9 [ 448.344517][T26064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.344534][T26064] RSP: 002b:00007f394e525038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.344581][T26064] RAX: ffffffffffffffda RBX: 00007f394fd46180 RCX: 00007f394fafeba9 [ 448.344593][T26064] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 448.344679][T26064] RBP: 00007f394fb81e19 R08: 0000000000000000 R09: 0000000000000000 [ 448.344689][T26064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.344699][T26064] R13: 00007f394fd46218 R14: 00007f394fd46180 R15: 00007ffccc2113f8 [ 448.344715][T26064] [ 448.344769][T26064] memory: usage 307200kB, limit 307200kB, failcnt 688 [ 448.526078][T26115] loop8: detected capacity change from 0 to 2048 [ 448.528726][T26064] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 448.701793][T26064] kmem: usage 303076kB, limit 9007199254740988kB, failcnt 0 [ 448.709105][T26064] Memory cgroup stats for /syz0: [ 448.710130][T26064] cache 0 [ 448.718022][T26064] rss 4218880 [ 448.721307][T26064] shmem 0 [ 448.724236][T26064] mapped_file 0 [ 448.727744][T26064] dirty 0 [ 448.730700][T26064] writeback 0 [ 448.733998][T26064] workingset_refault_anon 6384 [ 448.738811][T26064] workingset_refault_file 2719 [ 448.743616][T26064] swap 196608 [ 448.746889][T26064] swapcached 0 [ 448.750273][T26064] pgpgin 654132 [ 448.753781][T26064] pgpgout 653101 [ 448.757325][T26064] pgfault 643253 [ 448.760895][T26064] pgmajfault 1051 [ 448.764507][T26064] inactive_anon 0 [ 448.768160][T26064] active_anon 0 [ 448.771601][T26064] inactive_file 4222976 [ 448.775806][T26064] active_file 0 [ 448.779266][T26064] unevictable 0 [ 448.782824][T26064] hierarchical_memory_limit 314572800 [ 448.788249][T26064] hierarchical_memsw_limit 9223372036854771712 [ 448.794404][T26064] total_cache 0 [ 448.797942][T26064] total_rss 4218880 [ 448.801791][T26064] total_shmem 0 [ 448.805240][T26064] total_mapped_file 0 [ 448.809211][T26064] total_dirty 0 [ 448.812710][T26064] total_writeback 0 [ 448.816501][T26064] total_workingset_refault_anon 6384 [ 448.821840][T26064] total_workingset_refault_file 2719 [ 448.827119][T26064] total_swap 196608 [ 448.830995][T26064] total_swapcached 0 [ 448.834870][T26064] total_pgpgin 654132 [ 448.838871][T26064] total_pgpgout 653101 [ 448.842921][T26064] total_pgfault 643253 [ 448.846978][T26064] total_pgmajfault 1051 [ 448.851152][T26064] total_inactive_anon 0 [ 448.855286][T26064] total_active_anon 0 [ 448.859298][T26064] total_inactive_file 4222976 [ 448.863959][T26064] total_active_file 0 [ 448.867934][T26064] total_unevictable 0 [ 448.871904][T26064] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6441,pid=26048,uid=0 [ 448.886884][T26064] Memory cgroup out of memory: Killed process 26048 (syz.0.6441) total-vm:93952kB, anon-rss:5164kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 448.920333][T26115] Alternate GPT is invalid, using primary GPT. [ 448.926815][T26115] loop8: p1 p2 p3 [ 448.979001][T26128] __nla_validate_parse: 27 callbacks suppressed [ 448.979026][T26128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6466'. [ 449.017485][T26128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6466'. [ 449.218580][T26137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6470'. [ 449.266189][T26148] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 449.302714][T26141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6472'. [ 449.454991][T26166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6482'. [ 449.465065][T26166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6482'. [ 450.205067][T26185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6490'. [ 450.274567][T26188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6491'. [ 450.302631][T26192] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 450.362761][T26182] pim6reg1: entered promiscuous mode [ 450.368215][T26182] pim6reg1: entered allmulticast mode [ 450.375665][T26194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6494'. [ 450.385203][T26194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6494'. [ 450.691691][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 450.691705][ T29] audit: type=1107 audit(1758087792.944:22845): pid=26219 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='õzå' [ 450.744776][ T29] audit: type=1326 audit(1758087792.994:22846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26224 comm="syz.2.6504" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff89278eba9 code=0x0 [ 450.913466][T26227] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 451.071357][ T29] audit: type=1326 audit(1758087793.324:22847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26235 comm="syz.5.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 451.095076][ T29] audit: type=1326 audit(1758087793.324:22848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26235 comm="syz.5.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 451.118747][ T29] audit: type=1326 audit(1758087793.334:22849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26235 comm="syz.5.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 451.143265][ T29] audit: type=1326 audit(1758087793.344:22850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26235 comm="syz.5.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 451.166945][ T29] audit: type=1326 audit(1758087793.344:22851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26235 comm="syz.5.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 451.190612][ T29] audit: type=1326 audit(1758087793.354:22852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26235 comm="syz.5.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 451.214170][ T29] audit: type=1326 audit(1758087793.354:22853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26235 comm="syz.5.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 451.237887][ T29] audit: type=1326 audit(1758087793.354:22854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26235 comm="syz.5.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 451.598756][T26261] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 451.650495][T26263] loop8: detected capacity change from 0 to 2048 [ 451.670502][T26265] netlink: 'syz.2.6520': attribute type 1 has an invalid length. [ 451.689163][T26263] Alternate GPT is invalid, using primary GPT. [ 451.695566][T26263] loop8: p1 p2 p3 [ 451.817928][T26235] syz.5.6509 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 451.829056][T26235] CPU: 1 UID: 0 PID: 26235 Comm: syz.5.6509 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 451.829090][T26235] Tainted: [W]=WARN [ 451.829098][T26235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.829113][T26235] Call Trace: [ 451.829120][T26235] [ 451.829128][T26235] __dump_stack+0x1d/0x30 [ 451.829205][T26235] dump_stack_lvl+0xe8/0x140 [ 451.829227][T26235] dump_stack+0x15/0x1b [ 451.829246][T26235] dump_header+0x81/0x220 [ 451.829277][T26235] oom_kill_process+0x342/0x400 [ 451.829378][T26235] out_of_memory+0x979/0xb80 [ 451.829467][T26235] try_charge_memcg+0x5e6/0x9e0 [ 451.829576][T26235] charge_memcg+0x51/0xc0 [ 451.829598][T26235] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 451.829632][T26235] __read_swap_cache_async+0x1df/0x350 [ 451.829673][T26235] swap_cluster_readahead+0x277/0x3e0 [ 451.829730][T26235] swapin_readahead+0xde/0x6f0 [ 451.829766][T26235] ? __filemap_get_folio+0x4f7/0x6b0 [ 451.829784][T26235] ? swap_cache_get_folio+0x77/0x200 [ 451.829893][T26235] do_swap_page+0x301/0x2430 [ 451.829921][T26235] ? css_rstat_updated+0xb7/0x240 [ 451.829948][T26235] ? __pfx_default_wake_function+0x10/0x10 [ 451.829976][T26235] handle_mm_fault+0x9a5/0x2c20 [ 451.830080][T26235] do_user_addr_fault+0x636/0x1090 [ 451.830117][T26235] ? fpregs_restore_userregs+0xad/0x1d0 [ 451.830152][T26235] ? switch_fpu_return+0xe/0x20 [ 451.830253][T26235] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 451.830291][T26235] exc_page_fault+0x62/0xa0 [ 451.830323][T26235] asm_exc_page_fault+0x26/0x30 [ 451.830345][T26235] RIP: 0033:0x7faae24055fc [ 451.830362][T26235] Code: 66 0f 1f 44 00 00 69 3d b6 00 ea 00 e8 03 00 00 48 8d 1d b7 09 37 00 e8 12 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 451.830384][T26235] RSP: 002b:00007fff90381c90 EFLAGS: 00010283 [ 451.830398][T26235] RAX: 0000000000000000 RBX: 00007faae2777080 RCX: 0000000000000000 [ 451.830408][T26235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558ae9c808 [ 451.830419][T26235] RBP: 00007faae2777da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 451.830512][T26235] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000006e524 [ 451.830570][T26235] R13: 00007faae2776090 R14: ffffffffffffffff R15: 00007fff90381da0 [ 451.830665][T26235] [ 451.830673][T26235] memory: usage 307200kB, limit 307200kB, failcnt 1192 [ 452.061084][T26235] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 452.069017][T26235] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 452.076296][T26235] Memory cgroup stats for /syz5: [ 452.076632][T26235] cache 0 [ 452.084508][T26235] rss 0 [ 452.087323][T26235] shmem 0 [ 452.090281][T26235] mapped_file 0 [ 452.093781][T26235] dirty 0 [ 452.096710][T26235] writeback 8192 [ 452.100258][T26235] workingset_refault_anon 5894 [ 452.105014][T26235] workingset_refault_file 1728 [ 452.109815][T26235] swap 184320 [ 452.113109][T26235] swapcached 24576 [ 452.116821][T26235] pgpgin 427427 [ 452.120285][T26235] pgpgout 427420 [ 452.123890][T26235] pgfault 406812 [ 452.127452][T26235] pgmajfault 900 [ 452.131079][T26235] inactive_anon 8192 [ 452.135035][T26235] active_anon 16384 [ 452.138864][T26235] inactive_file 0 [ 452.142528][T26235] active_file 4096 [ 452.146339][T26235] unevictable 0 [ 452.149808][T26235] hierarchical_memory_limit 314572800 [ 452.155207][T26235] hierarchical_memsw_limit 9223372036854771712 [ 452.161378][T26235] total_cache 0 [ 452.164859][T26235] total_rss 0 [ 452.168176][T26235] total_shmem 0 [ 452.171628][T26235] total_mapped_file 0 [ 452.175633][T26235] total_dirty 0 [ 452.179106][T26235] total_writeback 8192 [ 452.183173][T26235] total_workingset_refault_anon 5894 [ 452.188467][T26235] total_workingset_refault_file 1728 [ 452.193739][T26235] total_swap 184320 [ 452.197570][T26235] total_swapcached 24576 [ 452.201824][T26235] total_pgpgin 427427 [ 452.205794][T26235] total_pgpgout 427420 [ 452.209866][T26235] total_pgfault 406812 [ 452.213923][T26235] total_pgmajfault 900 [ 452.218024][T26235] total_inactive_anon 8192 [ 452.222450][T26235] total_active_anon 16384 [ 452.226776][T26235] total_inactive_file 0 [ 452.230939][T26235] total_active_file 4096 [ 452.235166][T26235] total_unevictable 0 [ 452.239154][T26235] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6509,pid=26235,uid=0 [ 452.253898][T26235] Memory cgroup out of memory: Killed process 26235 (syz.5.6509) total-vm:94024kB, anon-rss:1196kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 452.720796][T26291] loop8: detected capacity change from 0 to 1024 [ 452.731313][T26295] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 452.755265][T26291] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.812646][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.443914][T26329] netlink: 'syz.0.6540': attribute type 1 has an invalid length. [ 453.569915][T26327] syz.1.6539 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 453.584098][T26327] CPU: 0 UID: 0 PID: 26327 Comm: syz.1.6539 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 453.584129][T26327] Tainted: [W]=WARN [ 453.584135][T26327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 453.584179][T26327] Call Trace: [ 453.584185][T26327] [ 453.584192][T26327] __dump_stack+0x1d/0x30 [ 453.584213][T26327] dump_stack_lvl+0xe8/0x140 [ 453.584309][T26327] dump_stack+0x15/0x1b [ 453.584369][T26327] dump_header+0x81/0x220 [ 453.584399][T26327] oom_kill_process+0x342/0x400 [ 453.584500][T26327] out_of_memory+0x979/0xb80 [ 453.584591][T26327] try_charge_memcg+0x5e6/0x9e0 [ 453.584620][T26327] obj_cgroup_charge_pages+0xa6/0x150 [ 453.584651][T26327] __memcg_kmem_charge_page+0x9f/0x170 [ 453.584682][T26327] __alloc_frozen_pages_noprof+0x188/0x360 [ 453.584839][T26327] alloc_pages_mpol+0xb3/0x250 [ 453.584871][T26327] alloc_pages_noprof+0x90/0x130 [ 453.584902][T26327] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 453.585034][T26327] __kvmalloc_node_noprof+0x30f/0x4e0 [ 453.585063][T26327] ? ip_set_alloc+0x1f/0x30 [ 453.585082][T26327] ? ip_set_alloc+0x1f/0x30 [ 453.585101][T26327] ? __kmalloc_cache_noprof+0x189/0x320 [ 453.585228][T26327] ip_set_alloc+0x1f/0x30 [ 453.585247][T26327] hash_netiface_create+0x282/0x740 [ 453.585270][T26327] ? __pfx_hash_netiface_create+0x10/0x10 [ 453.585335][T26327] ip_set_create+0x3cc/0x960 [ 453.585367][T26327] ? __nla_parse+0x40/0x60 [ 453.585393][T26327] nfnetlink_rcv_msg+0x4c6/0x590 [ 453.585429][T26327] netlink_rcv_skb+0x120/0x220 [ 453.585504][T26327] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 453.585528][T26327] nfnetlink_rcv+0x16b/0x1690 [ 453.585547][T26327] ? nlmon_xmit+0x4f/0x60 [ 453.585575][T26327] ? consume_skb+0x49/0x150 [ 453.585663][T26327] ? nlmon_xmit+0x4f/0x60 [ 453.585690][T26327] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 453.585717][T26327] ? __dev_queue_xmit+0x1200/0x2000 [ 453.585741][T26327] ? __dev_queue_xmit+0x182/0x2000 [ 453.585852][T26327] ? ref_tracker_free+0x37d/0x3e0 [ 453.585880][T26327] ? __netlink_deliver_tap+0x4dc/0x500 [ 453.585908][T26327] netlink_unicast+0x5c0/0x690 [ 453.585977][T26327] netlink_sendmsg+0x58b/0x6b0 [ 453.586003][T26327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.586088][T26327] __sock_sendmsg+0x142/0x180 [ 453.586119][T26327] ____sys_sendmsg+0x31e/0x4e0 [ 453.586147][T26327] ___sys_sendmsg+0x17b/0x1d0 [ 453.586258][T26327] __x64_sys_sendmsg+0xd4/0x160 [ 453.586290][T26327] x64_sys_call+0x191e/0x2ff0 [ 453.586310][T26327] do_syscall_64+0xd2/0x200 [ 453.586347][T26327] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 453.586370][T26327] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 453.586398][T26327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.586418][T26327] RIP: 0033:0x7f58264feba9 [ 453.586484][T26327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.586553][T26327] RSP: 002b:00007f5824f25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.586571][T26327] RAX: ffffffffffffffda RBX: 00007f5826746180 RCX: 00007f58264feba9 [ 453.586583][T26327] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 453.586627][T26327] RBP: 00007f5826581e19 R08: 0000000000000000 R09: 0000000000000000 [ 453.586638][T26327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.586649][T26327] R13: 00007f5826746218 R14: 00007f5826746180 R15: 00007ffd7be9bbc8 [ 453.586666][T26327] [ 453.586752][T26327] memory: usage 307200kB, limit 307200kB, failcnt 2719 [ 453.928620][T26327] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 453.936505][T26327] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 453.943806][T26327] Memory cgroup stats for /syz1: [ 453.944061][T26327] cache 0 [ 453.951985][T26327] rss 0 [ 453.954789][T26327] shmem 0 [ 453.957754][T26327] mapped_file 0 [ 453.961214][T26327] dirty 0 [ 453.964222][T26327] writeback 0 [ 453.967540][T26327] workingset_refault_anon 4336 [ 453.972313][T26327] workingset_refault_file 3445 [ 453.977422][T26327] swap 212992 [ 453.980793][T26327] swapcached 0 [ 453.984174][T26327] pgpgin 557521 [ 453.987666][T26327] pgpgout 557518 [ 453.991216][T26327] pgfault 608163 [ 453.994766][T26327] pgmajfault 956 [ 453.998317][T26327] inactive_anon 0 [ 454.001944][T26327] active_anon 0 [ 454.005397][T26327] inactive_file 0 [ 454.009059][T26327] active_file 12288 [ 454.009887][T26345] __nla_validate_parse: 11 callbacks suppressed [ 454.009903][T26345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6544'. [ 454.012859][T26327] unevictable 0 [ 454.012869][T26327] hierarchical_memory_limit 314572800 [ 454.012879][T26327] hierarchical_memsw_limit 9223372036854771712 [ 454.012890][T26327] total_cache 0 [ 454.046427][T26327] total_rss 0 [ 454.049763][T26327] total_shmem 0 [ 454.053223][T26327] total_mapped_file 0 [ 454.057192][T26327] total_dirty 0 [ 454.060698][T26327] total_writeback 0 [ 454.064545][T26327] total_workingset_refault_anon 4336 [ 454.069865][T26327] total_workingset_refault_file 3445 [ 454.075145][T26327] total_swap 212992 [ 454.078990][T26327] total_swapcached 0 [ 454.082880][T26327] total_pgpgin 557523 [ 454.086889][T26327] total_pgpgout 557520 [ 454.090961][T26327] total_pgfault 608165 [ 454.095019][T26327] total_pgmajfault 956 [ 454.099117][T26327] total_inactive_anon 0 [ 454.103277][T26327] total_active_anon 0 [ 454.107286][T26327] total_inactive_file 0 [ 454.111469][T26327] total_active_file 12288 [ 454.115789][T26327] total_unevictable 0 [ 454.119775][T26327] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6539,pid=26324,uid=0 [ 454.134868][T26327] Memory cgroup out of memory: Killed process 26324 (syz.1.6539) total-vm:94024kB, anon-rss:1072kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 454.206521][T26349] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 454.225705][T26349] loop8: detected capacity change from 0 to 2048 [ 454.382987][T26362] netlink: 'syz.2.6551': attribute type 1 has an invalid length. [ 454.390770][T26362] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.6551'. [ 454.513480][T26368] loop8: detected capacity change from 0 to 2048 [ 454.541944][T26373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6555'. [ 454.558106][T26368] Alternate GPT is invalid, using primary GPT. [ 454.564513][T26368] loop8: p1 p2 p3 [ 454.586114][T26375] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.632517][T26375] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.663121][T26379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6557'. [ 454.690680][T26375] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.752866][T26384] bridge_slave_0: left allmulticast mode [ 454.758631][T26384] bridge_slave_0: left promiscuous mode [ 454.764388][T26384] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.956976][T26384] bridge_slave_1: left allmulticast mode [ 454.962735][T26384] bridge_slave_1: left promiscuous mode [ 454.968568][T26384] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.018697][T26384] bond0: (slave bond_slave_0): Releasing backup interface [ 455.038586][T26384] bond0: (slave bond_slave_1): Releasing backup interface [ 455.059074][T26384] team0: Port device team_slave_0 removed [ 455.077907][T26384] team0: Port device team_slave_1 removed [ 455.124013][T26375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.284662][T26391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6559'. [ 455.423743][T26397] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 455.545210][ T5775] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.561327][T26396] loop8: detected capacity change from 0 to 2048 [ 455.586636][ T5775] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.603712][ T5775] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.612989][ T5775] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.665081][T26411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6566'. [ 455.837758][T26430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6574'. [ 455.848859][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 455.848875][ T29] audit: type=1107 audit(1758087798.104:23109): pid=26429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 455.926624][T26442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6578'. [ 456.149209][T26453] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.199434][T26453] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.259081][T26453] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.299256][T26453] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.437308][ T29] audit: type=1326 audit(1758087798.684:23110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26457 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 456.460954][ T29] audit: type=1326 audit(1758087798.684:23111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26457 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 456.484824][ T29] audit: type=1326 audit(1758087798.684:23112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26457 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 456.509145][ T29] audit: type=1326 audit(1758087798.764:23113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26457 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 456.532764][ T29] audit: type=1326 audit(1758087798.764:23114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26457 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 456.563181][ T29] audit: type=1326 audit(1758087798.764:23115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26457 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 456.586761][ T29] audit: type=1326 audit(1758087798.764:23116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26457 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 456.610393][ T29] audit: type=1326 audit(1758087798.764:23117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26457 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 456.633976][ T29] audit: type=1326 audit(1758087798.764:23118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26457 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 456.660030][T26460] FAULT_INJECTION: forcing a failure. [ 456.660030][T26460] name failslab, interval 1, probability 0, space 0, times 0 [ 456.672752][T26460] CPU: 1 UID: 0 PID: 26460 Comm: syz.5.6584 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 456.672787][T26460] Tainted: [W]=WARN [ 456.672794][T26460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.672876][T26460] Call Trace: [ 456.672963][T26460] [ 456.672970][T26460] __dump_stack+0x1d/0x30 [ 456.672988][T26460] dump_stack_lvl+0xe8/0x140 [ 456.673039][T26460] dump_stack+0x15/0x1b [ 456.673058][T26460] should_fail_ex+0x265/0x280 [ 456.673086][T26460] should_failslab+0x8c/0xb0 [ 456.673115][T26460] __kmalloc_cache_node_noprof+0x54/0x320 [ 456.673188][T26460] ? __get_vm_area_node+0x106/0x1d0 [ 456.673244][T26460] __get_vm_area_node+0x106/0x1d0 [ 456.673280][T26460] __vmalloc_node_range_noprof+0x273/0xe00 [ 456.673350][T26460] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 456.673420][T26460] ? avc_has_perm_noaudit+0x1b1/0x200 [ 456.673452][T26460] ? cred_has_capability+0x210/0x280 [ 456.673475][T26460] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 456.673568][T26460] __vmalloc_noprof+0x83/0xc0 [ 456.673604][T26460] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 456.673628][T26460] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 456.673653][T26460] ? bpf_prog_alloc+0x2a/0x150 [ 456.673682][T26460] bpf_prog_alloc+0x3c/0x150 [ 456.673712][T26460] bpf_prog_load+0x514/0x1070 [ 456.673786][T26460] ? security_bpf+0x2b/0x90 [ 456.673807][T26460] __sys_bpf+0x462/0x7b0 [ 456.673951][T26460] __x64_sys_bpf+0x41/0x50 [ 456.673979][T26460] x64_sys_call+0x2aea/0x2ff0 [ 456.674003][T26460] do_syscall_64+0xd2/0x200 [ 456.674109][T26460] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 456.674170][T26460] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 456.674196][T26460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.674236][T26460] RIP: 0033:0x7faae252eba9 [ 456.674252][T26460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.674268][T26460] RSP: 002b:00007faae0f8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.674283][T26460] RAX: ffffffffffffffda RBX: 00007faae2775fa0 RCX: 00007faae252eba9 [ 456.674299][T26460] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 456.674358][T26460] RBP: 00007faae0f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 456.674416][T26460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.674427][T26460] R13: 00007faae2776038 R14: 00007faae2775fa0 R15: 00007fff90381b28 [ 456.674444][T26460] [ 456.674451][T26460] warn_alloc: 1 callbacks suppressed [ 456.674459][T26460] syz.5.6584: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 456.727037][T26469] loop8: detected capacity change from 0 to 1024 [ 456.729024][T26460] ,cpuset= [ 456.751146][T26469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.756505][T26460] /,mems_allowed=0 [ 456.756535][T26460] CPU: 1 UID: 0 PID: 26460 Comm: syz.5.6584 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 456.756570][T26460] Tainted: [W]=WARN [ 456.756578][T26460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.756666][T26460] Call Trace: [ 456.756672][T26460] [ 456.756678][T26460] __dump_stack+0x1d/0x30 [ 456.756762][T26460] dump_stack_lvl+0xe8/0x140 [ 456.756786][T26460] dump_stack+0x15/0x1b [ 456.756811][T26460] warn_alloc+0x12b/0x1a0 [ 456.756966][T26460] __vmalloc_node_range_noprof+0x297/0xe00 [ 456.757023][T26460] ? avc_has_perm_noaudit+0x1b1/0x200 [ 456.757064][T26460] ? cred_has_capability+0x210/0x280 [ 456.757099][T26460] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 456.757220][T26460] __vmalloc_noprof+0x83/0xc0 [ 456.757300][T26460] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 456.757353][T26460] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 456.757393][T26460] ? bpf_prog_alloc+0x2a/0x150 [ 456.757506][T26460] bpf_prog_alloc+0x3c/0x150 [ 456.757545][T26460] bpf_prog_load+0x514/0x1070 [ 456.757622][T26460] ? security_bpf+0x2b/0x90 [ 456.757670][T26460] __sys_bpf+0x462/0x7b0 [ 456.757721][T26460] __x64_sys_bpf+0x41/0x50 [ 456.757758][T26460] x64_sys_call+0x2aea/0x2ff0 [ 456.757790][T26460] do_syscall_64+0xd2/0x200 [ 456.757904][T26460] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 456.757934][T26460] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 456.758032][T26460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.758066][T26460] RIP: 0033:0x7faae252eba9 [ 456.758089][T26460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.758116][T26460] RSP: 002b:00007faae0f8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.758155][T26460] RAX: ffffffffffffffda RBX: 00007faae2775fa0 RCX: 00007faae252eba9 [ 456.758171][T26460] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 456.758186][T26460] RBP: 00007faae0f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 456.758322][T26460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.758337][T26460] R13: 00007faae2776038 R14: 00007faae2775fa0 R15: 00007fff90381b28 [ 456.758361][T26460] [ 456.758401][T26460] Mem-Info: [ 456.790301][T26469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6587'. [ 456.793248][T26460] active_anon:3917 inactive_anon:0 isolated_anon:0 [ 456.793248][T26460] active_file:11124 inactive_file:2437 isolated_file:0 [ 456.793248][T26460] unevictable:0 dirty:76 writeback:0 [ 456.793248][T26460] slab_reclaimable:3540 slab_unreclaimable:48255 [ 456.793248][T26460] mapped:29301 shmem:663 pagetables:1384 [ 456.793248][T26460] sec_pagetables:0 bounce:0 [ 456.793248][T26460] kernel_misc_reclaimable:0 [ 456.793248][T26460] free:1738399 free_pcp:117484 free_cma:0 [ 457.235695][T26460] Node 0 active_anon:15552kB inactive_anon:0kB active_file:44496kB inactive_file:9748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117204kB dirty:304kB writeback:0kB shmem:2652kB kernel_stack:4352kB pagetables:5768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 457.262897][T26460] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 457.291448][T26460] lowmem_reserve[]: 0 2883 7862 7862 [ 457.296783][T26460] Node 0 DMA32 free:2949292kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 457.326918][T26460] lowmem_reserve[]: 0 0 4978 4978 [ 457.331997][T26460] Node 0 Normal free:3988944kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15552kB inactive_anon:0kB active_file:44496kB inactive_file:9748kB unevictable:0kB writepending:304kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:466180kB local_pcp:217324kB free_cma:0kB [ 457.364078][T26460] lowmem_reserve[]: 0 0 0 0 [ 457.368781][T26460] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 457.381760][T26460] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949292kB [ 457.397877][T26460] Node 0 Normal: 992*4kB (UME) 317*8kB (UME) 261*16kB (UME) 398*32kB (UM) 443*64kB (UM) 684*128kB (UME) 316*256kB (UME) 151*512kB (UM) 251*1024kB (UME) 65*2048kB (UM) 806*4096kB (UM) = 3989048kB [ 457.417218][T26460] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 457.426548][T26460] 14269 total pagecache pages [ 457.431214][T26460] 27 pages in swap cache [ 457.435500][T26460] Free swap = 124868kB [ 457.439649][T26460] Total swap = 124996kB [ 457.443839][T26460] 2097051 pages RAM [ 457.447643][T26460] 0 pages HighMem/MovableOnly [ 457.452304][T26460] 80445 pages reserved [ 457.469588][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.581293][T26494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6595'. [ 457.690006][T26507] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 458.476892][T26533] FAULT_INJECTION: forcing a failure. [ 458.476892][T26533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.490027][T26533] CPU: 0 UID: 0 PID: 26533 Comm: syz.2.6610 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 458.490056][T26533] Tainted: [W]=WARN [ 458.490063][T26533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 458.490171][T26533] Call Trace: [ 458.490177][T26533] [ 458.490183][T26533] __dump_stack+0x1d/0x30 [ 458.490207][T26533] dump_stack_lvl+0xe8/0x140 [ 458.490229][T26533] dump_stack+0x15/0x1b [ 458.490248][T26533] should_fail_ex+0x265/0x280 [ 458.490276][T26533] should_fail+0xb/0x20 [ 458.490309][T26533] should_fail_usercopy+0x1a/0x20 [ 458.490362][T26533] strncpy_from_user+0x25/0x230 [ 458.490402][T26533] path_setxattrat+0xeb/0x310 [ 458.490451][T26533] __x64_sys_fsetxattr+0x6b/0x80 [ 458.490515][T26533] x64_sys_call+0x1ced/0x2ff0 [ 458.490540][T26533] do_syscall_64+0xd2/0x200 [ 458.490576][T26533] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 458.490598][T26533] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 458.490697][T26533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.490720][T26533] RIP: 0033:0x7ff89278eba9 [ 458.490736][T26533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.490752][T26533] RSP: 002b:00007ff8911ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 458.490768][T26533] RAX: ffffffffffffffda RBX: 00007ff8929d5fa0 RCX: 00007ff89278eba9 [ 458.490780][T26533] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000000000000000 [ 458.490794][T26533] RBP: 00007ff8911ef090 R08: 0000000000000001 R09: 0000000000000000 [ 458.490844][T26533] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 458.490857][T26533] R13: 00007ff8929d6038 R14: 00007ff8929d5fa0 R15: 00007ffd16402b48 [ 458.490878][T26533] [ 458.693305][T26538] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 458.719389][T26540] loop8: detected capacity change from 0 to 1024 [ 458.757066][T26540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.782881][T26550] 9pnet_fd: Insufficient options for proto=fd [ 458.834606][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.974212][T26572] loop8: detected capacity change from 0 to 764 [ 459.021295][T26576] loop8: detected capacity change from 0 to 2048 [ 459.068482][T26576] Alternate GPT is invalid, using primary GPT. [ 459.074757][T26576] loop8: p1 p2 p3 [ 459.595854][T26582] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 459.666693][T26592] __nla_validate_parse: 6 callbacks suppressed [ 459.666711][T26592] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6631'. [ 459.671577][T26588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6630'. [ 459.784238][T26604] netlink: 'syz.1.6635': attribute type 1 has an invalid length. [ 459.792034][T26604] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6635'. [ 459.839345][T26606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26606 comm=syz.5.6637 [ 459.935761][T26614] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 459.969509][T26614] loop8: detected capacity change from 0 to 2048 [ 460.050386][T26619] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6641'. [ 460.079071][T26619] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6641'. [ 460.139092][T26621] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6641'. [ 460.262283][ T5731] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.273206][ T5731] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.284473][ T5731] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.295266][ T5731] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.753099][T26635] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6646'. [ 460.932351][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 460.932363][ T29] audit: type=1326 audit(1758087803.184:23370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26638 comm="syz.5.6647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 460.970013][ T29] audit: type=1326 audit(1758087803.214:23371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26631 comm="syz.1.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58264feba9 code=0x7ffc0000 [ 460.993615][ T29] audit: type=1326 audit(1758087803.214:23372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26631 comm="syz.1.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58264feba9 code=0x7ffc0000 [ 461.042354][ T29] audit: type=1326 audit(1758087803.294:23373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26646 comm="syz.5.6651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 461.068316][ T29] audit: type=1326 audit(1758087803.294:23374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26646 comm="syz.5.6651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 461.091942][ T29] audit: type=1326 audit(1758087803.294:23375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26646 comm="syz.5.6651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 461.115504][ T29] audit: type=1326 audit(1758087803.294:23376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26646 comm="syz.5.6651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 461.139028][ T29] audit: type=1326 audit(1758087803.294:23377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26646 comm="syz.5.6651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 461.162670][ T29] audit: type=1326 audit(1758087803.294:23378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26646 comm="syz.5.6651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 461.186602][ T29] audit: type=1326 audit(1758087803.294:23379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26646 comm="syz.5.6651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 461.226720][T26654] FAULT_INJECTION: forcing a failure. [ 461.226720][T26654] name failslab, interval 1, probability 0, space 0, times 0 [ 461.239452][T26654] CPU: 1 UID: 0 PID: 26654 Comm: syz.8.6653 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 461.239524][T26654] Tainted: [W]=WARN [ 461.239533][T26654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 461.239548][T26654] Call Trace: [ 461.239555][T26654] [ 461.239564][T26654] __dump_stack+0x1d/0x30 [ 461.239588][T26654] dump_stack_lvl+0xe8/0x140 [ 461.239673][T26654] dump_stack+0x15/0x1b [ 461.239688][T26654] should_fail_ex+0x265/0x280 [ 461.239773][T26654] should_failslab+0x8c/0xb0 [ 461.239798][T26654] kmem_cache_alloc_node_noprof+0x57/0x320 [ 461.239895][T26654] ? __alloc_skb+0x101/0x320 [ 461.239923][T26654] __alloc_skb+0x101/0x320 [ 461.239957][T26654] netlink_alloc_large_skb+0xba/0xf0 [ 461.239979][T26654] netlink_sendmsg+0x3cf/0x6b0 [ 461.240081][T26654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.240106][T26654] __sock_sendmsg+0x142/0x180 [ 461.240142][T26654] ____sys_sendmsg+0x31e/0x4e0 [ 461.240256][T26654] ___sys_sendmsg+0x17b/0x1d0 [ 461.240368][T26654] __x64_sys_sendmsg+0xd4/0x160 [ 461.240396][T26654] x64_sys_call+0x191e/0x2ff0 [ 461.240436][T26654] do_syscall_64+0xd2/0x200 [ 461.240475][T26654] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 461.240500][T26654] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 461.240562][T26654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.240588][T26654] RIP: 0033:0x7fc286dbeba9 [ 461.240682][T26654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.240704][T26654] RSP: 002b:00007fc285827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.240767][T26654] RAX: ffffffffffffffda RBX: 00007fc287005fa0 RCX: 00007fc286dbeba9 [ 461.240804][T26654] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 461.240816][T26654] RBP: 00007fc285827090 R08: 0000000000000000 R09: 0000000000000000 [ 461.240898][T26654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.240912][T26654] R13: 00007fc287006038 R14: 00007fc287005fa0 R15: 00007ffd7b7f3e28 [ 461.240935][T26654] [ 461.454912][T26660] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 461.465288][T26661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6654'. [ 461.510328][T26668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6658'. [ 461.594397][T26676] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 461.604088][T26678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6662'. [ 461.925934][T26695] netlink: 'syz.8.6666': attribute type 2 has an invalid length. [ 461.933721][T26695] netlink: 'syz.8.6666': attribute type 11 has an invalid length. [ 461.966220][T26695] loop8: detected capacity change from 0 to 512 [ 462.021580][T26695] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.6666: corrupted in-inode xattr: invalid ea_ino [ 462.035377][T26695] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.6666: couldn't read orphan inode 15 (err -117) [ 462.047997][T26695] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.061021][T26698] FAULT_INJECTION: forcing a failure. [ 462.061021][T26698] name failslab, interval 1, probability 0, space 0, times 0 [ 462.073777][T26698] CPU: 0 UID: 0 PID: 26698 Comm: syz.1.6667 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 462.073810][T26698] Tainted: [W]=WARN [ 462.073818][T26698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 462.073832][T26698] Call Trace: [ 462.073838][T26698] [ 462.073899][T26698] __dump_stack+0x1d/0x30 [ 462.073922][T26698] dump_stack_lvl+0xe8/0x140 [ 462.073945][T26698] dump_stack+0x15/0x1b [ 462.073964][T26698] should_fail_ex+0x265/0x280 [ 462.073992][T26698] should_failslab+0x8c/0xb0 [ 462.074019][T26698] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 462.074113][T26698] ? kasprintf+0x83/0xb0 [ 462.074182][T26698] kvasprintf+0x8a/0x110 [ 462.074203][T26698] ? obj_cgroup_charge_account+0x122/0x1a0 [ 462.074238][T26698] kasprintf+0x83/0xb0 [ 462.074283][T26698] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 462.074348][T26698] nf_tables_set_alloc_name+0xaa/0x4b0 [ 462.074386][T26698] ? nla_strdup+0x78/0xc0 [ 462.074469][T26698] nf_tables_newset+0xe24/0x14e0 [ 462.074510][T26698] nfnetlink_rcv+0xb99/0x1690 [ 462.074619][T26698] netlink_unicast+0x5c0/0x690 [ 462.074694][T26698] netlink_sendmsg+0x58b/0x6b0 [ 462.074726][T26698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.074751][T26698] __sock_sendmsg+0x142/0x180 [ 462.074852][T26698] ____sys_sendmsg+0x31e/0x4e0 [ 462.074877][T26698] ___sys_sendmsg+0x17b/0x1d0 [ 462.074995][T26698] __x64_sys_sendmsg+0xd4/0x160 [ 462.075030][T26698] x64_sys_call+0x191e/0x2ff0 [ 462.075049][T26698] do_syscall_64+0xd2/0x200 [ 462.075102][T26698] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 462.075124][T26698] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 462.075156][T26698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.075190][T26698] RIP: 0033:0x7f58264feba9 [ 462.075206][T26698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.075222][T26698] RSP: 002b:00007f5824f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.075238][T26698] RAX: ffffffffffffffda RBX: 00007f5826745fa0 RCX: 00007f58264feba9 [ 462.075249][T26698] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 462.075259][T26698] RBP: 00007f5824f67090 R08: 0000000000000000 R09: 0000000000000000 [ 462.075333][T26698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.075347][T26698] R13: 00007f5826746038 R14: 00007f5826745fa0 R15: 00007ffd7be9bbc8 [ 462.075367][T26698] [ 462.396273][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.449085][T26712] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 462.478180][T26712] loop8: detected capacity change from 0 to 2048 [ 462.538520][T26732] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.709166][T26732] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.858780][T26732] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.064797][T26749] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 463.071333][T26749] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 463.078785][T26749] vhci_hcd vhci_hcd.0: Device attached [ 463.085954][T26749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 463.095518][T26749] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 463.102066][T26749] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 463.109600][T26749] vhci_hcd vhci_hcd.0: Device attached [ 463.116701][T26749] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 463.123303][T26749] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 463.130997][T26749] vhci_hcd vhci_hcd.0: Device attached [ 463.138748][T26749] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13) [ 463.145385][T26749] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 463.153036][T26749] vhci_hcd vhci_hcd.0: Device attached [ 463.159999][T26749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 463.168973][T26749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 463.232263][T26732] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.248554][T26762] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.283255][ T5754] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.293873][ T5754] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.305713][ T5754] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.316333][ T5754] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.325395][T26762] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.359253][T26762] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.448035][T26762] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.473387][T26769] loop8: detected capacity change from 0 to 2048 [ 463.528034][T26769] loop8: p1 < > p4 [ 463.534978][T26769] loop8: p4 size 8388608 extends beyond EOD, truncated [ 463.707283][T26756] vhci_hcd: connection closed [ 463.707493][ T5731] vhci_hcd: stop threads [ 463.716454][ T5731] vhci_hcd: release socket [ 463.720971][ T5731] vhci_hcd: disconnect device [ 463.727973][T26750] vhci_hcd: connection closed [ 463.728097][T26752] vhci_hcd: connection closed [ 463.732883][ T5731] vhci_hcd: stop threads [ 463.732941][T26754] vhci_hcd: connection closed [ 463.737755][ T5731] vhci_hcd: release socket [ 463.737770][ T5731] vhci_hcd: disconnect device [ 463.756402][ T5731] vhci_hcd: stop threads [ 463.760790][ T5731] vhci_hcd: release socket [ 463.765204][ T5731] vhci_hcd: disconnect device [ 463.801793][ T5731] vhci_hcd: stop threads [ 463.806082][ T5731] vhci_hcd: release socket [ 463.810557][ T5731] vhci_hcd: disconnect device [ 463.998689][T26782] loop8: detected capacity change from 0 to 1024 [ 464.070065][T26782] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.111398][T26789] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 464.174438][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.246108][T26797] loop8: detected capacity change from 0 to 2048 [ 464.332105][T26797] Alternate GPT is invalid, using primary GPT. [ 464.338435][T26797] loop8: p1 p2 p3 [ 464.863377][ T5731] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.876074][ T5731] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.889012][ T5731] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.910375][ T5731] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.963338][T26814] __nla_validate_parse: 2 callbacks suppressed [ 464.963354][T26814] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6702'. [ 464.988439][T26814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6702'. [ 465.183189][T26827] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 465.388234][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6713'. [ 465.528849][T26857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6728'. [ 465.948658][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 465.948675][ T29] audit: type=1326 audit(1758087808.204:23860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 465.978431][ T29] audit: type=1326 audit(1758087808.204:23861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc286dbebe3 code=0x7ffc0000 [ 466.012429][T26858] loop8: detected capacity change from 0 to 2048 [ 466.020041][ T29] audit: type=1326 audit(1758087808.254:23862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc286dbd65f code=0x7ffc0000 [ 466.043518][ T29] audit: type=1326 audit(1758087808.264:23863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc286dbec37 code=0x7ffc0000 [ 466.067063][ T29] audit: type=1326 audit(1758087808.264:23864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc286dbd510 code=0x7ffc0000 [ 466.090737][ T29] audit: type=1326 audit(1758087808.264:23865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc286dbe7ab code=0x7ffc0000 [ 466.114270][ T29] audit: type=1326 audit(1758087808.274:23866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc286dbd80a code=0x7ffc0000 [ 466.137669][ T29] audit: type=1326 audit(1758087808.274:23867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc286dbd80a code=0x7ffc0000 [ 466.161062][ T29] audit: type=1326 audit(1758087808.274:23868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc286dbd417 code=0x7ffc0000 [ 466.184682][ T29] audit: type=1326 audit(1758087808.274:23869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26856 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc286dc034a code=0x7ffc0000 [ 466.259802][T26858] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.6719: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 466.277713][T26858] EXT4-fs (loop8): get root inode failed [ 466.283412][T26858] EXT4-fs (loop8): mount failed [ 466.463389][T26888] loop8: detected capacity change from 0 to 1024 [ 466.477844][T26888] EXT4-fs: Ignoring removed oldalloc option [ 466.488205][T26888] EXT4-fs: inline encryption not supported [ 466.494092][T26888] ext4: Unknown parameter 'fowner<00000000000000000000' [ 466.609772][T26905] netlink: 'syz.1.6731': attribute type 1 has an invalid length. [ 466.634208][T26905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.650201][T26904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6732'. [ 466.669070][T26914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6734'. [ 466.678288][T26905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6731'. [ 466.709670][T26914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6734'. [ 466.829321][T26933] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 466.837073][T26933] SELinux: failed to load policy [ 467.588383][T26945] loop8: detected capacity change from 0 to 1024 [ 467.600562][T26943] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 467.619379][T26945] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.675189][T26945] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6745'. [ 467.715324][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.779259][T26963] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6751'. [ 467.839456][T26967] loop8: detected capacity change from 0 to 1024 [ 467.861539][T26967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.022496][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.040142][T26927] Set syz1 is full, maxelem 65536 reached [ 468.059522][T26981] netlink: 'syz.8.6757': attribute type 1 has an invalid length. [ 468.141666][T26991] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 468.225605][T27000] netlink: 'syz.5.6764': attribute type 4 has an invalid length. [ 468.231376][T27001] netlink: 'syz.5.6764': attribute type 4 has an invalid length. [ 468.243433][T27000] netlink: 'syz.5.6764': attribute type 4 has an invalid length. [ 468.320309][T27013] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.368951][T27013] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.419093][T27013] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.479178][T27013] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.580123][ T5754] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.607237][ T5754] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.638348][ T5754] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.664197][ T5754] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.682583][T27031] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 469.117673][T27051] tipc: Started in network mode [ 469.122680][T27051] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 469.132357][T27051] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 469.140539][T27051] tipc: Enabled bearer , priority 10 [ 469.305283][T27081] netlink: 'syz.8.6792': attribute type 1 has an invalid length. [ 469.568802][T27102] FAULT_INJECTION: forcing a failure. [ 469.568802][T27102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.581980][T27102] CPU: 1 UID: 0 PID: 27102 Comm: syz.2.6800 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 469.582010][T27102] Tainted: [W]=WARN [ 469.582018][T27102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 469.582031][T27102] Call Trace: [ 469.582037][T27102] [ 469.582043][T27102] __dump_stack+0x1d/0x30 [ 469.582134][T27102] dump_stack_lvl+0xe8/0x140 [ 469.582150][T27102] dump_stack+0x15/0x1b [ 469.582164][T27102] should_fail_ex+0x265/0x280 [ 469.582190][T27102] should_fail+0xb/0x20 [ 469.582213][T27102] should_fail_usercopy+0x1a/0x20 [ 469.582303][T27102] _copy_from_user+0x1c/0xb0 [ 469.582336][T27102] ___sys_sendmsg+0xc1/0x1d0 [ 469.582440][T27102] __x64_sys_sendmsg+0xd4/0x160 [ 469.582474][T27102] x64_sys_call+0x191e/0x2ff0 [ 469.582498][T27102] do_syscall_64+0xd2/0x200 [ 469.582577][T27102] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 469.582624][T27102] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 469.582652][T27102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.582671][T27102] RIP: 0033:0x7ff89278eba9 [ 469.582685][T27102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.582706][T27102] RSP: 002b:00007ff8911ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.582727][T27102] RAX: ffffffffffffffda RBX: 00007ff8929d5fa0 RCX: 00007ff89278eba9 [ 469.582797][T27102] RDX: 0000000000000004 RSI: 0000200000000a00 RDI: 0000000000000003 [ 469.582849][T27102] RBP: 00007ff8911ef090 R08: 0000000000000000 R09: 0000000000000000 [ 469.582864][T27102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.582875][T27102] R13: 00007ff8929d6038 R14: 00007ff8929d5fa0 R15: 00007ffd16402b48 [ 469.582890][T27102] [ 469.977578][T27119] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 470.011535][T27124] __nla_validate_parse: 11 callbacks suppressed [ 470.011583][T27124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6809'. [ 470.056362][T27124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6809'. [ 470.177509][ T3527] tipc: Node number set to 1 [ 470.425322][T27143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6815'. [ 470.540188][T27139] loop8: detected capacity change from 0 to 2048 [ 470.593755][T27139] loop8: p2 p3 p7 [ 470.602199][T27139] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6814'. [ 470.701199][T27158] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 470.718839][T27158] loop8: detected capacity change from 0 to 2048 [ 470.804411][T27164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6822'. [ 470.816674][T27164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6822'. [ 471.051859][T27166] tipc: Started in network mode [ 471.056873][T27166] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 471.067270][T27166] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 471.075595][T27166] tipc: Enabled bearer , priority 10 [ 471.084247][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 471.084262][ T29] audit: type=1326 audit(1758087813.334:24270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27165 comm="syz.8.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 471.141053][ T29] audit: type=1326 audit(1758087813.334:24271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27165 comm="syz.8.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 471.164786][ T29] audit: type=1326 audit(1758087813.334:24272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27165 comm="syz.8.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 471.171278][T27182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6829'. [ 471.188365][ T29] audit: type=1326 audit(1758087813.334:24273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27165 comm="syz.8.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 471.220856][ T29] audit: type=1326 audit(1758087813.334:24274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27165 comm="syz.8.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 471.244368][ T29] audit: type=1326 audit(1758087813.334:24275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27165 comm="syz.8.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 471.268046][ T29] audit: type=1326 audit(1758087813.334:24276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27165 comm="syz.8.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 471.291612][ T29] audit: type=1326 audit(1758087813.334:24277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27165 comm="syz.8.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 471.315177][ T29] audit: type=1326 audit(1758087813.334:24278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27165 comm="syz.8.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 471.338836][ T29] audit: type=1326 audit(1758087813.334:24279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27165 comm="syz.8.6823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 471.437141][T27196] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 471.653003][T27205] netlink: 'syz.8.6836': attribute type 60 has an invalid length. [ 472.117883][ T3527] tipc: Node number set to 1 [ 472.432108][T27227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6844'. [ 472.490355][T27231] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 472.666539][T27237] tipc: Started in network mode [ 472.671485][T27237] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 472.680798][T27237] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 472.689128][T27237] tipc: Enabled bearer , priority 10 [ 472.813487][T27260] loop8: detected capacity change from 0 to 1024 [ 472.836060][T27260] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.997921][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.035717][T27272] FAULT_INJECTION: forcing a failure. [ 473.035717][T27272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.048871][T27272] CPU: 1 UID: 0 PID: 27272 Comm: syz.1.6858 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 473.048898][T27272] Tainted: [W]=WARN [ 473.048904][T27272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 473.048915][T27272] Call Trace: [ 473.048921][T27272] [ 473.048994][T27272] __dump_stack+0x1d/0x30 [ 473.049018][T27272] dump_stack_lvl+0xe8/0x140 [ 473.049040][T27272] dump_stack+0x15/0x1b [ 473.049059][T27272] should_fail_ex+0x265/0x280 [ 473.049088][T27272] should_fail+0xb/0x20 [ 473.049158][T27272] should_fail_usercopy+0x1a/0x20 [ 473.049216][T27272] strncpy_from_user+0x25/0x230 [ 473.049255][T27272] ? kstrtoull+0x111/0x140 [ 473.049281][T27272] bpf_raw_tp_link_attach+0x150/0x400 [ 473.049328][T27272] ? kstrtouint+0x76/0xc0 [ 473.049354][T27272] bpf_raw_tracepoint_open+0x164/0x2c0 [ 473.049424][T27272] ? security_bpf+0x2b/0x90 [ 473.049447][T27272] __sys_bpf+0x6a3/0x7b0 [ 473.049481][T27272] __x64_sys_bpf+0x41/0x50 [ 473.049510][T27272] x64_sys_call+0x2aea/0x2ff0 [ 473.049535][T27272] do_syscall_64+0xd2/0x200 [ 473.049609][T27272] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 473.049630][T27272] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 473.049656][T27272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.049677][T27272] RIP: 0033:0x7f58264feba9 [ 473.049713][T27272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.049734][T27272] RSP: 002b:00007f5824f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.049755][T27272] RAX: ffffffffffffffda RBX: 00007f5826745fa0 RCX: 00007f58264feba9 [ 473.049851][T27272] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000011 [ 473.049865][T27272] RBP: 00007f5824f67090 R08: 0000000000000000 R09: 0000000000000000 [ 473.049880][T27272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.049893][T27272] R13: 00007f5826746038 R14: 00007f5826745fa0 R15: 00007ffd7be9bbc8 [ 473.049915][T27272] [ 473.255556][T27277] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 473.324636][T27289] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.368964][T27289] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.429671][T27289] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.579440][T27289] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.625172][ T5744] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.637901][ T5744] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.654815][ T5744] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.663298][T27316] pim6reg1: entered promiscuous mode [ 473.668946][T27316] pim6reg1: entered allmulticast mode [ 473.684054][ T5744] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.702701][T27321] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 473.747423][ C1] Adjusting tsc more than 11% (8579265 vs 8464875) [ 473.800817][T11999] tipc: Node number set to 1 [ 473.884231][T27337] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 474.384145][T27353] loop8: detected capacity change from 0 to 2048 [ 474.405313][T27355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6889'. [ 474.427354][T27355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6889'. [ 474.442118][T27353] Alternate GPT is invalid, using primary GPT. [ 474.448412][T27353] loop8: p1 p2 p3 [ 474.522605][T27360] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 474.776416][T27378] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.823371][T27378] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.869046][T27378] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.922867][T27378] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.004319][ T5744] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.018982][ T5744] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.031935][ T5744] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.051889][ T5744] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.093423][T27391] FAULT_INJECTION: forcing a failure. [ 475.093423][T27391] name failslab, interval 1, probability 0, space 0, times 0 [ 475.106171][T27391] CPU: 1 UID: 0 PID: 27391 Comm: syz.1.6900 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 475.106259][T27391] Tainted: [W]=WARN [ 475.106266][T27391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 475.106276][T27391] Call Trace: [ 475.106281][T27391] [ 475.106287][T27391] __dump_stack+0x1d/0x30 [ 475.106308][T27391] dump_stack_lvl+0xe8/0x140 [ 475.106324][T27391] dump_stack+0x15/0x1b [ 475.106420][T27391] should_fail_ex+0x265/0x280 [ 475.106447][T27391] should_failslab+0x8c/0xb0 [ 475.106469][T27391] kmem_cache_alloc_node_noprof+0x57/0x320 [ 475.106578][T27391] ? __alloc_skb+0x101/0x320 [ 475.106599][T27391] __alloc_skb+0x101/0x320 [ 475.106620][T27391] netlink_alloc_large_skb+0xba/0xf0 [ 475.106701][T27391] netlink_sendmsg+0x3cf/0x6b0 [ 475.106737][T27391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.106760][T27391] __sock_sendmsg+0x142/0x180 [ 475.106846][T27391] ____sys_sendmsg+0x31e/0x4e0 [ 475.106873][T27391] ___sys_sendmsg+0x17b/0x1d0 [ 475.106912][T27391] __x64_sys_sendmsg+0xd4/0x160 [ 475.106948][T27391] x64_sys_call+0x191e/0x2ff0 [ 475.106996][T27391] do_syscall_64+0xd2/0x200 [ 475.107067][T27391] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 475.107094][T27391] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 475.107128][T27391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.107151][T27391] RIP: 0033:0x7f58264feba9 [ 475.107167][T27391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.107186][T27391] RSP: 002b:00007f5824f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.107206][T27391] RAX: ffffffffffffffda RBX: 00007f5826745fa0 RCX: 00007f58264feba9 [ 475.107259][T27391] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 475.107272][T27391] RBP: 00007f5824f67090 R08: 0000000000000000 R09: 0000000000000000 [ 475.107315][T27391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.107328][T27391] R13: 00007f5826746038 R14: 00007f5826745fa0 R15: 00007ffd7be9bbc8 [ 475.107349][T27391] [ 475.381143][T27393] netlink: 'syz.1.6901': attribute type 60 has an invalid length. [ 475.399955][T27395] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 475.437009][T27395] loop8: detected capacity change from 0 to 2048 [ 475.820875][T27408] tipc: Enabling of bearer rejected, already enabled [ 475.868689][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 475.868703][ T29] audit: type=1326 audit(1758087818.340:24480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27407 comm="syz.8.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 475.943333][ T29] audit: type=1326 audit(1758087818.373:24481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27407 comm="syz.8.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc286dbeba9 code=0x7ffc0000 [ 476.020791][ T29] audit: type=1326 audit(1758087818.501:24482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27413 comm="syz.5.6907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 476.072304][ T29] audit: type=1326 audit(1758087818.501:24483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27413 comm="syz.5.6907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 476.095955][ T29] audit: type=1326 audit(1758087818.533:24484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27413 comm="syz.5.6907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 476.119777][ T29] audit: type=1326 audit(1758087818.533:24485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27413 comm="syz.5.6907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 476.143374][ T29] audit: type=1326 audit(1758087818.533:24486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27413 comm="syz.5.6907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 476.167088][ T29] audit: type=1326 audit(1758087818.533:24487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27413 comm="syz.5.6907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 476.190621][ T29] audit: type=1326 audit(1758087818.533:24488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27413 comm="syz.5.6907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 476.214555][ T29] audit: type=1326 audit(1758087818.533:24489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27413 comm="syz.5.6907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 476.274400][T27424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6910'. [ 476.307605][T27424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6910'. [ 476.316631][T27424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6910'. [ 476.336492][T27422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6912'. [ 476.374673][T27428] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6914'. [ 476.394642][T27432] netlink: 'syz.5.6915': attribute type 1 has an invalid length. [ 476.402530][T27432] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.6915'. [ 476.437092][T27428] team0: Port device team_slave_0 removed [ 476.494873][T27446] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6921'. [ 476.519315][T27446] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6921'. [ 476.596842][T27439] tipc: Started in network mode [ 476.601822][T27439] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 476.610853][T27439] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 476.619080][T27439] tipc: Enabled bearer , priority 10 [ 476.694149][T27459] loop8: detected capacity change from 0 to 1024 [ 476.704697][T27459] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.761821][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.901147][T27469] loop8: detected capacity change from 0 to 1024 [ 476.914049][T27469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.954688][T27469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6926'. [ 476.976520][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.045692][T27475] netlink: 'syz.8.6927': attribute type 60 has an invalid length. [ 477.073589][T27478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6928'. [ 477.319223][T27490] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.379103][T27490] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.445850][T27490] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.457366][T27499] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 477.489656][T27490] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.585442][ T5758] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.603114][ T5758] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.621293][ T5758] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.638191][ T5758] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.694602][ T3527] tipc: Node number set to 1 [ 477.719678][T27519] netlink: 'syz.0.6945': attribute type 1 has an invalid length. [ 478.698247][T27558] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.738624][T27558] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.807312][T27558] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.844892][T27558] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.899255][ T5731] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.911705][ T5731] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.937338][ T5731] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.964357][ T5731] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.070334][T27606] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.126751][T27606] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.185038][T27606] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.197139][T27601] tipc: Enabling of bearer rejected, already enabled [ 479.233573][T27606] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.288286][ T5731] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.302463][ T5731] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.330675][ T5731] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.339628][ T5731] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.469115][T27622] loop8: detected capacity change from 0 to 1024 [ 479.494753][T27622] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.565160][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.805357][T27651] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.820900][T27645] loop8: detected capacity change from 0 to 2048 [ 479.849061][T27645] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.6986: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 479.855183][T27642] tipc: Enabling of bearer rejected, already enabled [ 479.884001][T27651] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.901750][T27645] EXT4-fs (loop8): get root inode failed [ 479.907542][T27645] EXT4-fs (loop8): mount failed [ 479.927222][T27651] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.986035][T27651] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.061656][ T5754] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.076660][ T5754] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.102167][ T5754] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.129927][ T5754] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.155749][T27670] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 480.408037][T27685] tipc: Enabling of bearer rejected, already enabled [ 480.698188][T27693] loop8: detected capacity change from 0 to 1024 [ 480.716368][T27693] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.747872][ T29] kauditd_printk_skb: 525 callbacks suppressed [ 480.747886][ T29] audit: type=1107 audit(1758087823.399:25015): pid=27692 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='õzå' [ 480.781991][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.927279][ T29] audit: type=1326 audit(1758087823.582:25016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27706 comm="syz.2.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 480.951020][ T29] audit: type=1326 audit(1758087823.582:25017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27706 comm="syz.2.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 480.994192][ T29] audit: type=1326 audit(1758087823.654:25018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27706 comm="syz.2.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 481.017820][ T29] audit: type=1326 audit(1758087823.654:25019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27706 comm="syz.2.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 481.041495][ T29] audit: type=1326 audit(1758087823.654:25020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27706 comm="syz.2.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 481.133591][ T29] audit: type=1326 audit(1758087823.806:25021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27706 comm="syz.2.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 481.157249][ T29] audit: type=1326 audit(1758087823.806:25022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27706 comm="syz.2.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 481.181155][ T29] audit: type=1326 audit(1758087823.806:25023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27706 comm="syz.2.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 481.238275][T27717] __nla_validate_parse: 16 callbacks suppressed [ 481.238287][T27717] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7016'. [ 481.257894][T27722] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7018'. [ 481.270477][T27722] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7018'. [ 481.378798][T27728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7020'. [ 481.399800][ T29] audit: type=1107 audit(1758087824.060:25024): pid=27727 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='õzå' [ 481.508966][T27719] tipc: Enabling of bearer rejected, already enabled [ 481.671244][T27755] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7031'. [ 481.715739][T27763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7034'. [ 481.725775][T27760] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 481.728927][T27763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7034'. [ 481.753538][T27760] loop8: detected capacity change from 0 to 2048 [ 481.834360][T27766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7035'. [ 482.268547][T27784] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 482.321914][T27789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7043'. [ 482.389170][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7046'. [ 482.417774][T27798] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.478446][T27798] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.516951][T27798] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.566093][T27798] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.656772][T27812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.665520][T27812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.856816][T27818] tipc: Enabling of bearer rejected, already enabled [ 482.959615][T27830] netlink: 'syz.0.7058': attribute type 1 has an invalid length. [ 482.967700][T27826] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 482.987457][T27826] loop8: detected capacity change from 0 to 2048 [ 483.985665][T27852] tipc: Enabling of bearer rejected, already enabled [ 484.102022][ T5744] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.141789][ T5744] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.166982][ T5744] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.184195][ T5744] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.185062][T27868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.219111][T27868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.448301][T27860] loop8: detected capacity change from 0 to 2048 [ 484.485451][T27860] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.7067: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 484.527373][T27860] EXT4-fs (loop8): get root inode failed [ 484.533116][T27860] EXT4-fs (loop8): mount failed [ 484.604949][T27883] netlink: 'syz.1.7076': attribute type 1 has an invalid length. [ 485.068641][T27895] tipc: Started in network mode [ 485.073625][T27895] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 485.082705][T27895] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 485.090884][T27895] tipc: Enabled bearer , priority 10 [ 485.330662][T27906] serio: Serial port ptm0 [ 485.576021][T27909] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 485.732067][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 485.732098][ T29] audit: type=1326 audit(1758087828.435:25384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 485.793287][ T29] audit: type=1326 audit(1758087828.435:25385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 485.816921][ T29] audit: type=1326 audit(1758087828.435:25386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 485.840533][ T29] audit: type=1326 audit(1758087828.435:25387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 485.864115][ T29] audit: type=1326 audit(1758087828.435:25388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 485.887833][ T29] audit: type=1326 audit(1758087828.435:25389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 485.911415][ T29] audit: type=1326 audit(1758087828.435:25390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 485.935036][ T29] audit: type=1326 audit(1758087828.435:25391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 485.958707][ T29] audit: type=1326 audit(1758087828.435:25392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 485.982269][ T29] audit: type=1326 audit(1758087828.435:25393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faae252eba9 code=0x7ffc0000 [ 486.001482][T27899] loop8: detected capacity change from 0 to 2048 [ 486.106627][ T2958] tipc: Node number set to 1 [ 486.182498][T27899] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.7091: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 486.224679][T27899] EXT4-fs (loop8): get root inode failed [ 486.230431][T27899] EXT4-fs (loop8): mount failed [ 486.526809][T27937] loop8: detected capacity change from 0 to 1024 [ 486.556068][T27937] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.635049][T27937] __nla_validate_parse: 11 callbacks suppressed [ 486.635070][T27937] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7089'. [ 486.670696][T27944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7090'. [ 486.684140][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.695058][T27944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7090'. [ 486.774876][T27946] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 486.795817][T27946] loop8: detected capacity change from 0 to 2048 [ 486.918645][T27954] loop8: detected capacity change from 0 to 2048 [ 486.950325][T27954] Alternate GPT is invalid, using primary GPT. [ 486.956663][T27954] loop8: p1 p2 p3 [ 487.106908][T27958] netlink: 'syz.5.7095': attribute type 1 has an invalid length. [ 487.114832][T27958] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.7095'. [ 487.349358][T27968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.358263][T27968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.999485][T27981] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 488.039615][T27983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7103'. [ 488.232244][T27975] tipc: Enabling of bearer rejected, already enabled [ 488.420677][T28009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.429296][T28009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.938128][T28015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.958274][T28015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.000493][T28019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7117'. [ 489.063611][T28027] netlink: 'syz.1.7118': attribute type 1 has an invalid length. [ 489.071368][T28027] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.7118'. [ 489.084380][T28026] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 489.205867][T28033] netlink: 'syz.5.7122': attribute type 60 has an invalid length. [ 489.962920][T28051] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 489.991927][T28053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7128'. [ 490.006596][T28053] loop8: detected capacity change from 0 to 512 [ 490.041707][T28053] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.7128: invalid block [ 490.063465][T28053] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.7128: invalid indirect mapped block 4294967295 (level 1) [ 490.084453][T28053] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.7128: invalid indirect mapped block 4294967295 (level 1) [ 490.194226][T28053] EXT4-fs (loop8): 2 truncates cleaned up [ 490.200489][T28053] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.309199][T28068] bridge_slave_0: left allmulticast mode [ 490.314932][T28068] bridge_slave_0: left promiscuous mode [ 490.320696][T28068] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.330975][T28070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.341120][T28070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.343143][T28068] bridge_slave_1: left allmulticast mode [ 490.354550][T28068] bridge_slave_1: left promiscuous mode [ 490.360182][T28068] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.387389][T28076] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 490.398535][T28068] bond0: (slave bond_slave_0): Releasing backup interface [ 490.415916][T28068] bond0: (slave bond_slave_1): Releasing backup interface [ 490.452345][T28068] team0: Port device team_slave_1 removed [ 490.534766][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7135'. [ 490.547642][T28078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7135'. [ 490.649725][T28082] netlink: 'syz.2.7137': attribute type 1 has an invalid length. [ 490.766846][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 490.766860][ T29] audit: type=1326 audit(1758087833.486:25890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28065 comm="syz.0.7132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f394faf5b67 code=0x7ffc0000 [ 490.810363][ T29] audit: type=1326 audit(1758087833.486:25891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28065 comm="syz.0.7132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f394fa9ada9 code=0x7ffc0000 [ 490.834013][ T29] audit: type=1326 audit(1758087833.486:25892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28065 comm="syz.0.7132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394fafeba9 code=0x7ffc0000 [ 490.857682][ T29] audit: type=1326 audit(1758087833.566:25893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28065 comm="syz.0.7132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f394faf5b67 code=0x7ffc0000 [ 490.881190][ T29] audit: type=1326 audit(1758087833.566:25894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28065 comm="syz.0.7132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f394fa9ada9 code=0x7ffc0000 [ 490.904692][ T29] audit: type=1326 audit(1758087833.566:25895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28065 comm="syz.0.7132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394fafeba9 code=0x7ffc0000 [ 490.991678][T23085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.021655][ T29] audit: type=1107 audit(1758087833.736:25896): pid=28087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W‰í' [ 491.050389][ T29] audit: type=1326 audit(1758087833.756:25897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28087 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394fafeba9 code=0x7ffc0000 [ 491.073292][ T29] audit: type=1326 audit(1758087833.756:25898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28087 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394fafeba9 code=0x7ffc0000 [ 491.096209][ T29] audit: type=1326 audit(1758087833.756:25899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28087 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f394fafeba9 code=0x7ffc0000 [ 491.421692][T28109] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.461358][T28111] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 491.544019][T28109] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.604601][T28109] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.637465][T28115] __nla_validate_parse: 1 callbacks suppressed [ 491.637483][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7147'. [ 491.842939][T28109] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.856665][T28115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7147'. [ 492.342926][ T5775] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.361329][ T5775] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.381472][ T5775] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.404965][ T5775] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.472226][T28133] loop8: detected capacity change from 0 to 2048 [ 492.484805][T28134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.493342][T28134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.523072][T28133] Alternate GPT is invalid, using primary GPT. [ 492.529412][T28133] loop8: p1 p2 p3 [ 492.747037][T28143] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 492.836575][T28156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7162'. [ 492.849592][T28156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7162'. [ 492.919468][T28153] tipc: Enabling of bearer rejected, already enabled [ 492.943088][T28158] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 493.327606][T28175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.342498][T28175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.635594][T28181] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 493.943797][T28199] loop8: detected capacity change from 0 to 2048 [ 493.965350][T28203] netlink: 'syz.1.7181': attribute type 1 has an invalid length. [ 493.973127][T28203] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.7181'. [ 493.992093][T28199] Alternate GPT is invalid, using primary GPT. [ 493.998476][T28199] loop8: p1 p2 p3 [ 494.040430][T28206] netlink: 'syz.2.7182': attribute type 60 has an invalid length. [ 494.983288][T28234] netlink: 'syz.5.7192': attribute type 60 has an invalid length. [ 495.007920][T28245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.016673][T28245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.416305][T28242] loop8: detected capacity change from 0 to 2048 [ 495.442100][T28242] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.7193: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 495.470021][T28242] EXT4-fs (loop8): get root inode failed [ 495.475845][T28242] EXT4-fs (loop8): mount failed [ 495.908621][T28262] tipc: Enabling of bearer rejected, already enabled [ 495.917122][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 495.917138][ T29] audit: type=1326 audit(1758087838.638:26212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28261 comm="syz.2.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 495.966437][ T29] audit: type=1326 audit(1758087838.638:26213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28261 comm="syz.2.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 495.990125][ T29] audit: type=1326 audit(1758087838.638:26214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28261 comm="syz.2.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 496.013862][ T29] audit: type=1326 audit(1758087838.638:26215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28261 comm="syz.2.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 496.037398][ T29] audit: type=1326 audit(1758087838.638:26216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28261 comm="syz.2.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 496.061382][ T29] audit: type=1326 audit(1758087838.638:26217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28261 comm="syz.2.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 496.085017][ T29] audit: type=1326 audit(1758087838.638:26218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28261 comm="syz.2.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 496.108660][ T29] audit: type=1326 audit(1758087838.638:26219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28261 comm="syz.2.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 496.132144][ T29] audit: type=1326 audit(1758087838.638:26220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28261 comm="syz.2.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 496.155956][ T29] audit: type=1326 audit(1758087838.638:26221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28261 comm="syz.2.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 496.164802][T28270] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 496.185954][T28270] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 496.193484][T28270] vhci_hcd vhci_hcd.0: Device attached [ 496.205613][T28274] netlink: 'syz.1.7205': attribute type 1 has an invalid length. [ 496.213447][T28274] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.7205'. [ 496.231891][T28269] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 496.245454][T28279] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.256384][T28265] tipc: Enabling of bearer rejected, already enabled [ 496.275296][T28269] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(6) [ 496.281815][T28269] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 496.289214][T28269] vhci_hcd vhci_hcd.0: Device attached [ 496.297944][T28279] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.318213][T28269] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 496.324891][T28269] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 496.332574][T28269] vhci_hcd vhci_hcd.0: Device attached [ 496.361952][T28279] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.373892][T28269] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13) [ 496.380496][T28269] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 496.388273][T28269] vhci_hcd vhci_hcd.0: Device attached [ 496.400199][T28269] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 496.409062][T28269] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 496.418377][T28279] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.423194][T28293] vhci_hcd: connection closed [ 496.428534][ T5754] vhci_hcd: stop threads [ 496.437525][ T5754] vhci_hcd: release socket [ 496.441965][ T5754] vhci_hcd: disconnect device [ 496.460510][T28284] vhci_hcd: connection closed [ 496.460635][T28271] vhci_hcd: connection closed [ 496.463929][ T5754] vhci_hcd: stop threads [ 496.465419][T28289] vhci_hcd: connection closed [ 496.474428][ T5754] vhci_hcd: release socket [ 496.483546][ T5754] vhci_hcd: disconnect device [ 496.490367][ T5754] vhci_hcd: stop threads [ 496.494670][ T5754] vhci_hcd: release socket [ 496.499261][ T5754] vhci_hcd: disconnect device [ 496.504382][ T5754] vhci_hcd: stop threads [ 496.508675][ T5754] vhci_hcd: release socket [ 496.513145][ T5754] vhci_hcd: disconnect device [ 496.548528][ T1749] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.602926][ T1749] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.633117][ T1749] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.657527][ T1749] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.672433][T28301] tipc: Enabling of bearer rejected, already enabled [ 497.166025][T28305] loop8: detected capacity change from 0 to 2048 [ 497.265305][T28333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.274507][T28333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.341312][T28330] tipc: Enabling of bearer rejected, already enabled [ 497.635372][T28346] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 497.641958][T28346] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 497.649417][T28346] vhci_hcd vhci_hcd.0: Device attached [ 497.655649][T28346] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 497.664343][T28346] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 497.670864][T28346] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 497.678273][T28346] vhci_hcd vhci_hcd.0: Device attached [ 497.684402][T28346] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 497.691004][T28346] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 497.698637][T28346] vhci_hcd vhci_hcd.0: Device attached [ 497.708799][T28346] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 497.715391][T28346] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 497.723055][T28346] vhci_hcd vhci_hcd.0: Device attached [ 497.729047][T28346] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 497.737657][T28346] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 497.750475][T28357] vhci_hcd: connection closed [ 497.750567][ T5754] vhci_hcd: stop threads [ 497.750738][T28355] vhci_hcd: connection closed [ 497.755282][ T5754] vhci_hcd: release socket [ 497.768684][ T5754] vhci_hcd: disconnect device [ 497.769245][T28353] vhci_hcd: connection closed [ 497.773449][T28348] vhci_hcd: connection closed [ 497.773906][ T5754] vhci_hcd: stop threads [ 497.787275][ T5754] vhci_hcd: release socket [ 497.791781][ T5754] vhci_hcd: disconnect device [ 497.796545][ T5754] vhci_hcd: stop threads [ 497.800823][ T5754] vhci_hcd: release socket [ 497.805239][ T5754] vhci_hcd: disconnect device [ 497.811460][ T5754] vhci_hcd: stop threads [ 497.815727][ T5754] vhci_hcd: release socket [ 497.820153][ T5754] vhci_hcd: disconnect device [ 497.828820][T28363] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 497.894942][T28370] serio: Serial port ptm0 [ 497.927702][T28371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.936149][T28371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.520527][T28384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.529841][T28384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.541955][T28383] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.606554][T28383] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.662719][T28383] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.723239][T28383] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.782938][ T5744] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.798582][ T5744] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.830151][ T5744] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.850923][ T5744] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.168653][T28402] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 499.175206][T28402] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 499.182636][T28402] vhci_hcd vhci_hcd.0: Device attached [ 499.189150][T28402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 499.198003][T28402] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 499.204660][T28402] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 499.212083][T28402] vhci_hcd vhci_hcd.0: Device attached [ 499.219002][T28402] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11) [ 499.225604][T28402] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 499.233306][T28402] vhci_hcd vhci_hcd.0: Device attached [ 499.250143][T28402] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(13) [ 499.256750][T28402] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 499.264359][T28402] vhci_hcd vhci_hcd.0: Device attached [ 499.299585][T28417] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 499.308394][T28402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 499.341454][T28412] vhci_hcd: connection closed [ 499.341590][ T5775] vhci_hcd: stop threads [ 499.350640][ T5775] vhci_hcd: release socket [ 499.355046][ T5775] vhci_hcd: disconnect device [ 499.360106][ T3527] vhci_hcd: vhci_device speed not set [ 499.365753][T28410] vhci_hcd: connection closed [ 499.365967][ T5775] vhci_hcd: stop threads [ 499.374905][ T5775] vhci_hcd: release socket [ 499.379467][ T5775] vhci_hcd: disconnect device [ 499.387117][T28407] vhci_hcd: connection closed [ 499.388575][T28419] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.390160][T28405] vhci_hcd: connection closed [ 499.394446][ T5775] vhci_hcd: stop threads [ 499.412007][ T5775] vhci_hcd: release socket [ 499.416416][ T5775] vhci_hcd: disconnect device [ 499.421593][ T3527] usb 3-1: new full-speed USB device number 4 using vhci_hcd [ 499.429087][T28406] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 499.438135][ T5775] vhci_hcd: stop threads [ 499.442481][ T5775] vhci_hcd: release socket [ 499.446943][ T5775] vhci_hcd: disconnect device [ 499.471270][T28419] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.513750][T28424] serio: Serial port ptm0 [ 499.521221][T28419] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.571430][T28419] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.636598][T28427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7251'. [ 499.954576][T28445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7258'. [ 499.966798][T28445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7258'. [ 500.025097][T28449] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 500.405216][T28458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.414037][T28458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.428305][ T5775] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.439575][ T5775] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.450644][ T5775] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.461905][ T5775] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.484663][T28460] netlink: 'syz.0.7263': attribute type 1 has an invalid length. [ 500.492426][T28460] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.7263'. [ 500.776840][T28469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7265'. [ 500.813298][T28473] 9pnet_fd: Insufficient options for proto=fd [ 500.925527][T28478] loop8: detected capacity change from 0 to 1024 [ 500.950028][T28478] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 500.976246][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 500.976257][ T29] audit: type=1326 audit(1758087843.679:26569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28456 comm="syz.2.7262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff892785b67 code=0x7ffc0000 [ 501.006033][ T29] audit: type=1326 audit(1758087843.679:26570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28456 comm="syz.2.7262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff89272ada9 code=0x7ffc0000 [ 501.029638][ T29] audit: type=1326 audit(1758087843.679:26571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28456 comm="syz.2.7262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 501.069570][ T29] audit: type=1326 audit(1758087843.779:26572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.2.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 501.094825][ T29] audit: type=1326 audit(1758087843.819:26573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.2.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 501.118522][ T29] audit: type=1326 audit(1758087843.819:26574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.2.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 501.142087][ T29] audit: type=1326 audit(1758087843.819:26575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.2.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 501.165731][ T29] audit: type=1326 audit(1758087843.819:26576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.2.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 501.189459][ T29] audit: type=1326 audit(1758087843.819:26577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.2.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 501.213186][ T29] audit: type=1326 audit(1758087843.819:26578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28480 comm="syz.2.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89278eba9 code=0x7ffc0000 [ 501.242737][T28481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.251551][T28481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.260129][T28478] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 501.266782][T28478] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 501.274235][T28478] vhci_hcd vhci_hcd.0: Device attached [ 501.280561][T28478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 501.288718][T28486] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 501.289215][T28478] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(9) [ 501.303640][T28478] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 501.311074][T28478] vhci_hcd vhci_hcd.0: Device attached [ 501.318248][T28478] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(11) [ 501.324862][T28478] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 501.332513][T28478] vhci_hcd vhci_hcd.0: Device attached [ 501.339056][T28478] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(13) [ 501.345660][T28478] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 501.353368][T28478] vhci_hcd vhci_hcd.0: Device attached [ 501.359275][T28478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 501.367804][T28478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 501.379465][T28489] vhci_hcd: connection closed [ 501.379552][T28491] ================================================================== [ 501.379668][T28487] vhci_hcd: connection closed [ 501.384270][T28491] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 501.396791][ T5731] vhci_hcd: stop threads [ 501.397025][T28491] [ 501.397036][T28491] write to 0xffffffff868955c0 of 8 bytes by task 28489 on cpu 1: [ 501.403661][ T5731] vhci_hcd: release socket [ 501.407833][T28491] data_alloc+0x27d/0x2b0 [ 501.407875][T28491] prb_reserve+0x808/0xaf0 [ 501.410236][ T5731] vhci_hcd: disconnect device [ 501.417915][T28491] vprintk_store+0x56d/0x860 [ 501.423025][ T5731] vhci_hcd: stop threads [ 501.426660][T28491] vprintk_emit+0x178/0x650 [ 501.426683][T28491] vprintk_default+0x26/0x30 [ 501.431146][ T5731] vhci_hcd: release socket [ 501.435782][T28491] vprintk+0x1d/0x30 [ 501.435810][T28491] _printk+0x79/0xa0 [ 501.435839][T28491] vhci_rx_loop+0x4ab/0x5f0 [ 501.435864][T28491] kthread+0x489/0x510 [ 501.435883][T28491] ret_from_fork+0x11f/0x1b0 [ 501.440501][ T5731] vhci_hcd: disconnect device [ 501.444685][T28491] ret_from_fork_asm+0x1a/0x30 [ 501.444708][T28491] [ 501.444713][T28491] read to 0xffffffff868955c0 of 8 bytes by task 28491 on cpu 0: [ 501.449439][T28483] vhci_hcd: connection closed [ 501.453763][T28491] prb_reserve+0x221/0xaf0 [ 501.453799][T28491] vprintk_store+0x56d/0x860 [ 501.453817][T28491] vprintk_emit+0x178/0x650 [ 501.453832][T28491] vprintk_default+0x26/0x30 [ 501.453846][T28491] vprintk+0x1d/0x30 [ 501.458677][ T5731] vhci_hcd: stop threads [ 501.462150][T28491] _printk+0x79/0xa0 [ 501.462184][T28491] vhci_rx_loop+0x4ab/0x5f0 [ 501.466090][ T5731] vhci_hcd: release socket [ 501.470563][T28491] kthread+0x489/0x510 [ 501.470586][T28491] ret_from_fork+0x11f/0x1b0 [ 501.474650][ T5731] vhci_hcd: disconnect device [ 501.479216][T28491] ret_from_fork_asm+0x1a/0x30 [ 501.484050][ T2958] vhci_hcd: vhci_device speed not set [ 501.488631][T28491] [ 501.488637][T28491] value changed: 0x0000000000054840 -> 0x00000000000f19d0 [ 501.574829][T28491] [ 501.577144][T28491] Reported by Kernel Concurrency Sanitizer on: [ 501.583290][T28491] CPU: 0 UID: 0 PID: 28491 Comm: vhci_rx Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 501.594412][T28491] Tainted: [W]=WARN [ 501.598228][T28491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.608273][T28491] ================================================================== [ 501.379423][T28491] vhci_hcd: connection closed [ 501.619649][ T5775] vhci_hcd: stop threads [ 501.628618][ T5775] vhci_hcd: release socket [ 501.633073][ T5775] vhci_hcd: disconnect device [ 504.470006][ T3527] usb 3-1: enqueue for inactive port 0 [ 504.475488][ T3527] usb 3-1: enqueue for inactive port 0 [ 504.549872][ T3527] vhci_hcd: vhci_device speed not set