last executing test programs: 15.646397729s ago: executing program 4 (id=259): mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x50, 0xffffffffffffffff, 0x4b2c8000) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='sys_enter\x00', r2, 0x0, 0x9}, 0x18) rt_tgsigqueueinfo(0x0, 0x0, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x800200, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)="a5711f8278cffb5dba80f393438bd80bbef57375752fed4b39037c7798aeb3b987d893bba0e9719a7cf59df10ab2f0b3b31040ccfe620c90367542375da457a483df9efbb432316babf4705d049ccb3646bf81c1b2777f67ec004d6bc8ae4e91864acb54d926dfae2f67e0b05bbaf2434d2181ba48f2a2857a1804d2a792c5d01715c7b4a39efbde8b8550465854ae644b2c3b09de03f8cf76750adc0b5e1fc84d5863e418e4edd43598f615995746813c895da245617181d58cd0fb470d3b") io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 15.429790781s ago: executing program 4 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000e14c0000000000009901600000000000070000", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlockall() 15.397222861s ago: executing program 4 (id=264): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f00000005c0)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) sendmmsg$unix(r0, &(0x7f0000006ec0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001680)="b479c667", 0x4}], 0x1}}], 0x1, 0x4000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000180)={0xb, 0x173, 0xcd}) 15.192579232s ago: executing program 4 (id=266): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd09e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x5, 0x5a) fchdir(r0) close(r0) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) semop(0x0, 0x0, 0x0) 14.517444046s ago: executing program 4 (id=273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000041000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0xff, 0xa4], &(0x7f0000001280), 0x0, 0x100000}}, 0x40) 13.86380161s ago: executing program 4 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000e14c00000000000099016000000000000700000000", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) munlockall() 13.711657901s ago: executing program 32 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000e14c00000000000099016000000000000700000000", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) munlockall() 2.387874547s ago: executing program 0 (id=526): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x4e23, 0xfffe, 0x0, 0x0, 0x20}, {0x0, 0x0, 0xddcf}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@loopback}, 0x0, @in6=@empty}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback, 0x826f}}}, 0x32) sendmmsg(r1, 0x0, 0x0, 0x20040804) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000180), 0x4) r7 = socket$unix(0x1, 0x1, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) recvmsg(r7, &(0x7f00000009c0)={&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000007c0)=""/187, 0xbb}], 0x9}, 0x40000000) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 2.167551558s ago: executing program 0 (id=534): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsmount(r0, 0x0, 0x0) 2.078315108s ago: executing program 0 (id=539): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsmount(r0, 0x0, 0x0) 2.006289469s ago: executing program 0 (id=542): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) sendmmsg$unix(r0, &(0x7f0000006ec0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001680)="b479c667", 0x4}], 0x1}}], 0x1, 0x4000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000180)={0xb, 0x173, 0xcd}) 1.701062021s ago: executing program 2 (id=550): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x2a4c0, 0x918d8ecf0d5d0600) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030", @ANYRESHEX=r1], 0x15) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, 0x0, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000008000"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESOCT=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000000)='./file0\x00', 0x900000d2) 1.529159652s ago: executing program 5 (id=553): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'bond0\x00', &(0x7f0000000240)=@ethtool_cmd={0x2, 0x5, 0x1, 0x4, 0x9, 0x3, 0x6, 0x32, 0x4, 0x5, 0x4, 0x62, 0x7375, 0x10, 0x8, 0x9, [0x7, 0x3]}}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000500), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f00000019c0)={@dev={0xac, 0x14, 0x14, 0x39}, @empty, 0x1000, "544e6b24af869c8bcbb43306faffff14001600000000000200005e00", 0x0, 0x0, 0xfffffffd}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000001800000000000cb4090f069b88af16a000085000050000000b7f73b196a09fe63a87cf1fcf53343c7ecf1efe9d6977a5aac74b92c5c889338fd167f0aeb93d0724f7736fdbd2349ce5d4417f31b838d7ccab581081c26705ac85f2687fbf8df2e3314cb201e8bb72cd4ed3dd4987b1b01a4200436aa2ee9a90a46b878b7faf31f399be3da1c4b0384580306866861332aad1e63b6aa333e87b918d835de4f9674"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 1.472292382s ago: executing program 2 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="47000e"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000840)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='mm_page_free\x00', r5, 0x0, 0x2}, 0x18) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.373158633s ago: executing program 5 (id=556): timer_create(0x0, 0x0, &(0x7f00000003c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getuid() 1.293815373s ago: executing program 5 (id=558): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 1.262451353s ago: executing program 5 (id=560): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x208080, &(0x7f00000000c0), 0x1, 0x598, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xb, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000003000000000000059800000000303061302e006a0a0b242bb5"], 0x0, 0x2b, 0x0, 0x8, 0xffffffff, 0x0, @void, @value}, 0x28) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000000000", @ANYRES32, @ANYBLOB="00000000000097cd1d1800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='fdb_delete\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.014815574s ago: executing program 3 (id=565): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0xff, 0xa4], &(0x7f0000001280), 0x0, 0x100000}}, 0x40) 870.158036ms ago: executing program 0 (id=566): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'bond0\x00', &(0x7f0000000240)=@ethtool_cmd={0x2, 0x5, 0x1, 0x4, 0x9, 0x3, 0x6, 0x32, 0x4, 0x5, 0x4, 0x62, 0x7375, 0x10, 0x8, 0x9, [0x7, 0x3]}}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000500), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f00000019c0)={@dev={0xac, 0x14, 0x14, 0x39}, @empty, 0x1000, "544e6b24af869c8bcbb43306faffff14001600000000000200005e00", 0x0, 0x0, 0xfffffffd}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000001800000000000cb4090f069b88af16a000085000050000000b7f73b196a09fe63a87cf1fcf53343c7ecf1efe9d6977a5aac74b92c5c889338fd167f0aeb93d0724f7736fdbd2349ce5d4417f31b838d7ccab581081c26705ac85f2687fbf8df2e3314cb201e8bb72cd4ed3dd4987b1b01a4200436aa2ee9a90a46b878b7faf31f399be3da1c4b0384580306866861332aad1e63b6aa333e87b918d835de4f9674"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 802.538366ms ago: executing program 1 (id=567): setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@remote, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x1, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r2 = creat(0x0, 0x0) setgroups(0x0, 0x0) lseek(r1, 0x9, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000440)={'broute\x00', 0x0, 0x4, 0xfd, [0x2, 0x3ff, 0x100, 0xffffffff7fffffff, 0x3d, 0xf], 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000640)=""/253}, &(0x7f0000000280)=0x78) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x270, r6, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x220, 0x8, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe960300000000000000766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @loopback, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010101}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 633.704197ms ago: executing program 0 (id=568): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) dup(r0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x8}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x1fc, 0x129, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0xfffc}, 0x0, 0xc, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_clone3(&(0x7f0000000340)={0x42107480, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r1, 0x0) r7 = dup3(r6, r1, 0x0) fstat(r7, &(0x7f0000000100)) 614.240267ms ago: executing program 3 (id=569): unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x2000400) fsmount(r0, 0x0, 0x0) 567.720047ms ago: executing program 1 (id=570): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 556.197677ms ago: executing program 2 (id=571): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'bond0\x00', &(0x7f0000000240)=@ethtool_cmd={0x2, 0x5, 0x1, 0x4, 0x9, 0x3, 0x6, 0x32, 0x4, 0x5, 0x4, 0x62, 0x7375, 0x10, 0x8, 0x9, [0x7, 0x3]}}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000500), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f00000019c0)={@dev={0xac, 0x14, 0x14, 0x39}, @empty, 0x1000, "544e6b24af869c8bcbb43306faffff14001600000000000200005e00", 0x0, 0x0, 0xfffffffd}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000001800000000000cb4090f069b88af16a000085000050000000b7f73b196a09fe63a87cf1fcf53343c7ecf1efe9d6977a5aac74b92c5c889338fd167f0aeb93d0724f7736fdbd2349ce5d4417f31b838d7ccab581081c26705ac85f2687fbf8df2e3314cb201e8bb72cd4ed3dd4987b1b01a4200436aa2ee9a90a46b878b7faf31f399be3da1c4b0384580306866861332aad1e63b6aa333e87b918d835de4f9674"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 491.177707ms ago: executing program 3 (id=572): timer_create(0x0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) getuid() 436.189568ms ago: executing program 1 (id=573): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 394.133318ms ago: executing program 3 (id=574): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mlockall(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) read(r1, &(0x7f0000000140)=""/109, 0x20) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) writev(0xffffffffffffffff, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x45}], 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000031c0), 0x12) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) semget$private(0x0, 0x4000000009, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fallocate(0xffffffffffffffff, 0x8, 0x2000, 0x7000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000200)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) 393.771358ms ago: executing program 2 (id=575): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x3, 0x0, 0x2000007, 0x1, 0x1, 0x8, 0x8000000000000000}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0) 337.803669ms ago: executing program 1 (id=576): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) sendmmsg$unix(r0, &(0x7f0000006ec0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001680)="b479c667", 0x4}], 0x1}}], 0x1, 0x4000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000180)={0xb, 0x173, 0xcd}) 293.547888ms ago: executing program 2 (id=577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000020603000000000000000000000000000500040000000000050001000600000005000500000000000900020073797a32000000000d0003006c6973743a7365740000000071027a6e5d1abb7d7127adf0afd646ddb7881b1e4a5aaa91456fb4738acbc8f9fad4"], 0x48}}, 0x0) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1}, 0x10) close(r2) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={0x0}}, 0x4004010) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',uname=']) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000003060108000000000000000005000005050001000700000045000100070000000900020073797a32000000000a8644268a6282"], 0x30}}, 0x40000) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000400), 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry") r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r7, 0x0, 0x3}, 0x18) ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) fcntl$setlease(r6, 0x400, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) chown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 275.175589ms ago: executing program 5 (id=578): setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@remote, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x1, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r2 = creat(0x0, 0x0) setgroups(0x0, 0x0) lseek(r1, 0x9, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000440)={'broute\x00', 0x0, 0x4, 0xfd, [0x2, 0x3ff, 0x100, 0xffffffff7fffffff, 0x3d, 0xf], 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000640)=""/253}, &(0x7f0000000280)=0x78) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x270, r6, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x220, 0x8, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe960300000000000000766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @loopback, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010101}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 246.866929ms ago: executing program 3 (id=579): utime(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x8, 0x2}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000400000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000180)={0x2, 0x2, 0x2}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_bp={0x0, 0x1}, 0x104004, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sysinfo(&(0x7f0000000100)=""/90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) getpgrp(0x0) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000640)={0x9, @remote}, &(0x7f0000000680)=0x12, 0x80800) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f00000006c0)={'vlan1\x00', 0x0, 0x7ff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0xeeffff, &(0x7f0000000540)={0xc9, 0xee, r7, 0x1, 0x0, 0x6, @random="71b2ca929713"}, 0x14) 218.491119ms ago: executing program 1 (id=580): setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@remote, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x1, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000440)={'broute\x00', 0x0, 0x4, 0xfd, [0x2, 0x3ff, 0x100, 0xffffffff7fffffff, 0x3d, 0xf], 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000640)=""/253}, &(0x7f0000000280)=0x78) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x270, r4, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x220, 0x8, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe960300000000000000766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @loopback, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010101}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 128.97603ms ago: executing program 3 (id=581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="47000e"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000840)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='mm_page_free\x00', r5, 0x0, 0x2}, 0x18) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 108.00937ms ago: executing program 1 (id=582): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_secret(0x80000) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f0000000740)='romfs\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000dc6c1651201038be800000000000000000"], &(0x7f0000000340)='GPL\x00', 0x3f58, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 9.06163ms ago: executing program 2 (id=583): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x138) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000940)=""/183, &(0x7f00000001c0)=0xb7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) socket$inet6(0xa, 0x3, 0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000280)={[{@inlinecrypt}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x5ff}}, {@resuid}]}, 0xfe, 0x47a, &(0x7f0000000440)="$eJzs3M1vFOUfAPDvTLvl7cevVfEFBKmikfjS0vIiBy8aTTxoYqIHjKfaLqSyUENrIoRo9YBHQ+Ld+F8YT3ox6EUTr3o3JMRwAfWyZnZmYFl2yxa2rGU/n2S6zzPzbJ/5zswz+8w8uxPAwBrP/iQR/4uI3yJiNM/eWGA8f7l6+ezsX5fPziZRr7/1Z9Iod+Xy2dmyaPm+LXmmXi/yG9rUe+7diJlarXqqyE8unfhgcvH0mefnT8wcqx6rnpw+fPjA/l0jh6YP9iTOLK4rOz5e2Ln9tXfOvzF75Px7PybDkccdLXH0yni+ddt6qteV9dnWpnRjw16z++fr6XZHAv00FBHZ7qo02v9oDMWma8tG49XP+rpywJqq1+v1Fc7Ky3XgHpZEv9cA6I/ygz67/i2n5g5Asrbdj7679FJ+AZTFfbWY8iXDkeaJ3ZWW69teGo+II8t/f5VNsUb3IQAAmn2X9X+ea9f/S+OhPDGS/fl/MYYyFhH3RcT9EfFARGyLiAcjGmUfjohHVll/6wjJzf2f9OJtB9eFrP/3YjG2VU4X8nrLImNDRW5rI/5KcnS+Vt1XbJO9UdlwdD6pTq1Qx/ev/PpFp2XN/b9syuov+4K59OJwyw26uZmlmTsKusmlTyN2DN8Yf74kiXIYJ7sG2B4RO26zjvlnhjsuu3X8K+j8b7tW/zri6Xz/L0dL/KWk4/jk1AuHpg9Oboxadd9keVTc7Kdfzr3Zqf47ir8Hsv2/Odrv/8JYsjFi8fSZ443x2sXV13Hu9887XtN0ffxXrs/Jjv+R5O1GeqSY99HM0tKpqYiR5PWb509ff2+ZL8tn8e/d0y7+tHGOK7fEoxGxMyJ2RcRj2UVhse6PR8QTEbFnhfgvvPzk+6uP/+6MlWbxz91q/0fz/l99Yuj4D9/eOv6NEdFp/x9opPYWc7o5/3W7gney7QAAAGC9SBvfgU/SiWvpNJ2YyL/Dvy02p7WFxaVnjy58eHIu/678WFTS8k7XaNP90Kni3nCZn27J7y/uG385tKmRn5hdqM31O3gYcFs6tP/MH0P9XjtgzfVgHA1Yp7R/GFzaPwymRPuHgab9w+Bq1/4/6Vh64ps1XRngrvL5D4Ori/a/nL907hUA65PPfxhc2j8MpI6/jU+7/sl/+aiF234+QC8S/xTPM+xP7YOYiPQ/sRr3fmK464dZrCJRH80bbTZnQ9sy/TwrAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9M6/AQAA//+dTOLG") write$sndseq(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 5 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000041000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 20.774539][ T29] audit: type=1400 audit(1732149706.089:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 26.738482][ T29] audit: type=1400 audit(1732149712.059:82): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.739710][ T3304] cgroup: Unknown subsys name 'net' [ 26.761238][ T29] audit: type=1400 audit(1732149712.059:83): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.788649][ T29] audit: type=1400 audit(1732149712.089:84): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.006267][ T3304] cgroup: Unknown subsys name 'cpuset' [ 27.012443][ T3304] cgroup: Unknown subsys name 'rlimit' [ 27.153857][ T29] audit: type=1400 audit(1732149712.469:85): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.177180][ T29] audit: type=1400 audit(1732149712.469:86): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.197924][ T29] audit: type=1400 audit(1732149712.469:87): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.218460][ T29] audit: type=1400 audit(1732149712.469:88): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.238805][ T29] audit: type=1400 audit(1732149712.469:89): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.248162][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.263752][ T29] audit: type=1400 audit(1732149712.469:90): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.295571][ T29] audit: type=1400 audit(1732149712.599:91): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.325071][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.383083][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.468281][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.501128][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.508343][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.515505][ T3314] bridge_slave_0: entered allmulticast mode [ 28.521902][ T3314] bridge_slave_0: entered promiscuous mode [ 28.529901][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.537062][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.544224][ T3314] bridge_slave_1: entered allmulticast mode [ 28.550686][ T3314] bridge_slave_1: entered promiscuous mode [ 28.568048][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.600797][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.649324][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.670959][ T3314] team0: Port device team_slave_0 added [ 28.678721][ T3314] team0: Port device team_slave_1 added [ 28.688786][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.695969][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.703087][ T3315] bridge_slave_0: entered allmulticast mode [ 28.709618][ T3315] bridge_slave_0: entered promiscuous mode [ 28.727765][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.734744][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.760747][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.776098][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.787013][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.794233][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.801402][ T3315] bridge_slave_1: entered allmulticast mode [ 28.807845][ T3315] bridge_slave_1: entered promiscuous mode [ 28.818941][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.826068][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.852074][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.889894][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 28.906869][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.916104][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.923209][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.930459][ T3316] bridge_slave_0: entered allmulticast mode [ 28.936995][ T3316] bridge_slave_0: entered promiscuous mode [ 28.943926][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.951089][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.958367][ T3316] bridge_slave_1: entered allmulticast mode [ 28.964872][ T3316] bridge_slave_1: entered promiscuous mode [ 28.979363][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.015751][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.045219][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.056787][ T3314] hsr_slave_0: entered promiscuous mode [ 29.062748][ T3314] hsr_slave_1: entered promiscuous mode [ 29.071342][ T3315] team0: Port device team_slave_0 added [ 29.078133][ T3315] team0: Port device team_slave_1 added [ 29.083901][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.091038][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.098293][ T3317] bridge_slave_0: entered allmulticast mode [ 29.104674][ T3317] bridge_slave_0: entered promiscuous mode [ 29.111269][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.118423][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.125743][ T3317] bridge_slave_1: entered allmulticast mode [ 29.132271][ T3317] bridge_slave_1: entered promiscuous mode [ 29.173556][ T3316] team0: Port device team_slave_0 added [ 29.180164][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.187354][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.194549][ T3325] bridge_slave_0: entered allmulticast mode [ 29.201150][ T3325] bridge_slave_0: entered promiscuous mode [ 29.212150][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.219161][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.245103][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.261855][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.271956][ T3316] team0: Port device team_slave_1 added [ 29.282481][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.289602][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.296760][ T3325] bridge_slave_1: entered allmulticast mode [ 29.303161][ T3325] bridge_slave_1: entered promiscuous mode [ 29.309659][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.316664][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.343047][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.358342][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.392051][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.399138][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.425079][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.437810][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.452034][ T3317] team0: Port device team_slave_0 added [ 29.464507][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.471548][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.497593][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.516828][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.528740][ T3317] team0: Port device team_slave_1 added [ 29.572225][ T3315] hsr_slave_0: entered promiscuous mode [ 29.578322][ T3315] hsr_slave_1: entered promiscuous mode [ 29.584304][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.591910][ T3315] Cannot create hsr debugfs directory [ 29.597999][ T3325] team0: Port device team_slave_0 added [ 29.604154][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.611144][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.637086][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.656337][ T3316] hsr_slave_0: entered promiscuous mode [ 29.662507][ T3316] hsr_slave_1: entered promiscuous mode [ 29.668405][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.676052][ T3316] Cannot create hsr debugfs directory [ 29.682335][ T3325] team0: Port device team_slave_1 added [ 29.694057][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.701068][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.727071][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.755994][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.762993][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.789054][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.802789][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.809812][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.835793][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.891199][ T3317] hsr_slave_0: entered promiscuous mode [ 29.897278][ T3317] hsr_slave_1: entered promiscuous mode [ 29.903282][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.910964][ T3317] Cannot create hsr debugfs directory [ 29.948303][ T3325] hsr_slave_0: entered promiscuous mode [ 29.954320][ T3325] hsr_slave_1: entered promiscuous mode [ 29.960187][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.968845][ T3325] Cannot create hsr debugfs directory [ 30.016393][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.038249][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.056502][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.067221][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.115092][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.129766][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.146758][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.156782][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.185899][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.205744][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.219701][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.229118][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.255895][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.264751][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.280507][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.290525][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.309326][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.329032][ T3325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.338271][ T3325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.347440][ T3325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.357278][ T3325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.370224][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.389457][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.396540][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.422243][ T2084] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.429447][ T2084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.490512][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.499293][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.508229][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.526971][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.549026][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.558310][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.565425][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.574215][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.581456][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.595195][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.611309][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.618400][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.634967][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.645515][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.657891][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.665051][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.680485][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.687579][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.701868][ T2084] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.709002][ T2084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.727826][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.743764][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.757003][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.777967][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.785106][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.806290][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.813370][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.844283][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.909126][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.922836][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.933426][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.982261][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.039129][ T3314] veth0_vlan: entered promiscuous mode [ 31.046454][ T3315] veth0_vlan: entered promiscuous mode [ 31.070107][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.081526][ T3315] veth1_vlan: entered promiscuous mode [ 31.090639][ T3314] veth1_vlan: entered promiscuous mode [ 31.116345][ T3314] veth0_macvtap: entered promiscuous mode [ 31.138973][ T3314] veth1_macvtap: entered promiscuous mode [ 31.168638][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.176948][ T3315] veth0_macvtap: entered promiscuous mode [ 31.195231][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.205971][ T3315] veth1_macvtap: entered promiscuous mode [ 31.223201][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.232081][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.240904][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.249786][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.260940][ T3316] veth0_vlan: entered promiscuous mode [ 31.273230][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.283758][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.294558][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.309096][ T3316] veth1_vlan: entered promiscuous mode [ 31.317189][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.328051][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.338951][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.353343][ T3325] veth0_vlan: entered promiscuous mode [ 31.359854][ T3317] veth0_vlan: entered promiscuous mode [ 31.370024][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.378988][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.387775][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.396546][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.411384][ T3317] veth1_vlan: entered promiscuous mode [ 31.423870][ T3325] veth1_vlan: entered promiscuous mode [ 31.442189][ T3316] veth0_macvtap: entered promiscuous mode [ 31.456488][ T3316] veth1_macvtap: entered promiscuous mode [ 31.474903][ T3317] veth0_macvtap: entered promiscuous mode [ 31.483232][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.496015][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.508294][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.518160][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.528589][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.539339][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.547964][ T3317] veth1_macvtap: entered promiscuous mode [ 31.595952][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.606490][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.616388][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.626845][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.638060][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.652585][ T3325] veth0_macvtap: entered promiscuous mode [ 31.670817][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.681436][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.691434][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.691799][ T3460] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.702027][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.723680][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.734239][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.746286][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.754858][ T3325] veth1_macvtap: entered promiscuous mode [ 31.757210][ T3462] loop2: detected capacity change from 0 to 512 [ 31.772593][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.783156][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.793069][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.803573][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.813440][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.824019][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.835309][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.843120][ T3316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.852097][ T3316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.860187][ T3464] FAULT_INJECTION: forcing a failure. [ 31.860187][ T3464] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.860863][ T3316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.873901][ T3464] CPU: 0 UID: 0 PID: 3464 Comm: syz.1.8 Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 [ 31.882629][ T3316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.892645][ T3464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 31.911425][ T3464] Call Trace: [ 31.914760][ T3464] [ 31.917723][ T3464] dump_stack_lvl+0xf2/0x150 [ 31.922430][ T3464] dump_stack+0x15/0x20 [ 31.926602][ T3464] should_fail_ex+0x223/0x230 [ 31.931296][ T3464] should_fail+0xb/0x10 [ 31.935509][ T3464] should_fail_usercopy+0x1a/0x20 [ 31.940553][ T3464] _copy_from_user+0x1e/0xb0 [ 31.945328][ T3464] move_addr_to_kernel+0x82/0x120 [ 31.950476][ T3464] copy_msghdr_from_user+0x271/0x2a0 [ 31.955792][ T3464] __sys_sendmsg+0x13e/0x230 [ 31.960410][ T3464] __x64_sys_sendmsg+0x46/0x50 [ 31.965201][ T3464] x64_sys_call+0x2734/0x2dc0 [ 31.969900][ T3464] do_syscall_64+0xc9/0x1c0 [ 31.974428][ T3464] ? clear_bhb_loop+0x55/0xb0 [ 31.979206][ T3464] ? clear_bhb_loop+0x55/0xb0 [ 31.983888][ T3464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.989874][ T3464] RIP: 0033:0x7f0a6cbce819 [ 31.994365][ T3464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.013988][ T3464] RSP: 002b:00007f0a6b241038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.022421][ T3464] RAX: ffffffffffffffda RBX: 00007f0a6cd85fa0 RCX: 00007f0a6cbce819 [ 32.030391][ T3464] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 32.038427][ T3464] RBP: 00007f0a6b241090 R08: 0000000000000000 R09: 0000000000000000 [ 32.046394][ T3464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.054366][ T3464] R13: 0000000000000000 R14: 00007f0a6cd85fa0 R15: 00007ffe25ce46b8 [ 32.062398][ T3464] [ 32.070784][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.081413][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.091303][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.101822][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.111730][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.122284][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.132133][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.142604][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.153541][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.154458][ T3468] ip6t_rpfilter: unknown options [ 32.162043][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.174508][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.183358][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.192106][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.208633][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.215422][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 32.215493][ T29] audit: type=1400 audit(1732149717.529:132): avc: denied { read } for pid=3465 comm="syz.2.9" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 32.219249][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.219264][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.225349][ T29] audit: type=1400 audit(1732149717.529:133): avc: denied { open } for pid=3465 comm="syz.2.9" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 32.294222][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.304417][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.314938][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.324761][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.335208][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.346096][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.358522][ T3325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.367367][ T3325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.376124][ T3325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.384928][ T3325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.398923][ T3470] IPVS: Error joining to the multicast group [ 32.405072][ T3471] IPVS: Error joining to the multicast group [ 32.467463][ T3474] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 32.489418][ T3474] geneve1: entered promiscuous mode [ 32.500538][ T3477] 9pnet_fd: Insufficient options for proto=fd [ 32.500842][ T29] audit: type=1400 audit(1732149717.819:134): avc: denied { create } for pid=3476 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.529019][ T3474] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 32.535822][ T29] audit: type=1400 audit(1732149717.829:135): avc: denied { create } for pid=3472 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 32.556894][ T29] audit: type=1400 audit(1732149717.829:136): avc: denied { read } for pid=3472 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 32.603797][ T29] audit: type=1400 audit(1732149717.919:137): avc: denied { write } for pid=3472 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.673968][ T29] audit: type=1400 audit(1732149717.949:138): avc: denied { read write } for pid=3482 comm="syz.3.12" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.697157][ T29] audit: type=1400 audit(1732149717.949:139): avc: denied { open } for pid=3482 comm="syz.3.12" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.720322][ T29] audit: type=1400 audit(1732149717.959:140): avc: denied { ioctl } for pid=3482 comm="syz.3.12" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.745116][ T29] audit: type=1326 audit(1732149717.969:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9db1e819 code=0x7ffc0000 [ 32.774073][ T3491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.992803][ T3499] loop4: detected capacity change from 0 to 8192 [ 33.294972][ T3512] loop2: detected capacity change from 0 to 8192 [ 33.368671][ T3519] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.398584][ T3519] Cannot find set identified by id 0 to match [ 33.509101][ T3521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.26'. [ 33.578351][ T3525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27'. [ 33.592051][ T3527] loop1: detected capacity change from 0 to 1024 [ 33.646612][ T3527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.698793][ T3521] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 33.730733][ T3521] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 33.743267][ T3521] EXT4-fs (loop1): This should not happen!! Data will be lost [ 33.743267][ T3521] [ 33.753014][ T3521] EXT4-fs (loop1): Total free blocks count 0 [ 33.759053][ T3521] EXT4-fs (loop1): Free/Dirty block details [ 33.764968][ T3521] EXT4-fs (loop1): free_blocks=68451041280 [ 33.770836][ T3521] EXT4-fs (loop1): dirty_blocks=64 [ 33.776089][ T3521] EXT4-fs (loop1): Block reservation details [ 33.782101][ T3521] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 33.842823][ T3521] syz.1.26 (3521) used greatest stack depth: 9560 bytes left [ 33.872517][ T3539] loop4: detected capacity change from 0 to 512 [ 33.883615][ T3539] EXT4-fs: Ignoring removed orlov option [ 33.888643][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.913808][ T3539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.967930][ T3539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.981746][ T3539] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.997535][ T3551] loop0: detected capacity change from 0 to 128 [ 34.040815][ T3539] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.31: bg 0: block 255: padding at end of block bitmap is not set [ 34.100431][ T3539] EXT4-fs (loop4): Remounting filesystem read-only [ 34.135082][ T3551] syz.0.35: attempt to access beyond end of device [ 34.135082][ T3551] loop0: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 34.155405][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.235495][ T3566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.40'. [ 34.267525][ T3571] FAULT_INJECTION: forcing a failure. [ 34.267525][ T3571] name failslab, interval 1, probability 0, space 0, times 1 [ 34.280505][ T3571] CPU: 1 UID: 0 PID: 3571 Comm: syz.4.43 Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 [ 34.290723][ T3571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 34.300809][ T3571] Call Trace: [ 34.304114][ T3571] [ 34.307052][ T3571] dump_stack_lvl+0xf2/0x150 [ 34.311705][ T3571] dump_stack+0x15/0x20 [ 34.315961][ T3571] should_fail_ex+0x223/0x230 [ 34.320738][ T3571] ? __alloc_skb+0x10b/0x310 [ 34.325367][ T3571] should_failslab+0x8f/0xb0 [ 34.330080][ T3571] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 34.335973][ T3571] __alloc_skb+0x10b/0x310 [ 34.340486][ T3571] netlink_alloc_large_skb+0xad/0xe0 [ 34.345803][ T3571] netlink_sendmsg+0x3b4/0x6e0 [ 34.350589][ T3571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.355929][ T3571] __sock_sendmsg+0x140/0x180 [ 34.360687][ T3571] ____sys_sendmsg+0x312/0x410 [ 34.365586][ T3571] __sys_sendmsg+0x19d/0x230 [ 34.370252][ T3571] __x64_sys_sendmsg+0x46/0x50 [ 34.375059][ T3571] x64_sys_call+0x2734/0x2dc0 [ 34.379760][ T3571] do_syscall_64+0xc9/0x1c0 [ 34.384328][ T3571] ? clear_bhb_loop+0x55/0xb0 [ 34.389055][ T3571] ? clear_bhb_loop+0x55/0xb0 [ 34.393747][ T3571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.399729][ T3571] RIP: 0033:0x7f67af7de819 [ 34.404155][ T3571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.423783][ T3571] RSP: 002b:00007f67ade57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.432236][ T3571] RAX: ffffffffffffffda RBX: 00007f67af995fa0 RCX: 00007f67af7de819 [ 34.440213][ T3571] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 34.448193][ T3571] RBP: 00007f67ade57090 R08: 0000000000000000 R09: 0000000000000000 [ 34.456225][ T3571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.464203][ T3571] R13: 0000000000000000 R14: 00007f67af995fa0 R15: 00007ffec59c3578 [ 34.472255][ T3571] [ 34.648812][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 34.674900][ T3592] team0 (unregistering): Port device team_slave_0 removed [ 34.675894][ T3597] loop1: detected capacity change from 0 to 8192 [ 34.699879][ T3592] team0 (unregistering): Port device team_slave_1 removed [ 34.739835][ T3604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.57'. [ 34.788102][ T3608] loop4: detected capacity change from 0 to 1024 [ 34.795164][ T3608] EXT4-fs: Ignoring removed bh option [ 34.821200][ T3608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 34.839038][ T3610] infiniband syz1: set active [ 34.839435][ T3608] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 34.843753][ T3610] infiniband syz1: added bond_slave_1 [ 34.885058][ T3610] RDS/IB: syz1: added [ 34.889150][ T3610] smc: adding ib device syz1 with port count 1 [ 34.895653][ T3610] smc: ib device syz1 port 1 has pnetid [ 34.921247][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 34.970129][ T3626] loop4: detected capacity change from 0 to 2048 [ 34.981034][ T3627] loop2: detected capacity change from 0 to 512 [ 34.987891][ T3627] EXT4-fs: Ignoring removed oldalloc option [ 35.002501][ T3627] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.015687][ T3627] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.047935][ T3627] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 35.049422][ T3629] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 35.057640][ T3627] EXT4-fs (loop2): group descriptors corrupted! [ 35.086565][ T3629] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 35.168496][ T3632] netlink: 'syz.1.65': attribute type 27 has an invalid length. [ 35.176250][ T3632] netlink: 'syz.1.65': attribute type 3 has an invalid length. [ 35.183805][ T3632] netlink: 132 bytes leftover after parsing attributes in process `syz.1.65'. [ 35.242113][ T3634] bond1: entered promiscuous mode [ 35.247381][ T3634] bond1: entered allmulticast mode [ 35.253349][ T3634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.293554][ T3641] netlink: 40 bytes leftover after parsing attributes in process `syz.4.68'. [ 35.339333][ T3645] xt_hashlimit: max too large, truncated to 1048576 [ 35.350343][ T3646] process 'syz.1.69' launched '/dev/fd/8' with NULL argv: empty string added [ 35.520881][ T3649] netlink: 268 bytes leftover after parsing attributes in process `syz.3.72'. [ 35.573182][ T3645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.582018][ T3645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.136087][ T3664] netlink: 3 bytes leftover after parsing attributes in process `syz.0.77'. [ 36.152087][ T3664] 0ªX¹¦À: renamed from caif0 [ 36.159097][ T3664] 0ªX¹¦À: entered allmulticast mode [ 36.164518][ T3664] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 36.253390][ T3676] loop1: detected capacity change from 0 to 128 [ 36.308487][ T3676] syz.1.82: attempt to access beyond end of device [ 36.308487][ T3676] loop1: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 36.371028][ T3682] siw: device registration error -23 [ 36.397597][ T3684] FAULT_INJECTION: forcing a failure. [ 36.397597][ T3684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.410850][ T3684] CPU: 1 UID: 0 PID: 3684 Comm: syz.1.86 Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 [ 36.421201][ T3684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 36.431317][ T3684] Call Trace: [ 36.434620][ T3684] [ 36.437569][ T3684] dump_stack_lvl+0xf2/0x150 [ 36.442172][ T3684] dump_stack+0x15/0x20 [ 36.446330][ T3684] should_fail_ex+0x223/0x230 [ 36.451115][ T3684] should_fail+0xb/0x10 [ 36.455288][ T3684] should_fail_usercopy+0x1a/0x20 [ 36.460502][ T3684] _copy_to_user+0x20/0xa0 [ 36.464967][ T3684] simple_read_from_buffer+0xa0/0x110 [ 36.470350][ T3684] proc_fail_nth_read+0xf9/0x140 [ 36.475319][ T3684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 36.481018][ T3684] vfs_read+0x1a2/0x700 [ 36.485203][ T3684] ? __rcu_read_unlock+0x4e/0x70 [ 36.490150][ T3684] ? __fget_files+0x17c/0x1c0 [ 36.494867][ T3684] ksys_read+0xe8/0x1b0 [ 36.499029][ T3684] __x64_sys_read+0x42/0x50 [ 36.503612][ T3684] x64_sys_call+0x2874/0x2dc0 [ 36.508409][ T3684] do_syscall_64+0xc9/0x1c0 [ 36.512956][ T3684] ? clear_bhb_loop+0x55/0xb0 [ 36.517736][ T3684] ? clear_bhb_loop+0x55/0xb0 [ 36.522417][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.528354][ T3684] RIP: 0033:0x7f0a6cbcd25c [ 36.532780][ T3684] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 36.552568][ T3684] RSP: 002b:00007f0a6b241030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.560999][ T3684] RAX: ffffffffffffffda RBX: 00007f0a6cd85fa0 RCX: 00007f0a6cbcd25c [ 36.568982][ T3684] RDX: 000000000000000f RSI: 00007f0a6b2410a0 RDI: 0000000000000007 [ 36.576973][ T3684] RBP: 00007f0a6b241090 R08: 0000000000000000 R09: 0000000000000000 [ 36.584996][ T3684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.593057][ T3684] R13: 0000000000000000 R14: 00007f0a6cd85fa0 R15: 00007ffe25ce46b8 [ 36.601052][ T3684] [ 36.613468][ T3686] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 36.621883][ T3686] smc: net device bond0 applied user defined pnetid SYZ0 [ 36.635631][ T3686] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 36.643507][ T3687] smc: net device bond0 erased user defined pnetid SYZ0 [ 36.650654][ T3687] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 36.692812][ T3694] FAULT_INJECTION: forcing a failure. [ 36.692812][ T3694] name failslab, interval 1, probability 0, space 0, times 0 [ 36.705574][ T3694] CPU: 0 UID: 0 PID: 3694 Comm: syz.4.90 Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 [ 36.709032][ T3696] bond1: entered promiscuous mode [ 36.715889][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 36.715904][ T3694] Call Trace: [ 36.715911][ T3694] [ 36.715921][ T3694] dump_stack_lvl+0xf2/0x150 [ 36.721009][ T3696] bond1: entered allmulticast mode [ 36.731074][ T3694] dump_stack+0x15/0x20 [ 36.751293][ T3694] should_fail_ex+0x223/0x230 [ 36.756002][ T3694] ? alloc_fs_context+0x44/0x4e0 [ 36.761089][ T3694] should_failslab+0x8f/0xb0 [ 36.765790][ T3694] __kmalloc_cache_noprof+0x4b/0x2a0 [ 36.771095][ T3694] alloc_fs_context+0x44/0x4e0 [ 36.776016][ T3694] ? strncmp+0x34/0x70 [ 36.780111][ T3694] fs_context_for_mount+0x21/0x30 [ 36.785237][ T3694] do_new_mount+0xf3/0x690 [ 36.789745][ T3694] path_mount+0x49b/0xb30 [ 36.794100][ T3694] __se_sys_mount+0x27c/0x2d0 [ 36.798794][ T3694] __x64_sys_mount+0x67/0x80 [ 36.803398][ T3694] x64_sys_call+0x2c84/0x2dc0 [ 36.808087][ T3694] do_syscall_64+0xc9/0x1c0 [ 36.812633][ T3694] ? clear_bhb_loop+0x55/0xb0 [ 36.817327][ T3694] ? clear_bhb_loop+0x55/0xb0 [ 36.822014][ T3694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.827920][ T3694] RIP: 0033:0x7f67af7de819 [ 36.832338][ T3694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.851953][ T3694] RSP: 002b:00007f67ade57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.860377][ T3694] RAX: ffffffffffffffda RBX: 00007f67af995fa0 RCX: 00007f67af7de819 [ 36.868381][ T3694] RDX: 0000000020000400 RSI: 00000000200003c0 RDI: 0000000000000000 [ 36.876361][ T3694] RBP: 00007f67ade57090 R08: 0000000020000440 R09: 0000000000000000 [ 36.884404][ T3694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.892413][ T3694] R13: 0000000000000000 R14: 00007f67af995fa0 R15: 00007ffec59c3578 [ 36.900400][ T3694] [ 36.913917][ T3696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.945774][ T3696] bond1 (unregistering): Released all slaves [ 37.121443][ T3705] loop2: detected capacity change from 0 to 8192 [ 37.239711][ T3721] FAULT_INJECTION: forcing a failure. [ 37.239711][ T3721] name failslab, interval 1, probability 0, space 0, times 0 [ 37.252484][ T3721] CPU: 0 UID: 0 PID: 3721 Comm: syz.4.100 Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 [ 37.262848][ T3721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 37.272907][ T3721] Call Trace: [ 37.276186][ T3721] [ 37.279165][ T3721] dump_stack_lvl+0xf2/0x150 [ 37.283772][ T3721] dump_stack+0x15/0x20 [ 37.288009][ T3721] should_fail_ex+0x223/0x230 [ 37.292715][ T3721] ? getname_kernel+0x3d/0x1e0 [ 37.297646][ T3721] should_failslab+0x8f/0xb0 [ 37.302255][ T3721] kmem_cache_alloc_noprof+0x4c/0x290 [ 37.307752][ T3721] getname_kernel+0x3d/0x1e0 [ 37.312385][ T3721] kern_path+0x21/0x120 [ 37.316605][ T3721] bpf_uprobe_multi_link_attach+0x1d0/0x7c0 [ 37.322725][ T3721] ? kstrtouint_from_user+0xb0/0xe0 [ 37.328118][ T3721] ? __fget_files+0x17c/0x1c0 [ 37.332833][ T3721] link_create+0x636/0x650 [ 37.337300][ T3721] __sys_bpf+0x430/0x7a0 [ 37.341578][ T3721] __x64_sys_bpf+0x43/0x50 [ 37.346043][ T3721] x64_sys_call+0x2914/0x2dc0 [ 37.350777][ T3721] do_syscall_64+0xc9/0x1c0 [ 37.355373][ T3721] ? clear_bhb_loop+0x55/0xb0 [ 37.360093][ T3721] ? clear_bhb_loop+0x55/0xb0 [ 37.364807][ T3721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.370725][ T3721] RIP: 0033:0x7f67af7de819 [ 37.375140][ T3721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.394806][ T3721] RSP: 002b:00007f67ade57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 37.403311][ T3721] RAX: ffffffffffffffda RBX: 00007f67af995fa0 RCX: 00007f67af7de819 [ 37.411378][ T3721] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 000000000000001c [ 37.419375][ T3721] RBP: 00007f67ade57090 R08: 0000000000000000 R09: 0000000000000000 [ 37.427450][ T3721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.435453][ T3721] R13: 0000000000000000 R14: 00007f67af995fa0 R15: 00007ffec59c3578 [ 37.443432][ T3721] [ 37.534139][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 37.534153][ T29] audit: type=1400 audit(1732149722.849:700): avc: denied { create } for pid=3722 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 37.561926][ T3725] loop1: detected capacity change from 0 to 1024 [ 37.575058][ T3725] EXT4-fs: Ignoring removed bh option [ 37.580867][ T29] audit: type=1400 audit(1732149722.869:701): avc: denied { ioctl } for pid=3722 comm="syz.4.102" path="socket:[5623]" dev="sockfs" ino=5623 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 37.606327][ T29] audit: type=1400 audit(1732149722.929:702): avc: denied { write } for pid=3722 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 37.623313][ T3728] loop2: detected capacity change from 0 to 128 [ 37.641406][ T29] audit: type=1400 audit(1732149722.959:703): avc: denied { create } for pid=3727 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 37.673469][ T29] audit: type=1400 audit(1732149722.959:704): avc: denied { bind } for pid=3727 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 37.683511][ T3725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 37.694005][ T29] audit: type=1400 audit(1732149722.959:705): avc: denied { listen } for pid=3727 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 37.727083][ T29] audit: type=1400 audit(1732149722.959:706): avc: denied { connect } for pid=3727 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 37.747760][ T29] audit: type=1400 audit(1732149722.959:707): avc: denied { map } for pid=3727 comm="syz.2.103" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 37.767272][ T3725] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 37.800498][ T29] audit: type=1326 audit(1732149723.119:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3731 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 37.824372][ T29] audit: type=1326 audit(1732149723.119:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3731 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 37.851882][ T3734] __nla_validate_parse: 3 callbacks suppressed [ 37.851901][ T3734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.105'. [ 37.867551][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 37.960258][ T3737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.107'. [ 38.027862][ T3749] loop2: detected capacity change from 0 to 1024 [ 38.046668][ T3749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.084275][ T3737] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 38.099554][ T3737] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 38.112049][ T3737] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.112049][ T3737] [ 38.121759][ T3737] EXT4-fs (loop2): Total free blocks count 0 [ 38.127866][ T3737] EXT4-fs (loop2): Free/Dirty block details [ 38.133780][ T3737] EXT4-fs (loop2): free_blocks=68451041280 [ 38.139671][ T3737] EXT4-fs (loop2): dirty_blocks=64 [ 38.144810][ T3737] EXT4-fs (loop2): Block reservation details [ 38.150842][ T3737] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 38.198565][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.340726][ T3758] loop2: detected capacity change from 0 to 8192 [ 38.502417][ T3769] loop4: detected capacity change from 0 to 256 [ 38.524349][ T3769] FAT-fs (loop4): Directory bread(block 64) failed [ 38.534455][ T3769] FAT-fs (loop4): Directory bread(block 65) failed [ 38.541571][ T3769] FAT-fs (loop4): Directory bread(block 66) failed [ 38.549403][ T3769] FAT-fs (loop4): Directory bread(block 67) failed [ 38.556463][ T3769] FAT-fs (loop4): Directory bread(block 68) failed [ 38.563178][ T3769] FAT-fs (loop4): Directory bread(block 69) failed [ 38.571149][ T3769] FAT-fs (loop4): Directory bread(block 70) failed [ 38.578676][ T3769] FAT-fs (loop4): Directory bread(block 71) failed [ 38.587377][ T3769] FAT-fs (loop4): Directory bread(block 72) failed [ 38.605328][ T3769] FAT-fs (loop4): Directory bread(block 73) failed [ 38.781768][ T3778] loop2: detected capacity change from 0 to 128 [ 38.792529][ T3780] loop1: detected capacity change from 0 to 128 [ 38.801061][ T3778] EXT4-fs: Mount option(s) incompatible with ext2 [ 38.831589][ T3780] ======================================================= [ 38.831589][ T3780] WARNING: The mand mount option has been deprecated and [ 38.831589][ T3780] and is ignored by this kernel. Remove the mand [ 38.831589][ T3780] option from the mount to silence this warning. [ 38.831589][ T3780] ======================================================= [ 38.876274][ T3780] FAT-fs (loop1): bogus number of reserved sectors [ 38.882992][ T3780] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 38.892469][ T3780] FAT-fs (loop1): Can't find a valid FAT filesystem [ 39.213584][ T50] kworker/u8:3: attempt to access beyond end of device [ 39.213584][ T50] loop4: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 39.229414][ T3797] tmpfs: Bad value for 'mpol' [ 39.236662][ T50] kworker/u8:3: attempt to access beyond end of device [ 39.236662][ T50] loop4: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 39.264502][ T50] kworker/u8:3: attempt to access beyond end of device [ 39.264502][ T50] loop4: rw=1, sector=1960, nr_sectors = 4072 limit=256 [ 39.322160][ T50] kworker/u8:3: attempt to access beyond end of device [ 39.322160][ T50] loop4: rw=1, sector=6032, nr_sectors = 27768 limit=256 [ 39.427516][ T3809] Cannot find set identified by id 0 to match [ 39.598889][ T3821] loop4: detected capacity change from 0 to 256 [ 39.620368][ T3821] FAT-fs (loop4): Directory bread(block 64) failed [ 39.627552][ T3821] FAT-fs (loop4): Directory bread(block 65) failed [ 39.634090][ T3821] FAT-fs (loop4): Directory bread(block 66) failed [ 39.642021][ T3821] FAT-fs (loop4): Directory bread(block 67) failed [ 39.648910][ T3821] FAT-fs (loop4): Directory bread(block 68) failed [ 39.656702][ T3821] FAT-fs (loop4): Directory bread(block 69) failed [ 39.663355][ T3821] FAT-fs (loop4): Directory bread(block 70) failed [ 39.670275][ T3821] FAT-fs (loop4): Directory bread(block 71) failed [ 39.678521][ T3821] FAT-fs (loop4): Directory bread(block 72) failed [ 39.685139][ T3821] FAT-fs (loop4): Directory bread(block 73) failed [ 39.702450][ T3821] syz.4.138: attempt to access beyond end of device [ 39.702450][ T3821] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 39.717676][ T3821] syz.4.138: attempt to access beyond end of device [ 39.717676][ T3821] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 39.767797][ T3829] xt_hashlimit: max too large, truncated to 1048576 [ 39.880944][ T3838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 39.945856][ T3839] loop2: detected capacity change from 0 to 512 [ 39.964727][ T3839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.978712][ T3839] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.009878][ T3829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.018451][ T3829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.223412][ T3851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.532097][ T3864] loop1: detected capacity change from 0 to 512 [ 40.547472][ T3864] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.579763][ T3864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.597011][ T3864] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.153: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 40.618199][ T3864] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 12: comm syz.1.153: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 40.639660][ T3864] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 13: comm syz.1.153: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 40.641132][ T3867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.154'. [ 40.671148][ T3864] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 14: comm syz.1.153: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 40.671436][ T3870] vhci_hcd: default hub control req: 0058 v0200 i0007 l0 [ 40.692049][ T3864] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 15: comm syz.1.153: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 40.719322][ T3864] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz.1.153: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 40.740728][ T3864] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 17: comm syz.1.153: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 40.759445][ T3871] loop4: detected capacity change from 0 to 1024 [ 40.761745][ T3864] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 18: comm syz.1.153: lblock 23 mapped to illegal pblock 18 (length 1) [ 40.782398][ T3864] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 19: comm syz.1.153: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 40.803158][ T3864] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 20: comm syz.1.153: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 40.804143][ T3871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.836252][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.878258][ T3867] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 40.894814][ T3867] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 40.907195][ T3867] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.907195][ T3867] [ 40.916896][ T3867] EXT4-fs (loop4): Total free blocks count 0 [ 40.922886][ T3867] EXT4-fs (loop4): Free/Dirty block details [ 40.928801][ T3867] EXT4-fs (loop4): free_blocks=68451041280 [ 40.934620][ T3867] EXT4-fs (loop4): dirty_blocks=64 [ 40.939852][ T3867] EXT4-fs (loop4): Block reservation details [ 40.945854][ T3867] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 40.956832][ T3875] FAULT_INJECTION: forcing a failure. [ 40.956832][ T3875] name failslab, interval 1, probability 0, space 0, times 0 [ 40.969656][ T3875] CPU: 1 UID: 0 PID: 3875 Comm: syz.2.155 Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 [ 40.979919][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 40.989997][ T3875] Call Trace: [ 40.993407][ T3875] [ 40.996358][ T3875] dump_stack_lvl+0xf2/0x150 [ 41.001037][ T3875] dump_stack+0x15/0x20 [ 41.005250][ T3875] should_fail_ex+0x223/0x230 [ 41.009958][ T3875] ? alloc_empty_file+0xd0/0x200 [ 41.014963][ T3875] should_failslab+0x8f/0xb0 [ 41.019577][ T3875] kmem_cache_alloc_noprof+0x4c/0x290 [ 41.025028][ T3875] alloc_empty_file+0xd0/0x200 [ 41.029923][ T3875] alloc_file_pseudo+0xc3/0x140 [ 41.034821][ T3875] __shmem_file_setup+0x1bb/0x1f0 [ 41.039881][ T3875] shmem_file_setup+0x3b/0x50 [ 41.044582][ T3875] __se_sys_memfd_create+0x31d/0x5c0 [ 41.049909][ T3875] __x64_sys_memfd_create+0x31/0x40 [ 41.055218][ T3875] x64_sys_call+0x2d4c/0x2dc0 [ 41.060007][ T3875] do_syscall_64+0xc9/0x1c0 [ 41.064591][ T3875] ? clear_bhb_loop+0x55/0xb0 [ 41.069398][ T3875] ? clear_bhb_loop+0x55/0xb0 [ 41.074114][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.080018][ T3875] RIP: 0033:0x7fdde604e819 [ 41.084436][ T3875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.104153][ T3875] RSP: 002b:00007fdde46c6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 41.112662][ T3875] RAX: ffffffffffffffda RBX: 00000000000005df RCX: 00007fdde604e819 [ 41.120641][ T3875] RDX: 00007fdde46c6dec RSI: 0000000000000000 RDI: 00007fdde60c1fca [ 41.128714][ T3875] RBP: 0000000020000000 R08: 00007fdde46c6b07 R09: 0000000000000000 [ 41.136930][ T3875] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 41.144908][ T3875] R13: 00007fdde46c6dec R14: 00007fdde46c6df0 R15: 00007ffdaaffa2e8 [ 41.152927][ T3875] [ 41.179558][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.404737][ T3896] loop4: detected capacity change from 0 to 128 [ 41.433527][ T3315] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 41.441982][ T3896] syz.4.166: attempt to access beyond end of device [ 41.441982][ T3896] loop4: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 41.451681][ T3900] loop2: detected capacity change from 0 to 128 [ 41.468922][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.478504][ T3898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 41.525212][ T3900] syz.2.167: attempt to access beyond end of device [ 41.525212][ T3900] loop2: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 41.633305][ T3915] Zero length message leads to an empty skb [ 41.802591][ T3929] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.179'. [ 41.812431][ T3927] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.179'. [ 42.201834][ T3951] Cannot find set identified by id 0 to match [ 42.295060][ T3958] tmpfs: Bad value for 'mpol' [ 42.399770][ T3974] Cannot find set identified by id 0 to match [ 42.435885][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 42.675757][ T3993] loop2: detected capacity change from 0 to 128 [ 42.704354][ T3993] syz.2.206: attempt to access beyond end of device [ 42.704354][ T3993] loop2: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 42.724057][ T29] kauditd_printk_skb: 672 callbacks suppressed [ 42.724071][ T29] audit: type=1326 audit(1732149728.039:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 42.764570][ T29] audit: type=1326 audit(1732149728.039:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 42.787976][ T29] audit: type=1326 audit(1732149728.039:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 42.811403][ T29] audit: type=1326 audit(1732149728.039:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 42.834791][ T29] audit: type=1326 audit(1732149728.039:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 42.858137][ T29] audit: type=1326 audit(1732149728.039:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 42.881687][ T29] audit: type=1326 audit(1732149728.049:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 42.905028][ T29] audit: type=1326 audit(1732149728.049:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 42.936978][ T29] audit: type=1326 audit(1732149728.259:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6cbce819 code=0x7ffc0000 [ 42.973418][ T29] audit: type=1326 audit(1732149728.279:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0a6cbce819 code=0x7ffc0000 [ 43.077285][ T4005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.212'. [ 43.134049][ T4010] loop1: detected capacity change from 0 to 1024 [ 43.157956][ T4010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.193815][ T4005] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 43.218699][ T4005] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 43.231034][ T4005] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.231034][ T4005] [ 43.241129][ T4005] EXT4-fs (loop1): Total free blocks count 0 [ 43.247181][ T4005] EXT4-fs (loop1): Free/Dirty block details [ 43.253120][ T4005] EXT4-fs (loop1): free_blocks=68451041280 [ 43.259017][ T4005] EXT4-fs (loop1): dirty_blocks=64 [ 43.264166][ T4005] EXT4-fs (loop1): Block reservation details [ 43.270287][ T4005] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 43.384397][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.457014][ T4034] netlink: 'syz.0.224': attribute type 21 has an invalid length. [ 43.467023][ T4034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.224'. [ 43.545201][ T4047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 43.568345][ T4052] Cannot find set identified by id 0 to match [ 43.609562][ T4057] loop4: detected capacity change from 0 to 512 [ 43.628087][ T4057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.642239][ T4057] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.656378][ T4060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.235'. [ 43.878884][ T4087] FAULT_INJECTION: forcing a failure. [ 43.878884][ T4087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.892128][ T4087] CPU: 0 UID: 0 PID: 4087 Comm: syz.0.244 Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 [ 43.902405][ T4087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 43.912603][ T4087] Call Trace: [ 43.915892][ T4087] [ 43.918843][ T4087] dump_stack_lvl+0xf2/0x150 [ 43.923479][ T4087] dump_stack+0x15/0x20 [ 43.927700][ T4087] should_fail_ex+0x223/0x230 [ 43.932474][ T4087] should_fail+0xb/0x10 [ 43.936741][ T4087] should_fail_usercopy+0x1a/0x20 [ 43.941799][ T4087] strncpy_from_user+0x25/0x210 [ 43.946788][ T4087] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 43.952459][ T4087] getname_flags+0xb0/0x3b0 [ 43.957147][ T4087] user_path_at+0x26/0x120 [ 43.961615][ T4087] __se_sys_utime+0xc6/0x1c0 [ 43.966240][ T4087] __x64_sys_utime+0x31/0x40 [ 43.970860][ T4087] x64_sys_call+0x2996/0x2dc0 [ 43.975630][ T4087] do_syscall_64+0xc9/0x1c0 [ 43.980157][ T4087] ? clear_bhb_loop+0x55/0xb0 [ 43.984870][ T4087] ? clear_bhb_loop+0x55/0xb0 [ 43.989619][ T4087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.995596][ T4087] RIP: 0033:0x7f7cdc33e819 [ 44.000038][ T4087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.019675][ T4087] RSP: 002b:00007f7cda9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 44.028106][ T4087] RAX: ffffffffffffffda RBX: 00007f7cdc4f5fa0 RCX: 00007f7cdc33e819 [ 44.036147][ T4087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.044181][ T4087] RBP: 00007f7cda9b1090 R08: 0000000000000000 R09: 0000000000000000 [ 44.052273][ T4087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.060256][ T4087] R13: 0000000000000001 R14: 00007f7cdc4f5fa0 R15: 00007fffeb97cec8 [ 44.068272][ T4087] [ 44.237003][ T4106] Cannot find set identified by id 0 to match [ 44.271165][ T4108] loop2: detected capacity change from 0 to 512 [ 44.291769][ T4108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.304584][ T4108] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.317967][ T4112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.256'. [ 44.398788][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.487047][ T4123] capability: warning: `syz.4.259' uses deprecated v2 capabilities in a way that may be insecure [ 44.517983][ T4118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 44.574383][ T4118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.258'. [ 44.597217][ T4130] loop1: detected capacity change from 0 to 512 [ 44.603897][ T4130] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.646943][ T4130] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 44.663800][ T4130] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 44.671957][ T4130] System zones: 1-12 [ 44.687098][ T4130] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.262: corrupted in-inode xattr: e_value size too large [ 44.712217][ T4130] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.262: couldn't read orphan inode 15 (err -117) [ 44.754270][ T4130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.754979][ T4135] Cannot find set identified by id 0 to match [ 44.845074][ T4130] EXT4-fs (loop1): shut down requested (0) [ 44.851585][ T4138] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.265'. [ 44.862689][ T4130] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.869797][ T4137] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.265'. [ 44.902730][ T4130] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.922000][ T4130] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.940111][ T4130] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.942355][ T4140] loop4: detected capacity change from 0 to 1024 [ 44.951860][ T4130] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 45.002597][ T4140] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.068692][ T4140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.131302][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.159791][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.217825][ T4152] FAULT_INJECTION: forcing a failure. [ 45.217825][ T4152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.231199][ T4152] CPU: 0 UID: 0 PID: 4152 Comm: syz.1.270 Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 [ 45.241474][ T4152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 45.251637][ T4152] Call Trace: [ 45.254936][ T4152] [ 45.257952][ T4152] dump_stack_lvl+0xf2/0x150 [ 45.262581][ T4152] dump_stack+0x15/0x20 [ 45.266760][ T4152] should_fail_ex+0x223/0x230 [ 45.271565][ T4152] should_fail+0xb/0x10 [ 45.275805][ T4152] should_fail_usercopy+0x1a/0x20 [ 45.280863][ T4152] strncpy_from_user+0x25/0x210 [ 45.285787][ T4152] strncpy_from_user_nofault+0x66/0xe0 [ 45.291283][ T4152] bpf_probe_read_user_str+0x2a/0x70 [ 45.296632][ T4152] bpf_prog_50ea0b2f49ae8e78+0x41/0x43 [ 45.302202][ T4152] bpf_trace_run3+0x10c/0x1d0 [ 45.306924][ T4152] ? __kfree_skb+0x102/0x150 [ 45.312510][ T4152] ? memcg_list_lru_alloc+0xd2/0x740 [ 45.317916][ T4152] ? __kfree_skb+0x102/0x150 [ 45.322540][ T4152] __traceiter_kmem_cache_free+0x33/0x50 [ 45.328310][ T4152] ? __kfree_skb+0x102/0x150 [ 45.332946][ T4152] kmem_cache_free+0x237/0x2d0 [ 45.337752][ T4152] ? nlmon_xmit+0x51/0x60 [ 45.342246][ T4152] __kfree_skb+0x102/0x150 [ 45.346741][ T4152] consume_skb+0x49/0x160 [ 45.351203][ T4152] nlmon_xmit+0x51/0x60 [ 45.355393][ T4152] dev_hard_start_xmit+0x119/0x3f0 [ 45.360593][ T4152] __dev_queue_xmit+0xfba/0x2040 [ 45.365642][ T4152] ? __dev_queue_xmit+0x161/0x2040 [ 45.370795][ T4152] ? ref_tracker_alloc+0x1f5/0x2f0 [ 45.375932][ T4152] ? should_fail_ex+0xd7/0x230 [ 45.380705][ T4152] ? __skb_clone+0x2d0/0x2f0 [ 45.385317][ T4152] __netlink_deliver_tap+0x39f/0x4c0 [ 45.390638][ T4152] netlink_unicast+0x64a/0x670 [ 45.395496][ T4152] netlink_sendmsg+0x5cc/0x6e0 [ 45.400277][ T4152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.405608][ T4152] __sock_sendmsg+0x140/0x180 [ 45.410348][ T4152] ____sys_sendmsg+0x312/0x410 [ 45.415123][ T4152] __sys_sendmsg+0x19d/0x230 [ 45.419800][ T4152] __x64_sys_sendmsg+0x46/0x50 [ 45.424740][ T4152] x64_sys_call+0x2734/0x2dc0 [ 45.429470][ T4152] do_syscall_64+0xc9/0x1c0 [ 45.434000][ T4152] ? clear_bhb_loop+0x55/0xb0 [ 45.438774][ T4152] ? clear_bhb_loop+0x55/0xb0 [ 45.443623][ T4152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.449648][ T4152] RIP: 0033:0x7f0a6cbce819 [ 45.454141][ T4152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.473780][ T4152] RSP: 002b:00007f0a6b241038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.482202][ T4152] RAX: ffffffffffffffda RBX: 00007f0a6cd85fa0 RCX: 00007f0a6cbce819 [ 45.490181][ T4152] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 45.498201][ T4152] RBP: 00007f0a6b241090 R08: 0000000000000000 R09: 0000000000000000 [ 45.506177][ T4152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.514167][ T4152] R13: 0000000000000000 R14: 00007f0a6cd85fa0 R15: 00007ffe25ce46b8 [ 45.522172][ T4152] [ 45.559995][ T3325] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 45.594094][ T3325] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 45.684633][ T4125] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.697463][ T4163] Cannot find set identified by id 0 to match [ 45.776496][ T4168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.278'. [ 45.847411][ T411] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.857932][ T4175] loop2: detected capacity change from 0 to 736 [ 45.919280][ T411] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.989918][ T411] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.066598][ T411] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.170063][ T4191] Cannot find set identified by id 0 to match [ 46.221388][ T4198] tmpfs: Bad value for 'mpol' [ 46.245575][ T411] bridge_slave_1: left allmulticast mode [ 46.251303][ T411] bridge_slave_1: left promiscuous mode [ 46.257068][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.274668][ T411] bridge_slave_0: left allmulticast mode [ 46.280477][ T411] bridge_slave_0: left promiscuous mode [ 46.286316][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.383720][ T4214] syz.0.294 uses obsolete (PF_INET,SOCK_PACKET) [ 46.468019][ T411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.505640][ T411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.527449][ T411] bond0 (unregistering): Released all slaves [ 46.660390][ T411] hsr_slave_0: left promiscuous mode [ 46.673146][ T411] hsr_slave_1: left promiscuous mode [ 46.697794][ T411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.705407][ T411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.714998][ T411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.720193][ T4246] loop0: detected capacity change from 0 to 512 [ 46.722532][ T411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.755769][ T4246] EXT4-fs: inline encryption not supported [ 46.779302][ T4246] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.808546][ T4246] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.836610][ T4246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c119, mo2=0002] [ 46.850546][ T4246] System zones: 1-12 [ 46.940434][ T4246] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.304: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 46.960714][ T4246] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.304: couldn't read orphan inode 15 (err -117) [ 46.992567][ T4246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.045458][ T411] veth1_macvtap: left promiscuous mode [ 47.051066][ T411] veth0_macvtap: left promiscuous mode [ 47.056676][ T411] veth1_vlan: left promiscuous mode [ 47.061991][ T411] veth0_vlan: left promiscuous mode [ 47.072813][ T4261] tmpfs: Bad value for 'mpol' [ 47.378408][ T4268] loop1: detected capacity change from 0 to 8192 [ 47.729050][ T411] team0 (unregistering): Port device team_slave_1 removed [ 47.751151][ T411] team0 (unregistering): Port device team_slave_0 removed [ 47.795191][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.935125][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 47.935217][ T29] audit: type=1400 audit(1732149733.249:1972): avc: denied { shutdown } for pid=4293 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.992517][ T29] audit: type=1326 audit(1732149733.309:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 48.016072][ T29] audit: type=1326 audit(1732149733.309:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdde604d1b0 code=0x7ffc0000 [ 48.039483][ T29] audit: type=1326 audit(1732149733.309:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 48.063192][ T29] audit: type=1326 audit(1732149733.309:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 48.086513][ T29] audit: type=1326 audit(1732149733.309:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 48.110338][ T29] audit: type=1326 audit(1732149733.309:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 48.133782][ T29] audit: type=1326 audit(1732149733.309:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 48.164315][ T29] audit: type=1326 audit(1732149733.309:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 48.187636][ T29] audit: type=1326 audit(1732149733.309:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde604e819 code=0x7ffc0000 [ 48.242435][ T4223] chnl_net:caif_netlink_parms(): no params data found [ 48.262334][ T4319] loop0: detected capacity change from 0 to 128 [ 48.414330][ T4331] __nla_validate_parse: 1 callbacks suppressed [ 48.414349][ T4331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'. [ 48.459670][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.467027][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.484887][ T4223] bridge_slave_0: entered allmulticast mode [ 48.491801][ T4223] bridge_slave_0: entered promiscuous mode [ 48.499074][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.506179][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.513448][ T4223] bridge_slave_1: entered allmulticast mode [ 48.520177][ T4223] bridge_slave_1: entered promiscuous mode [ 48.558072][ T4341] Cannot find set identified by id 0 to match [ 48.576939][ T4223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.614276][ T4223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.696080][ T4223] team0: Port device team_slave_0 added [ 48.704030][ T4223] team0: Port device team_slave_1 added [ 48.726553][ T4342] loop0: detected capacity change from 0 to 8192 [ 48.743337][ T4223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.750412][ T4223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.776469][ T4223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.815397][ T4223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.822465][ T4223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.848628][ T4223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.920644][ T4223] hsr_slave_0: entered promiscuous mode [ 48.928125][ T4223] hsr_slave_1: entered promiscuous mode [ 48.935517][ T4223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.945700][ T4223] Cannot create hsr debugfs directory [ 48.979027][ T4374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 48.996040][ T4377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.333'. [ 49.049250][ T4380] loop2: detected capacity change from 0 to 512 [ 49.070592][ T4380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.092491][ T4370] loop1: detected capacity change from 0 to 1024 [ 49.099689][ T4223] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.107169][ T4380] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.119602][ T4223] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.133967][ T4223] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.144321][ T4370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.158339][ T4223] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.166069][ T4370] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 49.181262][ T4370] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 49.193634][ T4370] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.193634][ T4370] [ 49.203350][ T4370] EXT4-fs (loop1): Total free blocks count 0 [ 49.209380][ T4370] EXT4-fs (loop1): Free/Dirty block details [ 49.215416][ T4370] EXT4-fs (loop1): free_blocks=68451041280 [ 49.221241][ T4370] EXT4-fs (loop1): dirty_blocks=64 [ 49.226388][ T4370] EXT4-fs (loop1): Block reservation details [ 49.232439][ T4370] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 49.254405][ T4223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.269753][ T4223] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.281642][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.301680][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.308915][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.324175][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.331337][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.347031][ T4401] Cannot find set identified by id 0 to match [ 49.413157][ T4408] Cannot find set identified by id 0 to match [ 49.521596][ T4223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.827606][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.842653][ T4223] veth0_vlan: entered promiscuous mode [ 49.860899][ T4223] veth1_vlan: entered promiscuous mode [ 49.891118][ T4223] veth0_macvtap: entered promiscuous mode [ 49.905907][ T4223] veth1_macvtap: entered promiscuous mode [ 49.919401][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.929970][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.939881][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.950410][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.960283][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.971085][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.980945][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.991495][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.017664][ T4223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.051117][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.061833][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.071763][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.082300][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.092142][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.102655][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.112511][ T4223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.123023][ T4223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.135706][ T4223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.145517][ T4477] Cannot find set identified by id 0 to match [ 50.154479][ T4223] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.163460][ T4223] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.172250][ T4223] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.181065][ T4223] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.263768][ T4487] loop5: detected capacity change from 0 to 128 [ 50.311994][ T4487] syz.5.293: attempt to access beyond end of device [ 50.311994][ T4487] loop5: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 50.419217][ T4508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 50.442494][ T4508] loop1: detected capacity change from 0 to 512 [ 50.461965][ T4508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.475432][ T4508] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.509407][ T4513] netlink: 'syz.5.358': attribute type 29 has an invalid length. [ 50.529460][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.544027][ T4513] netlink: 'syz.5.358': attribute type 29 has an invalid length. [ 50.583966][ T4513] netlink: 500 bytes leftover after parsing attributes in process `syz.5.358'. [ 50.593120][ T4513] unsupported nla_type 40 [ 50.595505][ T4525] Cannot find set identified by id 0 to match [ 50.622467][ T4528] loop1: detected capacity change from 0 to 512 [ 50.641121][ T4528] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.670909][ T4528] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 50.684712][ T4528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 50.708761][ T4528] System zones: 1-12 [ 50.727651][ T4528] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.359: corrupted in-inode xattr: e_value size too large [ 50.783929][ T4528] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.359: couldn't read orphan inode 15 (err -117) [ 50.831840][ T4528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.924987][ T4528] EXT4-fs (loop1): shut down requested (0) [ 50.936536][ T4528] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 50.950628][ T4528] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 50.960162][ T4528] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 50.973287][ T4528] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 50.982440][ T4528] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 51.010469][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.164248][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 51.229890][ T4556] loop1: detected capacity change from 0 to 512 [ 51.285851][ T4556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.298974][ T4556] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.350992][ T4567] Cannot find set identified by id 0 to match [ 51.407036][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.652723][ T4581] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 51.767770][ T4594] loop1: detected capacity change from 0 to 2048 [ 51.799599][ T4594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.896430][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.997388][ T4611] netlink: 'syz.1.389': attribute type 21 has an invalid length. [ 52.021676][ T4611] netlink: 132 bytes leftover after parsing attributes in process `syz.1.389'. [ 52.170326][ T4627] netlink: 44 bytes leftover after parsing attributes in process `syz.2.396'. [ 52.180207][ T4622] netlink: 'syz.1.392': attribute type 29 has an invalid length. [ 52.192639][ T4624] netlink: 20 bytes leftover after parsing attributes in process `syz.5.395'. [ 52.204183][ T4622] netlink: 'syz.1.392': attribute type 29 has an invalid length. [ 52.227436][ T4622] netlink: 500 bytes leftover after parsing attributes in process `syz.1.392'. [ 52.249994][ T4624] loop5: detected capacity change from 0 to 1024 [ 52.285894][ T4624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.332085][ T4624] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 52.384574][ T4633] loop1: detected capacity change from 0 to 512 [ 52.411530][ T4624] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 52.423941][ T4624] EXT4-fs (loop5): This should not happen!! Data will be lost [ 52.423941][ T4624] [ 52.433620][ T4624] EXT4-fs (loop5): Total free blocks count 0 [ 52.439660][ T4624] EXT4-fs (loop5): Free/Dirty block details [ 52.445617][ T4624] EXT4-fs (loop5): free_blocks=68451041280 [ 52.451697][ T4624] EXT4-fs (loop5): dirty_blocks=64 [ 52.456854][ T4624] EXT4-fs (loop5): Block reservation details [ 52.462845][ T4624] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 52.475186][ T4633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.509759][ T4633] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.552034][ T4633] EXT4-fs (loop1): 1 truncate cleaned up [ 52.580474][ T4633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.645677][ T4223] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.698949][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.001055][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 53.001073][ T29] audit: type=1326 audit(1732149738.319:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdc33e819 code=0x7ffc0000 [ 53.082928][ T29] audit: type=1326 audit(1732149738.319:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f7cdc33e819 code=0x7ffc0000 [ 53.106278][ T29] audit: type=1326 audit(1732149738.319:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdc33e819 code=0x7ffc0000 [ 53.129630][ T29] audit: type=1326 audit(1732149738.319:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cdc33e819 code=0x7ffc0000 [ 53.153057][ T29] audit: type=1326 audit(1732149738.319:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdc33e819 code=0x7ffc0000 [ 53.176459][ T29] audit: type=1326 audit(1732149738.319:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cdc33e819 code=0x7ffc0000 [ 53.199892][ T29] audit: type=1326 audit(1732149738.319:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdc33e819 code=0x7ffc0000 [ 53.223245][ T29] audit: type=1326 audit(1732149738.319:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdc33e819 code=0x7ffc0000 [ 53.246584][ T29] audit: type=1326 audit(1732149738.319:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cdc33e819 code=0x7ffc0000 [ 53.270021][ T29] audit: type=1326 audit(1732149738.319:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdc33e819 code=0x7ffc0000 [ 53.363745][ T4670] tmpfs: Bad value for 'mpol' [ 53.377755][ T4672] loop0: detected capacity change from 0 to 128 [ 53.451473][ T4672] syz.0.412: attempt to access beyond end of device [ 53.451473][ T4672] loop0: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 53.516630][ T4676] netlink: 'syz.2.414': attribute type 29 has an invalid length. [ 53.547818][ T4676] netlink: 'syz.2.414': attribute type 29 has an invalid length. [ 53.571568][ T4676] netlink: 500 bytes leftover after parsing attributes in process `syz.2.414'. [ 53.624959][ T4689] loop5: detected capacity change from 0 to 512 [ 53.636840][ T4689] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.663839][ T4689] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 53.684121][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 53.704667][ T4689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 53.722673][ T4689] System zones: 1-12 [ 53.739354][ T4692] loop0: detected capacity change from 0 to 512 [ 53.753386][ T4689] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.420: corrupted in-inode xattr: e_value size too large [ 53.781075][ T4692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.816083][ T4689] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.420: couldn't read orphan inode 15 (err -117) [ 53.837346][ T4692] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.849011][ T4689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.884149][ T4689] EXT4-fs (loop5): shut down requested (0) [ 53.902572][ T4689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 53.918890][ T4689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 53.927877][ T4689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 53.960721][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.972864][ T4223] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.994176][ T4708] loop5: detected capacity change from 0 to 128 [ 54.061204][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 54.093360][ T4708] syz.5.429: attempt to access beyond end of device [ 54.093360][ T4708] loop5: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 54.210087][ T4713] loop0: detected capacity change from 0 to 512 [ 54.235755][ T4713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.255875][ T4727] tmpfs: Bad value for 'mpol' [ 54.284581][ T4713] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.442102][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.532851][ T4744] netlink: 'syz.5.444': attribute type 29 has an invalid length. [ 54.548775][ T4748] netlink: 'syz.0.441': attribute type 29 has an invalid length. [ 54.570716][ T4748] netlink: 'syz.0.441': attribute type 29 has an invalid length. [ 54.580865][ T4744] netlink: 500 bytes leftover after parsing attributes in process `syz.5.444'. [ 54.584526][ T4748] netlink: 500 bytes leftover after parsing attributes in process `syz.0.441'. [ 54.590947][ T4753] xt_hashlimit: max too large, truncated to 1048576 [ 54.703469][ T4762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.449'. [ 54.747779][ T4767] loop0: detected capacity change from 0 to 512 [ 54.762645][ T4758] loop1: detected capacity change from 0 to 1024 [ 54.781796][ T4767] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.802090][ T4767] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 54.825038][ T4767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 54.837129][ T4758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.864679][ T4767] System zones: 1-12 [ 54.886601][ T4767] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.453: corrupted in-inode xattr: e_value size too large [ 54.915657][ T4758] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 54.936913][ T4767] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.453: couldn't read orphan inode 15 (err -117) [ 54.949149][ T4758] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 54.961566][ T4758] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.961566][ T4758] [ 54.971328][ T4758] EXT4-fs (loop1): Total free blocks count 0 [ 54.977454][ T4758] EXT4-fs (loop1): Free/Dirty block details [ 54.983400][ T4758] EXT4-fs (loop1): free_blocks=68451041280 [ 54.989246][ T4758] EXT4-fs (loop1): dirty_blocks=64 [ 54.994516][ T4758] EXT4-fs (loop1): Block reservation details [ 55.000591][ T4758] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 55.010178][ T4767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.076748][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.116703][ T4767] EXT4-fs (loop0): shut down requested (0) [ 55.153896][ T4767] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 55.187802][ T4790] netlink: 132 bytes leftover after parsing attributes in process `syz.2.461'. [ 55.201816][ T4767] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 55.212431][ T4767] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 55.234745][ T4793] loop1: detected capacity change from 0 to 512 [ 55.259619][ T4793] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.285577][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.313834][ T4793] EXT4-fs (loop1): 1 truncate cleaned up [ 55.334546][ T4793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.423942][ T4803] loop2: detected capacity change from 0 to 512 [ 55.430880][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.447130][ T4803] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.480364][ T4803] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 55.515519][ T4803] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 55.534114][ T4803] System zones: 1-12 [ 55.565126][ T4803] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.466: corrupted in-inode xattr: e_value size too large [ 55.652857][ T4803] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.466: couldn't read orphan inode 15 (err -117) [ 55.704799][ T4803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.746583][ T4819] validate_nla: 2 callbacks suppressed [ 55.746608][ T4819] netlink: 'syz.0.473': attribute type 21 has an invalid length. [ 55.757576][ T4820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.472'. [ 55.800207][ T4803] EXT4-fs (loop2): shut down requested (0) [ 55.817238][ T4819] netlink: 132 bytes leftover after parsing attributes in process `syz.0.473'. [ 55.840303][ T4803] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 55.843471][ T4817] loop1: detected capacity change from 0 to 1024 [ 55.871644][ T4803] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 55.917649][ T4817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.921952][ T4803] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 56.027253][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.038851][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.431768][ T4854] loop5: detected capacity change from 0 to 128 [ 56.483242][ T4854] syz.5.484: attempt to access beyond end of device [ 56.483242][ T4854] loop5: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 56.662584][ T4863] netlink: 'syz.1.488': attribute type 21 has an invalid length. [ 56.715585][ T4863] netlink: 132 bytes leftover after parsing attributes in process `syz.1.488'. [ 56.863958][ T4876] xt_hashlimit: max too large, truncated to 1048576 [ 56.952958][ T4887] netlink: 'syz.0.497': attribute type 21 has an invalid length. [ 57.164486][ T4901] netlink: 'syz.5.504': attribute type 21 has an invalid length. [ 57.206571][ T4899] netlink: 'syz.0.503': attribute type 21 has an invalid length. [ 57.384920][ T4919] netlink: 'syz.3.512': attribute type 29 has an invalid length. [ 57.408695][ T4919] netlink: 'syz.3.512': attribute type 29 has an invalid length. [ 57.552236][ T4929] loop2: detected capacity change from 0 to 512 [ 57.581485][ T4939] netlink: 'syz.0.521': attribute type 21 has an invalid length. [ 57.597619][ T4929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.618621][ T4929] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.632485][ T4942] xt_hashlimit: max too large, truncated to 1048576 [ 57.662876][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.729566][ T4951] netlink: 'syz.3.528': attribute type 29 has an invalid length. [ 57.738142][ T4951] netlink: 'syz.3.528': attribute type 29 has an invalid length. [ 57.897965][ T4967] Cannot find set identified by id 0 to match [ 58.006837][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 58.006851][ T29] audit: type=1326 audit(1732149743.329:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6cbce819 code=0x7ffc0000 [ 58.052083][ T29] audit: type=1326 audit(1732149743.359:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a6cbcd1b0 code=0x7ffc0000 [ 58.075553][ T29] audit: type=1326 audit(1732149743.359:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6cbce819 code=0x7ffc0000 [ 58.099131][ T29] audit: type=1326 audit(1732149743.359:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6cbce819 code=0x7ffc0000 [ 58.101978][ T4985] Cannot find set identified by id 0 to match [ 58.122551][ T29] audit: type=1326 audit(1732149743.359:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0a6cbce819 code=0x7ffc0000 [ 58.122588][ T29] audit: type=1326 audit(1732149743.359:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6cbce819 code=0x7ffc0000 [ 58.175502][ T29] audit: type=1326 audit(1732149743.359:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0a6cbce819 code=0x7ffc0000 [ 58.198931][ T29] audit: type=1326 audit(1732149743.359:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6cbce819 code=0x7ffc0000 [ 58.199006][ T29] audit: type=1326 audit(1732149743.359:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9692fe819 code=0x7ffc0000 [ 58.199030][ T29] audit: type=1326 audit(1732149743.359:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f0a6cbce819 code=0x7ffc0000 [ 58.420230][ T5008] loop2: detected capacity change from 0 to 512 [ 58.422435][ T5008] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.423049][ T5008] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 58.424504][ T5008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 58.424531][ T5008] System zones: 1-12 [ 58.427262][ T5008] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.550: corrupted in-inode xattr: e_value size too large [ 58.427790][ T5008] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.550: couldn't read orphan inode 15 (err -117) [ 58.429322][ T5008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.450090][ T5001] loop5: detected capacity change from 0 to 1024 [ 58.460596][ T5001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.525239][ T5008] EXT4-fs (loop2): shut down requested (0) [ 58.537342][ T5008] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 58.539144][ T5008] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 58.539248][ T5008] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 58.546403][ T4223] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.596786][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.862726][ T5030] loop5: detected capacity change from 0 to 512 [ 58.877933][ T5030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.878015][ T5030] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.955100][ T5036] loop1: detected capacity change from 0 to 512 [ 58.973139][ T5036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.973261][ T5036] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.036106][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.106588][ T5043] __nla_validate_parse: 11 callbacks suppressed [ 59.106606][ T5043] netlink: 500 bytes leftover after parsing attributes in process `syz.1.564'. [ 59.570871][ T5058] netlink: 132 bytes leftover after parsing attributes in process `syz.2.571'. [ 59.774914][ T5078] Cannot find set identified by id 0 to match [ 59.803770][ T4223] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.891254][ T5092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.577'. [ 59.942735][ T5084] loop2: detected capacity change from 0 to 1024 [ 60.073912][ T5102] netlink: 500 bytes leftover after parsing attributes in process `syz.1.582'. [ 60.088139][ T3452] ================================================================== [ 60.096266][ T3452] BUG: KCSAN: data-race in mon_reader_add / usb_hcd_submit_urb [ 60.103842][ T3452] [ 60.106175][ T3452] write to 0xffff88810147d088 of 4 bytes by task 5102 on cpu 0: [ 60.113827][ T3452] mon_reader_add+0xc7/0x1f0 [ 60.118451][ T3452] mon_bin_open+0x32b/0x3b0 [ 60.122980][ T3452] chrdev_open+0x2f9/0x370 [ 60.127421][ T3452] do_dentry_open+0x621/0xa20 [ 60.132127][ T3452] vfs_open+0x38/0x1f0 [ 60.136219][ T3452] path_openat+0x1ac2/0x1fa0 [ 60.140821][ T3452] do_filp_open+0x107/0x230 [ 60.145340][ T3452] do_sys_openat2+0xab/0x120 [ 60.149955][ T3452] __x64_sys_openat+0xf3/0x120 [ 60.154767][ T3452] x64_sys_call+0x2b30/0x2dc0 [ 60.159462][ T3452] do_syscall_64+0xc9/0x1c0 [ 60.163976][ T3452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.169883][ T3452] [ 60.172220][ T3452] read to 0xffff88810147d088 of 4 bytes by task 3452 on cpu 1: [ 60.179770][ T3452] usb_hcd_submit_urb+0x86/0x1510 [ 60.184815][ T3452] usb_submit_urb+0xa80/0xb70 [ 60.189504][ T3452] usb_start_wait_urb+0x91/0x190 [ 60.194452][ T3452] usb_control_msg+0x182/0x240 [ 60.199407][ T3452] hub_ext_port_status+0xbf/0x480 [ 60.204446][ T3452] hub_event+0x538/0x2910 [ 60.208789][ T3452] process_scheduled_works+0x483/0x9a0 [ 60.214265][ T3452] worker_thread+0x51d/0x6f0 [ 60.219061][ T3452] kthread+0x1d1/0x210 [ 60.223155][ T3452] ret_from_fork+0x4b/0x60 [ 60.227616][ T3452] ret_from_fork_asm+0x1a/0x30 [ 60.232403][ T3452] [ 60.234726][ T3452] value changed: 0x00000000 -> 0x00000001 [ 60.240445][ T3452] [ 60.242769][ T3452] Reported by Kernel Concurrency Sanitizer on: [ 60.249040][ T3452] CPU: 1 UID: 0 PID: 3452 Comm: kworker/1:4 Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 [ 60.259460][ T3452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 60.269523][ T3452] Workqueue: usb_hub_wq hub_event [ 60.274566][ T3452] ================================================================== [ 60.385187][ T5108] loop2: detected capacity change from 0 to 512 [ 60.412393][ T5108] EXT4-fs: inline encryption not supported [ 60.418769][ T5108] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.427887][ T5108] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 60.438612][ T5108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c119, mo2=0002] [ 60.449069][ T5108] System zones: 1-12 [ 60.453477][ T5108] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.583: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 60.471799][ T5108] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.583: couldn't read orphan inode 15 (err -117)