last executing test programs: 3m15.229094877s ago: executing program 3 (id=14): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x2, 0x0, 0x2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xa1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x6, 0x2da3b9f3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5daa00000000000071101b00000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r0, 0x0, 0xf3a, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0x0, &(0x7f0000000380)=""/27, &(0x7f0000000400)=0x1b) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[], 0x18c6) r5 = socket$inet6(0xa, 0x3, 0x3c) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x34, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r5, 0x0, 0x0) 3m15.071334109s ago: executing program 3 (id=16): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000000c0)={{r3, r4+60000000}, {0x0, 0x989680}}, &(0x7f0000000100)) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000140)={[0x9]}, &(0x7f0000000200), &(0x7f0000000180), 0x8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000780), 0x111, 0x4}}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000002100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003740)="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", 0x5c1}], 0x1}}], 0x2, 0x240080a0) sendmmsg$inet(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) 3m15.01061448s ago: executing program 3 (id=17): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) r1 = io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 3m14.768968594s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c0000000000ce7b0100000000000000", @ANYRES32=r3, @ANYBLOB="030056060a000200aaaaaaaaaa1c000008000f0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x2ed4cf8750c9b956}, 0x40c0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @loopback, 0x80000000, 0x7, 0xd5, 0x100, 0x80000001, 0x20000, r3}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="100000000a1401002abd7000fcdbdf256880c87f4a513be11d2c9dce60355e3453bb58b026d7b90b5e17d3c40b268dd3111511e0b363f41726c3b79a4da260ed735e85f8ffb4e2773d637822fa554cb66774f631e6326dd3f53ca0ceaebaa53840a8fb83d1ab141d415395840f3765260295f7420c30088d4a3dd1e85bb79405766d5e4c8ea1a957e0ca1aa3f0a4e3254b0d7b7076c1e748021524b50d7b81cbfaaf854d6d956bbefde5f6878668b459a446913e683f656544b5be23ce62bed42bac68e4e1d21516b4927692b1"], 0x10}, 0x1, 0x0, 0x0, 0x4095}, 0x40084) write$selinux_user(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x4e) syz_io_uring_setup(0x1725, &(0x7f0000000080)={0x0, 0xed2f, 0x1000, 0x1, 0x803a6}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r10, &(0x7f0000000200)={0x1d, r11}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r11, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$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") r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 3m13.062253482s ago: executing program 3 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x2, 0x6, 0x4, 0x0, 0x29, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_x_sec_ctx={0xa, 0x18, 0x0, 0x5, 0x41, "945010d2cd8676d57453dfcee53718a89fc557b4db432f91cafa931cb8268f525bbb0dfaeb69e5d4906b94966ef48bbedf49460e267e34a7a28044c674fa2c51d6"}, @sadb_key={0xd, 0x8, 0x2f8, 0x0, "3d39cb5a8592a6befc039ddb8d4f655b7b1a926bcbad2629f4f9314e8e2da13a40e5dc73ae65c58019e988d10652f7ff04d819ba6a48cdbe784eb7266972925299650915e0a51806f8ea57db517f610f0fae052c0e94b433d78a8cb52e7c27"}, @sadb_ident={0x2, 0xa, 0x0, 0x0, 0xd4f3}, @sadb_x_sa2={0x2, 0x13, 0x10, 0x0, 0x0, 0x70bd26, 0x3502}, @sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x6e6bba, 0x2, {0x6, 0x2b, 0x80, 0xc, 0x0, 0xfff, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3a}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x80, 0x0, 0x0, 0x70bd2a}]}, 0x148}}, 0xc000) 3m12.801399716s ago: executing program 3 (id=35): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) r3 = io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000017c0)="be", 0x1}], 0x1}}], 0x1, 0x20048045) close_range(r3, 0xffffffffffffffff, 0x0) 3m12.801149866s ago: executing program 32 (id=35): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) r3 = io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000017c0)="be", 0x1}], 0x1}}], 0x1, 0x20048045) close_range(r3, 0xffffffffffffffff, 0x0) 2m53.582344342s ago: executing program 2 (id=331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7ffffffe}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/241, &(0x7f0000000640), &(0x7f0000000680), 0x2, r0}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000000000000e4183200000000008510000002000000850000008800000095003300ba7e4d3e73b24e0ef23ef9dc73eca74e000000009500a5050000000087a303a221c01ca02d8c65ce87988f8826a54f0b42dcf64566f3afeccbb60768a4efc8bcb149"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, 0xffffffffffffffff, 0x1c, 0x0, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0xff00, 0x8, 0xc8, 0xc, {{0x13, 0x4, 0x2, 0x1b, 0x4c, 0x64, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@noop, @rr={0x7, 0x23, 0x87, [@broadcast, @private=0xa010100, @loopback, @rand_addr=0x64010102, @private=0xa010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @cipso={0x86, 0x14, 0x2, [{0x2, 0xb, "6a95a019eb89c7bfc1"}, {0x1, 0x3, "8d"}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000006863d8c1b27f6f6fd01b07ecc14000000001000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000002b704000000005700000295000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$l2tp(r3, &(0x7f00000008c0)={0x2, 0x0, @broadcast, 0x4}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, 0x0, 0x310) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r13, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m53.467533964s ago: executing program 2 (id=336): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x20000, 0x101) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4b6}}, './file1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00100001800000000000000800000000000000", @ANYRES32=r0, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0500000003000000020000000100"/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) setuid(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x82c}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40894) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000180)={@local, @empty, 0x0}, &(0x7f0000000340)=0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="44000008000000001d0000000000108903b26dc6a6a1b9c4b5dc6b193f424e2a6be39fd1462d6fd839d9d472b01a6710ea51d9129a8647381b75f1a370bea30b5d9b541ea59fd3b0b5ce0ea3da9ae42227000007f6a659f13c1e67c6194885226db3d2875e2cf715805f9698e025559a5341e464ab1847a2bdae58b3a894f54d8d68d0c4437a78896758a42db07d801ea52bdaff24e4e104a8731510502ef7d258955df9e1c46109779cbddb7dfb241b10fc1672e5", @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendto$inet6(r6, &(0x7f0000000100)='D', 0xffffffffffffff4b, 0xe5be6ed551e5509d, 0x0, 0x0) shutdown(r6, 0x1) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000000)="dda00870", 0x4}], 0x1) 2m51.17963721s ago: executing program 2 (id=371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x28, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1a34b664889f2fc5}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x840}]}]}, 0x28}}, 0x0) 2m51.122547461s ago: executing program 2 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c0000000000ce7b0100000000000000", @ANYRES32=r3, @ANYBLOB="030056060a000200aaaaaaaaaa1c000008000f0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x2ed4cf8750c9b956}, 0x40c0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @loopback, 0x80000000, 0x7, 0xd5, 0x100, 0x80000001, 0x20000, r3}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="100000000a1401002abd7000fcdbdf256880c87f4a513be11d2c9dce60355e3453bb58b026d7b90b5e17d3c40b268dd3111511e0b363f41726c3b79a4da260ed735e85f8ffb4e2773d637822fa554cb66774f631e6326dd3f53ca0ceaebaa53840a8fb83d1ab141d415395840f3765260295f7420c30088d4a3dd1e85bb79405766d5e4c8ea1a957e0ca1aa3f0a4e3254b0d7b7076c1e748021524b50d7b81cbfaaf854d6d956bbefde5f6878668b459a446913e683f656544b5be23ce62bed42bac68e4e1d21516b4927692b1"], 0x10}, 0x1, 0x0, 0x0, 0x4095}, 0x40084) write$selinux_user(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x4e) syz_io_uring_setup(0x1725, &(0x7f0000000080)={0x0, 0xed2f, 0x1000, 0x1, 0x803a6}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r10, &(0x7f0000000200)={0x1d, r11}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r11, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$eJzs3U9sHFcZAPBvXCdxXBFVBYUoStNpWqRESt2107qyemi367Ez7XrX2l1XiRBqI+JUUZy2aqhEciDNBQQCIU4cSw9c4IS4gJBA4gCckODKrVIlDi0IJA6gSkY7s5vY8a6dP04c0O9nxfNm3pt53zxv5ttZe2YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIikNlupTCZRzxtLp9LharOt5sIm9f3t/WbdZJN+I5LuvxgbiwPlogNfuFG9v/vtSBwq5w7FWHcyFlce3v/IC58fHemvv0lA22100MJLl69cOLOysvzufQzkHvjOr9bN/ng8bnFk57NG3m7mC9X5LM3bzXRmerryzMm5djqX17P26XYnW0hrrazaabbSo7Vj6eTMzIk0mzjdXGrMz1brWTpaLnz+6alKZTp9ZWIxq7bazcYzr0y0ayfzej1vzBcrdqu7bZ7vvhBfzTtpJ6supOm58yvLJ9aHtHdDkN1Gk+uWfLa6du7QU498/N5H/zy/PLXV7k5VpqYmJ6emJqefm3nu+UpldMOCyk1iQ4v7+qLlAbTNR3C4c/38H/XIoxFLcSrSgV+1mI1WNGNhSH1PP/9/6Zm//XHTftfk/zLLjxw6cKP6YBT5/3A5d3hY/i/73r1nSEz36qsvjUtxOa7EhTgTK7ESy/HuPekv2b5tjWxvZPORRSPyaEcz8liIarEk7S1JYyamYzoq8XqcjLloRxpzkUc9smjH6WhHJ7LiFVWLVmRRjU40oxVpHI1aHIs0JmMmZuJEpJHFRJyOZixFI+ZjNqrFVs7F+WLcT9wU1/5vvPHLN//08QfFT6vfaHKzIX4/omj0j9gbMaSR/M/d294DONyF1X7+v1lxQAQAAAD+HyTFp+/d8/9d8VhRmsvr2Ze3WGu0+80HBAAAAPA/ovjN/6HuZFe39Fgk3fP/yvpGP921M8EBAAAA2yIprrFLImI8Hi9L/culKjsdGwAAALA9it//H+5OxiOuFgtu5/x/wI0DAAAAgAfNaz/vFW6+x/5H/Xvsthf3JL/+e7Rau5Jri6eeSi5Wu+2qFx8q1+tNVgt7IqIzdzDpfy5QbGt69MrD3fnRWnYo6d/98rM95fTT4vvB0esBrY/jpb3l0iRJtgjghm4A+3p7cT2AYi6+G0+UbZ44W07P9mvKvR2fy+vZRK1Zf2EyqtV9I53sVOe9t85/PYrd/3ZjYV8S586vLE989e2Vs0Us17pbuXaxt78bPg7ZJJbV3gjEY4PvbryruBCj1+942W9l7f6PXNrXLYzcRp/fjCNlmyPj5XR8/f6PdfucnBi29+Pl/k1u2PPRjS+sTaN4smzz5NEny8mAKKY2i6I7FlNro+gNwu2NxcAo4pGI+OCJq6f+9btmkp3YKooTdxkFwE45V9z15+Ys9J8yna9283+rtWt3rMs75Qq3epRLil62eJLPrWf3f69uckQ/WrY5Wr6fGD04IK9UBhzR3zn/zu97R/Rnf/LDH33l8B9+dsd5fazfZG+/8OhvHx6JIoq9vSiu9Gpau5LvXc8kZVb9sLv8w6H9tutTSXcIH/raxXdi/6XLV54+f/HMm8tvLr81NXViuvJspfJckvR+eKvFOwa5B4ABjsThMpEPfcbOkKfwFG8Aytz97GZn1Q9F8uj1Pyno5sS3YyXOxvHiaoOIeHxwv+PFOsV7kCLKMtjBZ63ja57wcnyLc8vdxY0Oum2ntmw7vubxMjd88Qf38McBAPfFkS3y8ND8v+bc/fgW593ja/6k8HgcK9se60cwPJcDAPdG1vo0Ge98K2m18sXXJ2dmJqudk1naatZeTVv57HyW5o1O1orRamM+SxdbzU6z1qx3C6/ls1k7bS8tLjZbnXSu2UoXm+38VPHk97T36Pd2tlBtdPJae7GeVdtZWms2OtVaJ53N27V0cenlet4+mbWKlduLWS2fy2vVTt5spO3mUquWTaRpO8vWNMxns0Ynn8u7xUa62MoXqq1rEVFfWsjS2axda+WLnWa5wX5feWOu2VooNvvXfTs92gDwYLh0+cqFMysry+/eWeEvt9J4eO9jbiwMADvgRpb+5HM31724MyEBAAAAAAAAAAAAAAA3ucvr/zYW9t7x6qMxoGpss7VWr0ZsrEpWV1dvo/e9sUWb3b2h2uaBui+Fa9uynZEYNM4PTiEZXvXGiy9eGLb6y1cPnLy1Lrb8nzIaEb1LXd//ZPcvvl9WvXRHuzNy+2v9OSLuoK/VZJM2O3tcAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBB/hsAAP//NAJwuw==") r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 2m50.5581222s ago: executing program 2 (id=379): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020f56c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) getegid() 2m50.331852264s ago: executing program 2 (id=382): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x1eb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x3, 0x8900c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x6, 0x7ffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x20000000, 0x1, 0x80000001}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000200000000e800000003fffffffff9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bind$rds(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r9) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fddbdf2504000000080004000000000005000a000100000008000100", @ANYRES32, @ANYBLOB="080001"], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) 2m50.331592634s ago: executing program 33 (id=382): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x1eb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x3, 0x8900c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x6, 0x7ffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x20000000, 0x1, 0x80000001}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000200000000e800000003fffffffff9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bind$rds(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r9) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fddbdf2504000000080004000000000005000a000100000008000100", @ANYRES32, @ANYBLOB="080001"], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) 4.719916805s ago: executing program 6 (id=2601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x205, 0x0, 0x1, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @local}]}, 0x2c}}, 0x26048880) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b3320000000000000001500000008", @ANYRES32=0x0], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x28, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10000, 0x26}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x3) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@updsa={0x13c, 0x1a, 0x1, 0xff80, 0x0, {{@in=@loopback, @in6=@empty}, {@in6=@dev, 0x4d4, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x40, 0x0, 0xa, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r6 = fsmount(0xffffffffffffffff, 0x1, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='btrfs_reserve_ticket\x00', r6}, 0xffaf) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)="86", 0x1}], 0x1}, 0x4000) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000800)={0x1d, r9, 0x1, {0x1, 0x1}}, 0x18) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x0) 3.616253832s ago: executing program 6 (id=2616): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd706975e7192504"], 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) 3.588607353s ago: executing program 6 (id=2617): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002800018014000400"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 3.540779044s ago: executing program 6 (id=2619): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000c80)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {}, {}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x0, 0x0) 3.011987412s ago: executing program 6 (id=2624): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.011218582s ago: executing program 0 (id=2625): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.919617964s ago: executing program 0 (id=2627): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xfffe, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x8000003, 0x2}, {0x0}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 2.888404704s ago: executing program 6 (id=2628): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400"], 0x0) getpid() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) 2.887221774s ago: executing program 0 (id=2629): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ff"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.024799608s ago: executing program 0 (id=2641): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3d, 0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) iopl(0x3) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1800) syz_usbip_server_init(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto(0xffffffffffffffff, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xeb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ftruncate(r0, 0x8) 1.977807589s ago: executing program 5 (id=2643): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0xc}, 0x115428, 0x0, 0x0, 0x7, 0x5f4b, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x0, 0xfffffffffffffffc, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000aacaa6fdbee78cfe00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x2, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x9) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000140)={0x6, 0x8001, 0xffffbb8b, 0x3, 0x7, "635d509d2718c014df1a4569ec44cf1dd88567", 0x7, 0xe0000000}) listen(r0, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)="c692a51e90850d65730d4bf87812bb91f4ab6039eb902ef2c3c8e03a52dee9cd49ba39a038132df72190c3de32cddcfaab25e6d834cbbd86ca06b40b23996a7e473a30ccfbd7c3242a5d52ea70175858166da3921dbcac4ad24c86d8f3fc87e93a17ac259421a11ca78ec69970f338f6c6e3457e1421a0b0faeaf7110503153b2abf065bdc442fd0ec7f4fadf8f8c3e0c266e21b679b7ea05cc817ca8d669908a08c436f4fbd586736508963eefa2b328d1133d31f1d355ccc2f18877a19fbb5c912ed75ebf09349cb896f08f31be11cd6a3dc47f694051c065b2c0b075d8344aff793669e552526", 0xe8) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 1.776093852s ago: executing program 5 (id=2644): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xf}}, './file0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000c80)={{0x80}, 'port1\x00', 0xc8, 0x10, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xbf}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r4, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 1.695877964s ago: executing program 5 (id=2645): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x0, 0x801) r0 = syz_io_uring_setup(0x24fd, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000540)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.695506183s ago: executing program 5 (id=2646): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) r2 = io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1.524257456s ago: executing program 5 (id=2653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x5}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 1.464960327s ago: executing program 5 (id=2654): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="190900000080000000000000040000984647dc461c485d00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) 1.040758094s ago: executing program 1 (id=2664): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x410c84, &(0x7f0000001040)={[{@block_validity}, {@i_version}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@norecovery}, {@abort}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = syz_io_uring_setup(0x4b6b, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0x8000, 0x315}, &(0x7f0000000240), &(0x7f0000000200)=0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000040)=[0x1, 0x5], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x366a, 0x11da, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYRESHEX=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendfile(r8, r7, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 925.329575ms ago: executing program 0 (id=2666): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x3d18, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0x800, 0x4) recvmmsg(r0, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 456.322433ms ago: executing program 4 (id=2670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001380)={0x11c0, 0x15, 0x200, 0x70bd2c, 0x25dfdbff, {0x1ebc5ed3e2912f18, 0xd}, [@INET_DIAG_REQ_BYTECODE={0xba, 0x1, "f099e5e8b310bf08f7594489b11d43ffbb17207f8461b6d3377facf7347595fbf2a5bc19f91c9e1ff93672f5b3b37bf10b9891996e2f41bd84c3bb5f574f788f10381697211b998ea8a85e47ba00d8828b79dbf57547224040026bd102784a6c398967a626f13df9b9608fdf25ded65b943c5f41a65be12899853bdbef16c739ab33f6bba6a6c8e233939c6dc0c4bdce83c1f38d6b3f659735a86e66f53ed540b3c05f0bf129304d425dfa21f5ac2c50b1eb25c949ca"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "60f43c71fbf5b2a4b7f39b61cf3ba822838e804af81ec2a3604f23b98774404658373f344c2ea67a07fb66d5bff6a549f979231a52c337a39641d8481f99951c67cb081aa4077bbc20e5395cc158d857a4bbcbbcc60ab9d6a3a7b1266a5a4664aa8684f4afaeea04b01e31f12249c174f22563b5770e5a8523d16efa6241f4cbab0b122364792ec297fc69cfc0f52f290370ac405a29007868ecf092d7a5140bf62aafb65bbbdada815e580ee716094350355b6572fcf140f6b0a010bf0356a05b86bf4301d686b00e9a1627b050d9afb1529c5ebd334f435ded85ccb7e60a020b02b8d2260b1f"}]}, 0x11c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xc4) futimesat(r6, 0x0, 0x0) 375.831404ms ago: executing program 4 (id=2671): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) r3 = io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 259.996886ms ago: executing program 4 (id=2672): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) r4 = io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0x101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff), 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000017c0)="be", 0x1}], 0x1}}], 0x1, 0x20048045) close_range(r4, 0xffffffffffffffff, 0x0) 186.350007ms ago: executing program 1 (id=2673): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010028bd706975e7192504"], 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) 155.664898ms ago: executing program 1 (id=2674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0xffff000000000000, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 131.327318ms ago: executing program 1 (id=2675): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000002c000100000000000000000008004000", @ANYRES32=r3, @ANYBLOB="0b000280976b64086060300005ec00800300000050df4049bfa5c24b93c091dea0ad4769158352bf4d2634c53615fec18581885cbd6f131bd6e915"], 0x2c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) getuid() socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xfffe, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x8000003, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 102.958559ms ago: executing program 1 (id=2676): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)) 96.312929ms ago: executing program 4 (id=2677): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xfffe, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x8000003, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, 0x0, 0x0, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 63.199309ms ago: executing program 0 (id=2678): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') r3 = io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 62.913389ms ago: executing program 4 (id=2679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0xffff000000000000, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 16.50443ms ago: executing program 4 (id=2680): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000c80)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {}, {}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000, 0xa00}]) 0s ago: executing program 1 (id=2681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001380)={0x11c0, 0x15, 0x200, 0x70bd2c, 0x25dfdbff, {0x1ebc5ed3e2912f18, 0xd}, [@INET_DIAG_REQ_BYTECODE={0xba, 0x1, "f099e5e8b310bf08f7594489b11d43ffbb17207f8461b6d3377facf7347595fbf2a5bc19f91c9e1ff93672f5b3b37bf10b9891996e2f41bd84c3bb5f574f788f10381697211b998ea8a85e47ba00d8828b79dbf57547224040026bd102784a6c398967a626f13df9b9608fdf25ded65b943c5f41a65be12899853bdbef16c739ab33f6bba6a6c8e233939c6dc0c4bdce83c1f38d6b3f659735a86e66f53ed540b3c05f0bf129304d425dfa21f5ac2c50b1eb25c949ca"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "6b4a8ecf37280e5a5f43e6d0ca83eeefc479fd38441581807c3ab5b16b0dfa65f0e0d93c7f673b32b6975f6f848faca2137a1900598f5d02119bcb3bd7577b682372483788b600b914924b7f882ba2b65a3e429a734eebd7dcd5eede7ac2ff102e88b3ece15f2236fa2047aa457f796c1057c1fd6036de4e5dcb5c78b108329ed792f8514d57bba7b24c127720b73810456a6115e9aba1a72726a45365d10c53b49e10d82c9713a9410dce419a77a42ec74e26ba9820f09c9e79a50a2b3d146d5fa594aa96423275c545d882ed080902167e05f0e2f337141fb780cf64778d3b38bedda18daf4fabf8415e05c1ed9351b771bb1a4695796f9d292d08c8ae7e1d4c2ab46111309189344f2e74acff086fb8c7529a885cf7be1b36c397c826eae91af7f03c22e543297312f6effc87307c39c6837b27bde0d02fd7a8f3c293ef067b4909a54cb6a93851137c0a3475983cce7260cc33c6539bbeea41865f980d5797fcded8d95e7ae111e2acbd4ee6e36f99511851090ad595b3422b05b0bca3d09a501e0ccb9a66a39fb7d6a240988b25de94c7ad8ad17f8f1be8c432c71552e50fbc2152aece9354b8e62e9caca95bbe71f89dccef4d16970bf7e105c1466fd9a45c49195f5539eab83d999e409d32c820db969f4228dba1a407035d45a96860528e0d1528f88a592fb8462977c3be473b1140681a69a5c5f21a819e072dbe96c902def4a3ae3ca061da23e769588da3fb2286499d707237e51578c7fae7daf7867f01fdcd7e179d65e318f72a6593aaaed7c673fd1572ae68d8aa2b976bed25bb0e06363b86c9d2fa5f24ea50bdb4e5b2a799ba907280f302a7b257d4df0d04875d4298f44120b2dea4ba0c0a4e87d1d0943522ed5bdff61cc79317cb484bd34f728d97b8453c8b2d13b2af945d5fb64bb450789c299d783f6af3aef9bc00af9726cc4f648b8b942267684d5e69ccac23525694a19aa5702aa7c4a95eacb98a4725e47f2b128310b852a126853bb37f306659a9503ea397b515b54aa7733c095a182ce3f7fed08eedb77f23147ebaadcbb4a4f7c1ca9fb180d40cacfa841772e64ce96dff2e13e6d2c05c1b16ac5b86e4f0bc7615944adb1907e54f247ec5ed4890cd1d8bd0e6377dbd9765d003eaf1758b6fe4f005933655e6b27d6fb7a1cc688b7854224dc16aefc6de6b192abca59676284dccb5f666fb2868ed98cfda00106708abeb21fcb442311b5f56dc4ec5cbd9f8cbf4eb003be8a13c8333f438a1c9c0d157083185530912b6909ffbc58599d3edb55598166c62d50674428463da0054599d2f4661ef8bbb74272392f8cf21f8f30016b726497f63edc8e56bc063a9012a30f31c7cb752d664138f411b53db5f76ee8900a83752e35852e3280b4ecf4f722544b6e1424e8cb7f5e233981a9e22c6b7b5778eeb77b2ea46396763c969ec0753c6541f5798ae70b9555642896a8418d9ba16c51eddb3c61d628585ffe22d091ccb4e7f0318b2a625ec5746e5c8df2f0f4567718b3f801add0f38633c7f83a198dc7b5fc2ef9c0f2a402efedcdda9f493bdc812b3857165e698d8c185a8746bccfc085558411e0fd1452673d62396b0a61c5d59e1cabaf9154631d4d445cdd6c5490b89661f019966e8c69fe6798f34cf6d7ae0ee2cb33e4dfb8d208094a009293c1e6b11cb87c05732f76a16829a0fe910af3964963e1249063096802d6490e842366904ee3a6ff7166c3d91f8de24188cd313987fe6ee2f5cdb156ac668f72e33c68cd54a0593edaf42df560320c70f4ee12e20ad413ab1b2e3e22f416b712a42400cb052dfff49b00513871cc081a9ed6cc549ff5d58cf650fe089ae4f0343eb3e277e717fda4c581604b6653cd75a5a6fe53418cefd4d992960a1fef5c3270e15f55e43bea42f5bcae62ef0247b62637c2cdf96fc480aae58a0e429c616f4c1d0aee574e18c7b93f45ea57664eb806146e46f5f266e344f0a13bc66f0b33c760295d69f6220ca1830224a60b5b1c7cbdc42de4cd27f081d89930872f2e4571d2ee5cfb50a1f5878b833b7f7bdedd6df33846639337559260cf87a7d8b45fb0b0c647b95b19e692555f66259252f84d4427252a62abda2ec4e0d0652ca352c4a11261cab36778e2a2160ae3db41d4cc74a32eeab5179d671131ddfab5dbef655afd0badc22685e44aab30427346b88e1688a8b133fa7e4b47169bc8946f075c56a2318206370e7118063bbe9253d8d4493767a62c9d2be746365d406d8611b103cb234c1d0c4e0813143ffc3c4ac799e9c016c112d05dd96bf944f1bf87741b783d4c58d07b59e61f0e10b68429fd10a87ef8c993bfeef0018f441d38081b7cfe04afd22054c5b8b95f0dc9b9600f8a3e78ed457ba3f2f027c6da2cd014e8e422a9f317b5cfdbf361c6670b16686a11f30e16a411af1b730393edb2c628ae9df358bc5854904ba7f9ae31b102e31625864ee2e368ec7e49af92a3b3030eb798f5da892544091a6698c348796869aa2a72a0052cfea84721b4aa1f54e47dd5a6a325bfe766ba8abcddc299f79bb46cea68e1367f9ee6b6f8edb2be069b71dadbf4b6d79c58337be50f103619bad5f7d48d803a3ff0f92ccc226eb2924e0537154d068c17ff5b6810054ba68f5cde8affd3f5c5f76fc8276c36460846a35efeebaaa4d534c1077b6e3aa46b0109da165ad7dccd322e5d61aad417a8f5b6c868b103106600c7487570605ce5a7dabdadb26b51563cb1f53e584ec37efd15fbd0e0e9946d193fcea9bf9e9ab5ec64963b10b6f09352ec367ab18d7019037c75b4872ce16564ccd9684ac8edfb43f17e3ec30c3a4eaecf37d54c593564a0cc36aa764ed3a8d915658e015bc448af0e2f8b656d23cf564d349af30fc94a6797addb7d18cfab55dee42fc2a4e0298b23c1ebc8dee999432ebc5cfb8c556a72abfb652da0a0aa819975891c4843e8506983cf1f0329e14a38226240c5ef8552bd0daa98f6ff4aed9769dbded23d429dd422d1bbb87be1312f9cb28951e3365c5b3c43d5fcefa3881df5ac721766988b9d6bed05744356192f4f52b284c67d0f6011266d0d195ed3793cde79a11fd64b499f9ca1e86ac682ade32fbbb6bdad533dfc6eb17d8e9d73490ffd516c7ebfbb47dd85cab0f0557ff99da815a8d38c7563e8b1b34df34963ce361c89cf9e36ad2d79966cf615baf914bbd979ca0d0b234c1ceb2cc7bc0c6ef394e09eab66ff2e00cbc0e8ff3c29247d1865b5d825f128c3e703ae0f504b75162937fcb966d450dff1cfde7b3f73bd04fa6733669292efb3c25fdf118b41fdd37a544699be167d55c210eb6c9394037e07cf28befc06eb5f112cb4e98c4f254352990b040e68edbc67381d38fc2c4995de9b9088f182370bb9c974d1685357fbba59804bebdad200c826acc7235f427ed4ee9a24c57d240d6837d1cc4bdfbe4cab2451d2bae027e557e5b3ed37595fcc95f900d853a2145080a4e9a87472b5de060334f76d3d0a21b8fc42b743760d3b606c339774b5631a36c9206f86352677650bd2ba13d4964f7a4389801b3577c13fd0f0917893fd65962a998d5c1672418a2c39d6bfa4d5d0e9cf568e2df8ce6431ed2f521a541519e1bcba7d5c4568e326c7f4409e0265beff07caae92b327ab80dab57cd27a40d68478ecbfe09440866d35202151d6945df2856c09603a1125b8b6bd8c0e5ed2b400386fcf156ca978fc191afcf79b050aea8689d8a8e29c59de4598c45e75f09b97d450ecd4420b3dc5a14070a28cb5f8f782986e7abb820448a5d5e5b65e86dd65e5d74d61b4f8c807e136ee0d15d6a7cc773afbad8617d0befbea41581dad358ff0dcb33824e0b9a874db4e2af18637223c5d5599b59242809f55183db98846759ee9225adb93f2d7d2839a200052cef74c3d63c59f5465da2780a9271344a775d740a2defeaea4afa9820067b3ed8d023812f443eeb4556145e2e78402d2d24f9b4cd51b9131ce518359ae11d59be29fbc6dbad2cc4f068b3c60d7dd03665e60a245bdf806815dc81aaa43b37fa7ba6ce17ef26ad9a8fc6fe70f3d2c8512a1491f5d1815df3da6164752247b3c6fae84f9279bf839e9c1deb1e140fe105eec1e9885ea142df8b581db0f0f98bf45f25b665f80508146f5a4f917d31382308858c69413b0688f0c689f4f940c33b458ee51426ae175230087309022e4e874f7d48160c74ad2c96a79ba0ff8aa45da047d9d29c8ef81bacf4538fddcd0520d3ff0971dc5b8e1b15c9c10eb30f31fca506d12561c81ad5a78e172075917540dcb06d908794373ec0f9a2bfa4b895ef8ac8d29c477fc2ecb449da081e5b28c046e21ebe08766f9bcca68a64d40248e349bce9252905b28dca23a952ade6374ffd2bbc01bf3eff943a4026de684bc6342e091fa3260f36fd7c13ec8ac12e7a0e53de4f66edb18ed2b3328a9bdced202660c709fad8b00d4336f9345997c888046516b3f6683e1512d0089d2f27f4353cf5de3d93728ad3bd989903747d179e985da7b38263014a117b43ac51a69a9b7d0331db4d0044dd19e37b3161b5de2eee7c4814e1067c79aee2f19a23d87cde9f35f8e5e6a19a9d72ca7b0028e5e7eaad161e8ce7a0e1aeabf707095b99059865af4b2890598713af5f9f26206a19f89ed3036346fc7c18a65525a1850046efe0bda4241c4b60f6b549afb847d52593684789d69ed0c9cece863b978feacd738b336aa8f418a4d093c4d59bdbe8b09bcc4ba2aa7b4ad7bff1ba484be3f5adeb643f71ee923d183446f1dcb83071d98010ac8c7e29d116f9204776ab0d913d6c52de765f7faa2b9dd428c790b8131d1b4d4b5a7cd74c91c429294e2fce3ab522472e60dc8ea49502057a83cfabadf82b9a2300039973f3f3e99a1a43a8afb5111a3f2bbfa3a9119cd9d879b49f246fecc6929426adce5d37b77b48f154a968a528d6cbdb8ea0891b15ccce10ae32ba82cd601f814488e37a29cbe72bf02170db4ad3cd8384eda8f51e054698868dd229a1eb3bb56acb5f100475e99420602d543d2cb81889f514cf48afc92fa4b34fce3f5d05ba3191f88d8d5ce450b7d2798233af215c722cc8e57ac3dacb745cf0ed478b3ddc844fa7bfe55d86e44eea19ad40d31cc80c4465ac667fd268c1746aeec715ac0176277456f440949c5ce906c80ad97f28c5a99402ae6a227fca68bafeb334fd3568f51ac7697ab32c65bb5c016409347fa5dcfe1f8e4dd2a0dcb472041f72ea619bcda4293d46a16237f6742d59a442a32aa8a9f06ffc86a504d729c364f88e92ac5437e34f0b6215908d44964d8e9b8ffe5edba06eb1afa1891c326d0a3e8ac144ccb69cec1e69fe38a367f678ac9eb3f4cf5ca113c2cf5ca907c00939f1874fe78537ba7161b2983f2129502cd2c788b5afa878f480a74b4afe8e1cd086419a1e066ec2b23949ec082192ef043743ec5ccb2e6b57085c0c359ebd2799513b08fc54da74dc82cc36657af5569d92b4cd350c63561f8584a64e68e2b880443763c4885c0b028c21576907634aab6b39c94dd61d2aa0a4f8dc71827c6e1094af1df98f786288ea02b16997dc46311eddf14d0cc6ad8c3f158e141556294c07b4b0ca7d9cf0dad799b59689a0d74390617d9fb401ea1b19fed2d4117784d9e5226c7440a2ca38e6a7933642437ca2db570e3cd8f20c0c179c1b29aea991e1a80a73db902205c9bde07edc3e3e7a9b6a1b1966d9cebc1770ee14ab30ce021a78b03726e7c2453b2d06780b5e18da4864b02bf9f8211192eb1552bcae0defe2"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "60f43c71fbf5b2a4b7f39b61cf3ba822838e804af81ec2a3604f23b98774404658373f344c2ea67a07fb66d5bff6a549f979231a52c337a39641d8481f99951c67cb081aa4077bbc20e5395cc158d857a4bbcbbcc60ab9d6a3a7b1266a5a4664aa8684f4afaeea04b01e31f12249c174f22563b5770e5a8523d16efa6241f4cbab0b122364792ec297fc69cfc0f52f290370ac405a29007868ecf092d7a5140bf62aafb65bbbdada815e580ee716094350355b6572fcf140f6b0a010bf0356a05b86bf4301d686b00e9a1627b050d9afb1529c5ebd334f435ded85ccb7e60a020b02b8d2260b1f"}]}, 0x11c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xc4) futimesat(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): ff ff f7 d8 64 89 01 48 [ 179.846828][ T8748] RSP: 002b:00007f93423ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.846861][ T8748] RAX: ffffffffffffffda RBX: 00007f9343fa5fa0 RCX: 00007f9343d8d169 [ 179.846875][ T8748] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004 [ 179.846889][ T8748] RBP: 00007f93423ef090 R08: 0000000000000000 R09: 0000000000000000 [ 179.846904][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.846917][ T8748] R13: 0000000000000000 R14: 00007f9343fa5fa0 R15: 00007ffd2e1f7048 [ 179.846938][ T8748] [ 180.071179][ T8746] loop6: detected capacity change from 0 to 2048 [ 180.084235][ T8751] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1814'. [ 180.095008][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1814'. [ 180.119426][ T8746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.203693][ T8763] Cannot find set identified by id 0 to match [ 180.332981][ T4680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.550659][ T8787] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1826'. [ 180.592992][ T8787] netlink: 'syz.6.1826': attribute type 10 has an invalid length. [ 180.601751][ T8787] batman_adv: batadv0: Adding interface: team0 [ 180.608019][ T8787] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.633502][ T8787] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 181.059215][ T8797] set match dimension is over the limit! [ 181.127891][ T8799] loop1: detected capacity change from 0 to 2048 [ 181.142053][ T8799] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.167778][ T8799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.190549][ T8799] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1832: bg 0: block 234: padding at end of block bitmap is not set [ 181.233593][ T8799] EXT4-fs (loop1): Remounting filesystem read-only [ 181.266305][ T8806] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.347216][ T8806] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.374102][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.419303][ T8806] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.495379][ T8806] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.585493][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 181.648878][ T8832] loop1: detected capacity change from 0 to 128 [ 181.664784][ T8832] EXT4-fs: Ignoring removed nobh option [ 181.683658][ T8832] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.698357][ T8832] ext4 filesystem being mounted at /387/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.738601][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.870425][ T8815] cgroup: fork rejected by pids controller in /syz4 [ 181.977038][ T8894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.985467][ T8894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.214103][ T8901] loop1: detected capacity change from 0 to 2048 [ 182.246215][ T8901] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.309996][ T8901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.486582][ T8914] loop1: detected capacity change from 0 to 2048 [ 182.505124][ T8914] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.569174][ T8916] 9pnet_fd: Insufficient options for proto=fd [ 182.642432][ T8806] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.662061][ T8925] loop1: detected capacity change from 0 to 2048 [ 182.670212][ T8806] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.683152][ T8925] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.694648][ T8806] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.723164][ T8806] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.853973][ T8925] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1856: bg 0: block 234: padding at end of block bitmap is not set [ 182.870441][ T8925] EXT4-fs (loop1): Remounting filesystem read-only [ 182.893049][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.168916][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.433297][ T8952] loop5: detected capacity change from 0 to 1024 [ 183.442316][ T8952] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 183.454036][ T8952] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 183.468384][ T8952] JBD2: no valid journal superblock found [ 183.474238][ T8952] EXT4-fs (loop5): Could not load journal inode [ 183.493165][ T8954] loop1: detected capacity change from 0 to 2048 [ 183.506882][ T8954] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.526774][ T8958] loop5: detected capacity change from 0 to 512 [ 183.569292][ T8958] EXT4-fs (loop5): 1 orphan inode deleted [ 183.582350][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 183.582367][ T29] audit: type=1326 audit(1743647613.413:20516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7016bfd169 code=0x7ffc0000 [ 183.587478][ T8963] ip6gre1: entered allmulticast mode [ 183.588689][ T29] audit: type=1326 audit(1743647613.413:20517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7016bfd169 code=0x7ffc0000 [ 183.642312][ T410] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 183.652217][ T410] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 183.698043][ T8958] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.725922][ T8968] rdma_op ffff88810cca9d80 conn xmit_rdma 0000000000000000 [ 183.779151][ T29] audit: type=1326 audit(1743647613.413:20518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7016bfd169 code=0x7ffc0000 [ 183.783197][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1871'. [ 183.802749][ T29] audit: type=1326 audit(1743647613.413:20519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7016bfd169 code=0x7ffc0000 [ 183.802790][ T29] audit: type=1326 audit(1743647613.413:20520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7016bfd169 code=0x7ffc0000 [ 183.802823][ T29] audit: type=1326 audit(1743647613.413:20521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7016bfd169 code=0x7ffc0000 [ 183.802917][ T29] audit: type=1326 audit(1743647613.413:20522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7016bfd169 code=0x7ffc0000 [ 183.802977][ T29] audit: type=1326 audit(1743647613.413:20523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7016bfd169 code=0x7ffc0000 [ 183.803007][ T29] audit: type=1326 audit(1743647613.413:20524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7016bfd169 code=0x7ffc0000 [ 183.957609][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1871'. [ 183.969360][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1871'. [ 184.022012][ T8979] rdma_op ffff8881170d4180 conn xmit_rdma 0000000000000000 [ 184.066321][ T8985] loop4: detected capacity change from 0 to 1024 [ 184.073074][ T8987] loop5: detected capacity change from 0 to 1024 [ 184.073463][ T8985] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.086182][ T8987] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.090828][ T8985] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 184.102464][ T8987] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 184.256785][ T8987] JBD2: no valid journal superblock found [ 184.262771][ T8987] EXT4-fs (loop5): Could not load journal inode [ 184.275571][ T8985] JBD2: no valid journal superblock found [ 184.281425][ T8985] EXT4-fs (loop4): Could not load journal inode [ 184.561136][ T8994] loop4: detected capacity change from 0 to 512 [ 184.581857][ T8994] EXT4-fs (loop4): 1 orphan inode deleted [ 184.595756][ T8994] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.596221][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 184.748135][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1885'. [ 184.757196][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1885'. [ 184.767261][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1885'. [ 184.849288][ T9011] rdma_op ffff88810ccab980 conn xmit_rdma 0000000000000000 [ 184.918199][ T9015] loop1: detected capacity change from 0 to 2048 [ 184.925477][ T9015] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.992464][ T9023] loop5: detected capacity change from 0 to 512 [ 185.033754][ T9029] netlink: 'syz.4.1895': attribute type 1 has an invalid length. [ 185.053647][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1897'. [ 185.062833][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1897'. [ 185.073237][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1897'. [ 185.074071][ T9029] FAULT_INJECTION: forcing a failure. [ 185.074071][ T9029] name failslab, interval 1, probability 0, space 0, times 0 [ 185.095215][ T9029] CPU: 0 UID: 0 PID: 9029 Comm: syz.4.1895 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 185.095249][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.095264][ T9029] Call Trace: [ 185.095272][ T9029] [ 185.095281][ T9029] dump_stack_lvl+0xf6/0x150 [ 185.095326][ T9029] dump_stack+0x15/0x1a [ 185.095345][ T9029] should_fail_ex+0x261/0x270 [ 185.095378][ T9029] should_failslab+0x8f/0xb0 [ 185.095415][ T9029] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 185.095455][ T9029] ? __alloc_skb+0x10d/0x320 [ 185.095480][ T9029] __alloc_skb+0x10d/0x320 [ 185.095503][ T9029] netlink_alloc_large_skb+0xad/0xe0 [ 185.095588][ T9029] netlink_sendmsg+0x3da/0x720 [ 185.095618][ T9029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.095637][ T9029] __sock_sendmsg+0x140/0x180 [ 185.095699][ T9029] ____sys_sendmsg+0x350/0x4e0 [ 185.095725][ T9029] __sys_sendmsg+0x1a0/0x240 [ 185.095762][ T9029] __x64_sys_sendmsg+0x46/0x50 [ 185.095831][ T9029] x64_sys_call+0x26f3/0x2e10 [ 185.095858][ T9029] do_syscall_64+0xc9/0x1c0 [ 185.095888][ T9029] ? clear_bhb_loop+0x25/0x80 [ 185.095914][ T9029] ? clear_bhb_loop+0x25/0x80 [ 185.096016][ T9029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.096074][ T9029] RIP: 0033:0x7f0f4780d169 [ 185.096097][ T9029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.096119][ T9029] RSP: 002b:00007f0f45e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.096140][ T9029] RAX: ffffffffffffffda RBX: 00007f0f47a25fa0 RCX: 00007f0f4780d169 [ 185.096160][ T9029] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000006 [ 185.096174][ T9029] RBP: 00007f0f45e77090 R08: 0000000000000000 R09: 0000000000000000 [ 185.096229][ T9029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.096243][ T9029] R13: 0000000000000000 R14: 00007f0f47a25fa0 R15: 00007ffc96984c68 [ 185.096263][ T9029] [ 185.098098][ T9023] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 185.139968][ T9037] loop4: detected capacity change from 0 to 2048 [ 185.164937][ T9035] loop1: detected capacity change from 0 to 2048 [ 185.170235][ T9037] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.187379][ T9035] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.192477][ T9039] rdma_op ffff888107b77180 conn xmit_rdma 0000000000000000 [ 185.202238][ T9023] EXT4-fs (loop5): mount failed [ 185.336802][ T9035] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1896: bg 0: block 234: padding at end of block bitmap is not set [ 185.367654][ T9035] EXT4-fs (loop1): Remounting filesystem read-only [ 185.379963][ T9037] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1898: bg 0: block 234: padding at end of block bitmap is not set [ 185.398159][ T9037] EXT4-fs (loop4): Remounting filesystem read-only [ 185.931244][ T9059] 9pnet_fd: Insufficient options for proto=fd [ 185.983193][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1909'. [ 186.083630][ T9075] loop1: detected capacity change from 0 to 2048 [ 186.112675][ T9075] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.122512][ T9079] 9pnet_fd: Insufficient options for proto=fd [ 186.210913][ T9075] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1913: bg 0: block 234: padding at end of block bitmap is not set [ 186.238254][ T9075] EXT4-fs (loop1): Remounting filesystem read-only [ 186.454096][ T9112] loop6: detected capacity change from 0 to 2048 [ 186.461408][ T9112] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.613790][ T9112] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1928: bg 0: block 234: padding at end of block bitmap is not set [ 186.682208][ T9112] EXT4-fs (loop6): Remounting filesystem read-only [ 186.780446][ T9121] loop4: detected capacity change from 0 to 2048 [ 186.833599][ T9121] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.901201][ T9121] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1930: bg 0: block 234: padding at end of block bitmap is not set [ 186.930288][ T9121] EXT4-fs (loop4): Remounting filesystem read-only [ 186.938218][ T9124] veth0_macvtap: left promiscuous mode [ 186.947803][ T9124] macvtap0: refused to change device tx_queue_len [ 187.122470][ T9143] loop4: detected capacity change from 0 to 2048 [ 187.132687][ T9145] ip6gre3: entered allmulticast mode [ 187.146225][ T9143] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.294578][ T9161] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.337584][ T9172] loop6: detected capacity change from 0 to 512 [ 187.377580][ T9172] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.395096][ T9172] EXT4-fs (loop6): mount failed [ 187.409747][ T9161] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.443913][ T9180] loop6: detected capacity change from 0 to 512 [ 187.458613][ T9180] EXT4-fs (loop6): 1 orphan inode deleted [ 187.465088][ T9180] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.477604][ T51] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 187.493637][ T9161] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.507506][ T9186] loop1: detected capacity change from 0 to 2048 [ 187.514405][ T9186] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.557657][ T9161] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.623994][ T9198] loop4: detected capacity change from 0 to 512 [ 187.630479][ T9196] loop6: detected capacity change from 0 to 2048 [ 187.637495][ T9196] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.650301][ T9198] EXT4-fs (loop4): 1 orphan inode deleted [ 187.656885][ T9203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.665509][ T9203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.667848][ T9198] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.684606][ T3677] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 187.751857][ T9161] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.761364][ T9205] loop6: detected capacity change from 0 to 2048 [ 187.768471][ T9205] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.779990][ T9161] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.792807][ T9161] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.806241][ T9161] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.864544][ T9210] loop4: detected capacity change from 0 to 512 [ 187.879586][ T9210] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.895386][ T9210] EXT4-fs (loop4): mount failed [ 187.941660][ T9215] loop5: detected capacity change from 0 to 2048 [ 187.949113][ T9215] EXT4-fs: Ignoring removed i_version option [ 188.035585][ T9221] loop6: detected capacity change from 0 to 2048 [ 188.048003][ T9221] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.118025][ T9226] rdma_op ffff88812e39e980 conn xmit_rdma 0000000000000000 [ 188.268988][ T9239] loop6: detected capacity change from 0 to 2048 [ 188.277130][ T9239] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.290388][ T9241] ip6gre1: entered allmulticast mode [ 188.330339][ T9245] loop6: detected capacity change from 0 to 512 [ 188.359142][ T9245] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 188.374276][ T9245] EXT4-fs (loop6): mount failed [ 188.424563][ T9255] rdma_op ffff88812e39e980 conn xmit_rdma 0000000000000000 [ 188.690819][ T9280] rdma_op ffff88811977f580 conn xmit_rdma 0000000000000000 [ 188.800056][ T9284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.808589][ T9284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.072189][ T9292] loop4: detected capacity change from 0 to 512 [ 189.110222][ T9292] EXT4-fs (loop4): 1 orphan inode deleted [ 189.127721][ T9292] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.318904][ T9302] 9pnet_fd: Insufficient options for proto=fd [ 189.438551][ T9306] __nla_validate_parse: 13 callbacks suppressed [ 189.438573][ T9306] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1997'. [ 189.478406][ T9306] 0ªX¹¦À: renamed from caif0 [ 189.487334][ T9306] 0ªX¹¦À: entered allmulticast mode [ 189.492591][ T9306] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 189.509715][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1998'. [ 189.530438][ T9309] rdma_op ffff88810cca8980 conn xmit_rdma 0000000000000000 [ 189.595615][ T9312] loop5: detected capacity change from 0 to 2048 [ 189.610726][ T9312] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.628679][ T9315] loop6: detected capacity change from 0 to 2048 [ 189.651524][ T9312] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2000: bg 0: block 234: padding at end of block bitmap is not set [ 189.664533][ T9315] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.676639][ T9312] EXT4-fs (loop5): Remounting filesystem read-only [ 189.771634][ T9336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.780124][ T9336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.820541][ T9340] loop5: detected capacity change from 0 to 512 [ 189.839758][ T9340] EXT4-fs (loop5): 1 orphan inode deleted [ 189.846499][ T9340] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.856012][ T37] __quota_error: 55 callbacks suppressed [ 189.856030][ T37] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 189.872449][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 189.944864][ T9344] ip6gre2: entered allmulticast mode [ 190.004675][ T9349] loop4: detected capacity change from 0 to 512 [ 190.039374][ T9349] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 190.050285][ T9349] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.065589][ T9349] EXT4-fs (loop4): mount failed [ 190.176928][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2020'. [ 190.186100][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2020'. [ 190.196788][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2020'. [ 190.322376][ T9373] loop5: detected capacity change from 0 to 512 [ 190.348359][ T9373] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 190.358698][ T9373] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.374824][ T9373] EXT4-fs (loop5): mount failed [ 190.533009][ T9380] ip6gre2: entered allmulticast mode [ 190.601799][ T9382] pim6reg: entered allmulticast mode [ 190.611287][ T9382] pim6reg: left allmulticast mode [ 190.681166][ T9388] loop6: detected capacity change from 0 to 2048 [ 190.690775][ T9388] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.694873][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'. [ 190.707031][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'. [ 190.716954][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'. [ 190.748519][ T29] audit: type=1400 audit(1743647620.573:20573): avc: denied { setopt } for pid=9396 comm="syz.1.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.769075][ T29] audit: type=1400 audit(1743647620.573:20574): avc: denied { write } for pid=9396 comm="syz.1.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.849856][ T9407] rdma_op ffff88810cca8180 conn xmit_rdma 0000000000000000 [ 190.896976][ T9415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.905489][ T9415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.952816][ T9419] 9pnet_fd: Insufficient options for proto=fd [ 191.075333][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'. [ 191.084613][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'. [ 191.136743][ T9426] loop4: detected capacity change from 0 to 2048 [ 191.151594][ T9426] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.212416][ T29] audit: type=1400 audit(1743647621.043:20575): avc: denied { write } for pid=9438 comm="syz.4.2052" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 191.214841][ T9439] rdma_op ffff88811977c980 conn xmit_rdma 0000000000000000 [ 191.270330][ T9442] 1ªX¹¦À: renamed from 60ªX¹¦À [ 191.286275][ T9444] FAULT_INJECTION: forcing a failure. [ 191.286275][ T9444] name failslab, interval 1, probability 0, space 0, times 0 [ 191.299201][ T9444] CPU: 0 UID: 0 PID: 9444 Comm: syz.5.2054 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 191.299286][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.299301][ T9444] Call Trace: [ 191.299309][ T9444] [ 191.299319][ T9444] dump_stack_lvl+0xf6/0x150 [ 191.299348][ T9444] dump_stack+0x15/0x1a [ 191.299369][ T9444] should_fail_ex+0x261/0x270 [ 191.299405][ T9444] should_failslab+0x8f/0xb0 [ 191.299458][ T9444] __kmalloc_cache_noprof+0x55/0x320 [ 191.299511][ T9444] ? loop_add+0x68/0x5a0 [ 191.299543][ T9444] loop_add+0x68/0x5a0 [ 191.299570][ T9444] ? ioctl_has_perm+0x292/0x2f0 [ 191.299653][ T9444] loop_control_ioctl+0xcb/0x450 [ 191.299691][ T9444] ? __pfx_loop_control_ioctl+0x10/0x10 [ 191.299723][ T9444] __se_sys_ioctl+0xc9/0x140 [ 191.299832][ T9444] __x64_sys_ioctl+0x43/0x50 [ 191.299864][ T9444] x64_sys_call+0x168d/0x2e10 [ 191.299889][ T9444] do_syscall_64+0xc9/0x1c0 [ 191.299915][ T9444] ? clear_bhb_loop+0x25/0x80 [ 191.299948][ T9444] ? clear_bhb_loop+0x25/0x80 [ 191.299976][ T9444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.300002][ T9444] RIP: 0033:0x7fa802bdd169 [ 191.300091][ T9444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.300113][ T9444] RSP: 002b:00007fa801247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.300136][ T9444] RAX: ffffffffffffffda RBX: 00007fa802df5fa0 RCX: 00007fa802bdd169 [ 191.300152][ T9444] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 191.300166][ T9444] RBP: 00007fa801247090 R08: 0000000000000000 R09: 0000000000000000 [ 191.300180][ T9444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.300192][ T9444] R13: 0000000000000000 R14: 00007fa802df5fa0 R15: 00007ffe649d51b8 [ 191.300211][ T9444] [ 191.515871][ T9442] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 191.545845][ T9449] Cannot find set identified by id 0 to match [ 191.559059][ T9451] 9pnet_fd: Insufficient options for proto=fd [ 191.741882][ T9463] loop1: detected capacity change from 0 to 2048 [ 191.754086][ T9463] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.779849][ T9472] netlink: 'syz.0.2065': attribute type 13 has an invalid length. [ 191.844075][ T9472] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.851374][ T9472] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.925294][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.942736][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.011690][ T9472] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.020353][ T9472] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.029570][ T9472] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.038030][ T9472] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.167866][ T9478] ip6gre2: entered allmulticast mode [ 192.249030][ T9486] 0ªX¹¦À: renamed from caif0 [ 192.256854][ T9486] 0ªX¹¦À: entered allmulticast mode [ 192.262099][ T9486] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 192.296473][ T29] audit: type=1400 audit(1743647622.133:20576): avc: denied { ioctl } for pid=9487 comm="syz.1.2071" path="socket:[32837]" dev="sockfs" ino=32837 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.375349][ T29] audit: type=1400 audit(1743647622.203:20577): avc: denied { bind } for pid=9487 comm="syz.1.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.411256][ T9496] rdma_op ffff88810ccab180 conn xmit_rdma 0000000000000000 [ 192.507963][ T9500] loop4: detected capacity change from 0 to 2048 [ 192.530282][ T9500] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.633901][ T9508] loop4: detected capacity change from 0 to 2048 [ 192.641783][ T9508] EXT4-fs: Ignoring removed i_version option [ 192.652963][ T9512] ip6gre3: entered allmulticast mode [ 192.809823][ T3303] EXT4-fs unmount: 58 callbacks suppressed [ 192.809840][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.868645][ T9524] rdma_op ffff88812e39ed80 conn xmit_rdma 0000000000000000 [ 192.919196][ T9528] loop4: detected capacity change from 0 to 512 [ 192.939421][ T9528] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 192.950322][ T9528] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 192.966660][ T9528] EXT4-fs (loop4): mount failed [ 193.061776][ T29] audit: type=1326 audit(1743647622.893:20578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.4.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4780d169 code=0x7ffc0000 [ 193.174090][ T9539] loop1: detected capacity change from 0 to 2048 [ 193.178020][ T9541] ip6gre1: entered allmulticast mode [ 193.181223][ T9539] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.202441][ T9539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.234462][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.366860][ T9555] loop1: detected capacity change from 0 to 512 [ 193.391478][ T9555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.405697][ T9555] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.515992][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.548633][ T9572] loop1: detected capacity change from 0 to 512 [ 193.568230][ T9572] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.603237][ T9572] EXT4-fs (loop1): mount failed [ 193.766531][ T9596] Cannot find set identified by id 0 to match [ 193.826980][ T9604] loop5: detected capacity change from 0 to 512 [ 193.848028][ T9604] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.863406][ T9604] EXT4-fs (loop5): mount failed [ 193.889158][ T9610] Cannot find set identified by id 0 to match [ 193.930622][ T9614] loop5: detected capacity change from 0 to 512 [ 193.959186][ T9614] EXT4-fs (loop5): 1 orphan inode deleted [ 193.965622][ T9614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.978722][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 193.991036][ T9614] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.024717][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.091283][ T9626] Cannot find set identified by id 0 to match [ 194.197730][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.206203][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.510526][ T9635] loop4: detected capacity change from 0 to 512 [ 194.549865][ T9635] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 194.564956][ T9635] EXT4-fs (loop4): mount failed [ 194.659934][ T9642] loop1: detected capacity change from 0 to 1024 [ 194.669731][ T9642] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 194.680788][ T9642] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 194.695227][ T9642] JBD2: no valid journal superblock found [ 194.701135][ T9642] EXT4-fs (loop1): Could not load journal inode [ 194.707954][ T9639] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 194.708043][ T9639] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 194.775183][ T9644] loop6: detected capacity change from 0 to 512 [ 194.830911][ T9644] EXT4-fs (loop6): 1 orphan inode deleted [ 194.838641][ T9644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.851838][ T9644] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.862905][ T37] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 195.012374][ T4680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.043924][ T9661] Cannot find set identified by id 0 to match [ 195.291837][ T9665] 9pnet_fd: Insufficient options for proto=fd [ 195.444699][ T9668] loop6: detected capacity change from 0 to 512 [ 195.454362][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 195.454375][ T29] audit: type=1400 audit(1743647625.273:20639): avc: denied { getopt } for pid=9662 comm="syz.1.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.454320][ T9663] bridge0: entered promiscuous mode [ 195.455400][ T9663] bridge0: port 1(macvlan2) entered blocking state [ 195.493061][ T9663] bridge0: port 1(macvlan2) entered disabled state [ 195.503505][ T29] audit: type=1400 audit(1743647625.333:20640): avc: denied { ioctl } for pid=9662 comm="syz.1.2136" path="socket:[33976]" dev="sockfs" ino=33976 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.507567][ T9663] macvlan2: entered allmulticast mode [ 195.534430][ T9663] bridge0: entered allmulticast mode [ 195.544303][ T9663] macvlan2: left allmulticast mode [ 195.550671][ T9663] bridge0: left allmulticast mode [ 195.556728][ T9663] bridge0: left promiscuous mode [ 195.562705][ T9668] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 195.582137][ T9668] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 195.599095][ T9668] EXT4-fs (loop6): mount failed [ 195.650811][ T9672] loop6: detected capacity change from 0 to 2048 [ 195.657616][ T9672] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.679928][ T9672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.697836][ T9676] loop4: detected capacity change from 0 to 2048 [ 195.704472][ T9676] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.721916][ T9676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.747021][ T4680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.763371][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.823471][ T9687] loop1: detected capacity change from 0 to 2048 [ 195.830762][ T9687] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.844675][ T9690] loop4: detected capacity change from 0 to 512 [ 195.870771][ T9690] EXT4-fs (loop4): 1 orphan inode deleted [ 195.878158][ T9690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.890987][ T51] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 195.891232][ T9690] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.900931][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 195.903831][ T9687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.962143][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.974488][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.000353][ T9699] loop1: detected capacity change from 0 to 2048 [ 196.005325][ T9701] loop4: detected capacity change from 0 to 2048 [ 196.007848][ T9699] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.014130][ T9701] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.037608][ T9701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.053094][ T9699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.069637][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.077412][ T9699] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2147: bg 0: block 234: padding at end of block bitmap is not set [ 196.093907][ T9699] EXT4-fs (loop1): Remounting filesystem read-only [ 196.128250][ T9709] __nla_validate_parse: 10 callbacks suppressed [ 196.128264][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 196.145027][ T9709] rdma_op ffff888112b05580 conn xmit_rdma 0000000000000000 [ 196.168029][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.231665][ T9717] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2154'. [ 196.240750][ T9717] 0ªX¹¦À: renamed from 61ªX¹¦À [ 196.250484][ T9717] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 196.304123][ T9723] rdma_op ffff88812cbcb580 conn xmit_rdma 0000000000000000 [ 196.349278][ T9727] xt_CT: No such helper "snmp" [ 196.358482][ T9727] loop4: detected capacity change from 0 to 512 [ 196.365073][ T9727] EXT4-fs: Ignoring removed nobh option [ 196.380406][ T9727] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.2158: corrupted inode contents [ 196.392764][ T9727] EXT4-fs (loop4): Remounting filesystem read-only [ 196.400048][ T9727] EXT4-fs (loop4): 1 truncate cleaned up [ 196.406299][ T9727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.420477][ T9727] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.431151][ T51] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 196.441779][ T51] Quota error (device loop4): write_blk: dquota write failed [ 196.449352][ T51] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 196.459423][ T51] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 196.469975][ T51] Quota error (device loop4): write_blk: dquota write failed [ 196.477411][ T51] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 196.494410][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.503003][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.516381][ T51] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 196.526560][ T51] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 196.535526][ T51] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 196.782454][ T9740] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2161'. [ 196.803938][ T9740] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2161'. [ 196.814949][ T9740] netlink: 'syz.6.2161': attribute type 10 has an invalid length. [ 197.132374][ T9756] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2169'. [ 197.143373][ T9756] 1ªX¹¦À: renamed from 60ªX¹¦À [ 197.168726][ T9756] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 197.224327][ T9762] loop5: detected capacity change from 0 to 2048 [ 197.247871][ T9762] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.257627][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.290058][ T9762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.321054][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.463543][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2175'. [ 197.617323][ T9786] loop5: detected capacity change from 0 to 2048 [ 197.624038][ T9786] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.650217][ T9786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.665986][ T9786] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2179: bg 0: block 234: padding at end of block bitmap is not set [ 197.696042][ T9786] EXT4-fs (loop5): Remounting filesystem read-only [ 197.806989][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.006793][ T9795] loop5: detected capacity change from 0 to 512 [ 198.018332][ T9795] EXT4-fs (loop5): 1 orphan inode deleted [ 198.024596][ T9795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.037345][ T3508] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 198.049741][ T9795] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.094122][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.165656][ T9803] loop5: detected capacity change from 0 to 2048 [ 198.184546][ T9803] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.219875][ T9803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.245162][ T9809] ip6t_srh: unknown srh invflags 92A7 [ 198.278648][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.375858][ T9821] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2188'. [ 198.405291][ T9821] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2188'. [ 198.463260][ T9821] netlink: 'syz.5.2188': attribute type 10 has an invalid length. [ 199.180053][ T9854] loop5: detected capacity change from 0 to 512 [ 199.193276][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 199.204460][ T9856] rdma_op ffff888112b0cd80 conn xmit_rdma 0000000000000000 [ 199.212187][ T9854] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 199.229303][ T9854] EXT4-fs (loop5): mount failed [ 199.288483][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2207'. [ 199.354255][ T9872] loop5: detected capacity change from 0 to 512 [ 199.384615][ T9872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.408964][ T9872] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.431811][ T9877] loop1: detected capacity change from 0 to 2048 [ 199.444904][ T9877] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.455419][ T9879] loop6: detected capacity change from 0 to 512 [ 199.508277][ T9877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.523203][ T9879] EXT4-fs (loop6): orphan cleanup on readonly fs [ 199.532544][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.545391][ T9879] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2212: bg 0: block 248: padding at end of block bitmap is not set [ 199.546072][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.562552][ T9879] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.2212: Failed to acquire dquot type 1 [ 199.588433][ T9879] EXT4-fs (loop6): 1 truncate cleaned up [ 199.594792][ T9879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.642650][ T9879] EXT4-fs warning (device loop6): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 199.692606][ T9890] rdma_op ffff88812cbc8580 conn xmit_rdma 0000000000000000 [ 199.709418][ T4680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.761108][ T9899] No such timeout policy "syz1" [ 199.782220][ T9897] rdma_op ffff88812cbc8580 conn xmit_rdma 0000000000000000 [ 199.787635][ T9904] rdma_op ffff888112b0cd80 conn xmit_rdma 0000000000000000 [ 199.804861][ T9909] FAULT_INJECTION: forcing a failure. [ 199.804861][ T9909] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 199.818274][ T9909] CPU: 0 UID: 0 PID: 9909 Comm: syz.5.2224 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 199.818308][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.818384][ T9909] Call Trace: [ 199.818392][ T9909] [ 199.818402][ T9909] dump_stack_lvl+0xf6/0x150 [ 199.818471][ T9909] dump_stack+0x15/0x1a [ 199.818491][ T9909] should_fail_ex+0x261/0x270 [ 199.818524][ T9909] should_fail_alloc_page+0xfd/0x110 [ 199.818626][ T9909] __alloc_frozen_pages_noprof+0x11d/0x360 [ 199.818661][ T9909] alloc_pages_mpol+0xb6/0x260 [ 199.818692][ T9909] alloc_pages_noprof+0xe8/0x130 [ 199.818723][ T9909] __pmd_alloc+0x4d/0x440 [ 199.818820][ T9909] handle_mm_fault+0x188d/0x2e80 [ 199.818854][ T9909] ? mas_walk+0x204/0x320 [ 199.818878][ T9909] ? __rcu_read_unlock+0x4e/0x70 [ 199.818915][ T9909] exc_page_fault+0x3b9/0x6a0 [ 199.818939][ T9909] ? do_syscall_64+0xd6/0x1c0 [ 199.819050][ T9909] asm_exc_page_fault+0x26/0x30 [ 199.819073][ T9909] RIP: 0033:0x7fa802a9fbe3 [ 199.819089][ T9909] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 199.819107][ T9909] RSP: 002b:00007fa8012464a0 EFLAGS: 00010206 [ 199.819124][ T9909] RAX: 0000000000000000 RBX: 00007fa801246540 RCX: 00007fa7f8e27000 [ 199.819139][ T9909] RDX: 00007fa8012466e0 RSI: 0000000000000017 RDI: 00007fa8012465e0 [ 199.819173][ T9909] RBP: 000000000000013b R08: 0000000000000008 R09: 00000000000000b3 [ 199.819185][ T9909] R10: 00000000000000c0 R11: 00007fa801246540 R12: 00007fa801246540 [ 199.819196][ T9909] R13: 00007fa802c793e0 R14: 00000000000000eb R15: 00007fa8012465e0 [ 199.819215][ T9909] [ 199.819226][ T9909] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 199.882356][ T9914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9914 comm=syz.1.2226 [ 199.891577][ T9909] loop5: detected capacity change from 0 to 128 [ 200.021280][ T9922] rdma_op ffff88812cbcbd80 conn xmit_rdma 0000000000000000 [ 200.033850][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.042705][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.059466][ T9927] loop4: detected capacity change from 0 to 512 [ 200.087507][ T9931] loop1: detected capacity change from 0 to 512 [ 200.094973][ T9931] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 200.119934][ T9927] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 200.127105][ T9931] EXT4-fs (loop1): 1 truncate cleaned up [ 200.138295][ T9927] EXT4-fs (loop4): mount failed [ 200.149970][ T9931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.190195][ T9938] FAULT_INJECTION: forcing a failure. [ 200.190195][ T9938] name failslab, interval 1, probability 0, space 0, times 0 [ 200.203080][ T9938] CPU: 0 UID: 0 PID: 9938 Comm: syz.4.2235 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 200.203191][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.203206][ T9938] Call Trace: [ 200.203214][ T9938] [ 200.203223][ T9938] dump_stack_lvl+0xf6/0x150 [ 200.203254][ T9938] dump_stack+0x15/0x1a [ 200.203275][ T9938] should_fail_ex+0x261/0x270 [ 200.203307][ T9938] should_failslab+0x8f/0xb0 [ 200.203413][ T9938] __kvmalloc_node_noprof+0x12c/0x520 [ 200.203442][ T9938] ? alloc_netdev_mqs+0x5c1/0xac0 [ 200.203480][ T9938] ? vxlan_setup+0x213/0x240 [ 200.203506][ T9938] ? __pfx_vxlan_setup+0x10/0x10 [ 200.203531][ T9938] alloc_netdev_mqs+0x5c1/0xac0 [ 200.203567][ T9938] rtnl_create_link+0x232/0x720 [ 200.203617][ T9938] rtnl_newlink_create+0x14f/0x640 [ 200.203653][ T9938] ? security_capable+0x81/0x90 [ 200.203734][ T9938] ? netlink_ns_capable+0x88/0xa0 [ 200.203785][ T9938] rtnl_newlink+0xf38/0x12d0 [ 200.203843][ T9938] ? __rcu_read_unlock+0x34/0x70 [ 200.203878][ T9938] ? bpf_trace_run3+0x134/0x1d0 [ 200.203916][ T9938] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 200.203959][ T9938] ? mod_objcg_state+0x3f9/0x530 [ 200.203987][ T9938] ? __rcu_read_unlock+0x4e/0x70 [ 200.204016][ T9938] ? avc_has_perm_noaudit+0x1cc/0x210 [ 200.204047][ T9938] ? selinux_capable+0x1f9/0x260 [ 200.204131][ T9938] ? security_capable+0x81/0x90 [ 200.204163][ T9938] ? ns_capable+0x7d/0xb0 [ 200.204185][ T9938] ? __pfx_rtnl_newlink+0x10/0x10 [ 200.204240][ T9938] rtnetlink_rcv_msg+0x65a/0x740 [ 200.204273][ T9938] ? should_fail_ex+0xd7/0x270 [ 200.204325][ T9938] ? ref_tracker_free+0x3b8/0x420 [ 200.204359][ T9938] netlink_rcv_skb+0x12f/0x230 [ 200.204384][ T9938] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.204451][ T9938] rtnetlink_rcv+0x1c/0x30 [ 200.204485][ T9938] netlink_unicast+0x605/0x6c0 [ 200.204515][ T9938] netlink_sendmsg+0x609/0x720 [ 200.204555][ T9938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.204581][ T9938] __sock_sendmsg+0x140/0x180 [ 200.204802][ T9938] ____sys_sendmsg+0x350/0x4e0 [ 200.204831][ T9938] __sys_sendmsg+0x1a0/0x240 [ 200.204906][ T9938] __x64_sys_sendmsg+0x46/0x50 [ 200.204938][ T9938] x64_sys_call+0x26f3/0x2e10 [ 200.204965][ T9938] do_syscall_64+0xc9/0x1c0 [ 200.204993][ T9938] ? clear_bhb_loop+0x25/0x80 [ 200.205074][ T9938] ? clear_bhb_loop+0x25/0x80 [ 200.205101][ T9938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.205128][ T9938] RIP: 0033:0x7f0f4780d169 [ 200.205146][ T9938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.205168][ T9938] RSP: 002b:00007f0f45e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.205231][ T9938] RAX: ffffffffffffffda RBX: 00007f0f47a25fa0 RCX: 00007f0f4780d169 [ 200.205245][ T9938] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 200.205259][ T9938] RBP: 00007f0f45e77090 R08: 0000000000000000 R09: 0000000000000000 [ 200.205273][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.205355][ T9938] R13: 0000000000000000 R14: 00007f0f47a25fa0 R15: 00007ffc96984c68 [ 200.205378][ T9938] [ 200.562882][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 200.562903][ T29] audit: type=1400 audit(1743647630.363:20738): avc: denied { append } for pid=9930 comm="syz.1.2231" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 200.620300][ T9953] rdma_op ffff88812cbc8980 conn xmit_rdma 0000000000000000 [ 200.749195][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.762636][ T9965] rdma_op ffff888112b0f180 conn xmit_rdma 0000000000000000 [ 200.884517][ T9975] netlink: 'syz.5.2246': attribute type 10 has an invalid length. [ 200.913830][ T9973] bridge_slave_1: left allmulticast mode [ 200.920258][ T9973] bridge_slave_1: left promiscuous mode [ 200.926006][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.942218][ T9973] bridge_slave_0: left allmulticast mode [ 200.947965][ T9973] bridge_slave_0: left promiscuous mode [ 200.953865][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.986652][ T9980] loop4: detected capacity change from 0 to 2048 [ 201.006717][ T9980] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.026191][ T9984] rdma_op ffff888112b0fd80 conn xmit_rdma 0000000000000000 [ 201.054589][ T9980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.102650][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.126108][ T9988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.134781][ T9988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.716531][ T9998] __nla_validate_parse: 9 callbacks suppressed [ 201.716546][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'. [ 201.734618][ T9998] rdma_op ffff888112b0f980 conn xmit_rdma 0000000000000000 [ 202.048120][ T29] audit: type=1400 audit(1743647631.883:20739): avc: denied { audit_write } for pid=9996 comm="syz.1.2257" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 202.123438][ T29] audit: type=1107 audit(1743647631.923:20740): pid=9996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='l' [ 202.234987][T10013] ip6gre3: entered allmulticast mode [ 202.491476][T10024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2265'. [ 202.504440][T10024] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2265'. [ 202.519284][ T29] audit: type=1326 audit(1743647632.353:20741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9343d8d169 code=0x7ffc0000 [ 202.543127][ T29] audit: type=1326 audit(1743647632.353:20742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9343d8d169 code=0x7ffc0000 [ 202.566856][ T29] audit: type=1326 audit(1743647632.353:20743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9343d8d169 code=0x7ffc0000 [ 202.590479][ T29] audit: type=1326 audit(1743647632.353:20744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9343d8d169 code=0x7ffc0000 [ 202.614256][ T29] audit: type=1326 audit(1743647632.353:20745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9343d8d169 code=0x7ffc0000 [ 202.648667][T10024] netlink: 'syz.4.2265': attribute type 10 has an invalid length. [ 202.689786][T10035] 9pnet_fd: Insufficient options for proto=fd [ 202.700768][T10031] loop5: detected capacity change from 0 to 2048 [ 202.720236][T10031] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.743463][ T29] audit: type=1326 audit(1743647632.413:20746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9343d8b9d7 code=0x7ffc0000 [ 202.767188][ T29] audit: type=1326 audit(1743647632.413:20747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9343d8d169 code=0x7ffc0000 [ 202.804387][T10031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.915056][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.018489][T10051] loop5: detected capacity change from 0 to 1024 [ 203.025680][T10051] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 203.036666][T10051] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 203.069624][T10051] JBD2: no valid journal superblock found [ 203.075385][T10051] EXT4-fs (loop5): Could not load journal inode [ 203.439094][T10061] loop6: detected capacity change from 0 to 512 [ 203.484720][T10067] loop5: detected capacity change from 0 to 1024 [ 203.496797][T10067] EXT4-fs: Ignoring removed orlov option [ 203.503932][T10067] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 203.542742][T10067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.556352][T10071] 9pnet_fd: Insufficient options for proto=fd [ 203.890332][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.971798][T10087] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2286'. [ 203.991977][T10087] 0ªX¹¦À: renamed from 61ªX¹¦À [ 204.007119][T10091] loop5: detected capacity change from 0 to 2048 [ 204.014921][T10087] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 204.015130][T10091] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.047239][T10091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.062627][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.067475][T10091] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2285: bg 0: block 234: padding at end of block bitmap is not set [ 204.072005][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.087969][T10091] EXT4-fs (loop5): Remounting filesystem read-only [ 204.190122][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2288'. [ 204.212607][T10097] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2288'. [ 204.243642][T10097] netlink: 'syz.0.2288': attribute type 10 has an invalid length. [ 204.243717][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.281905][T10099] ip6gre4: entered allmulticast mode [ 204.417490][T10102] loop6: detected capacity change from 0 to 2048 [ 204.428789][T10104] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.429024][T10102] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.488777][T10102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.527299][T10104] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.570733][T10102] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2290: bg 0: block 234: padding at end of block bitmap is not set [ 204.616738][T10104] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.622549][T10102] EXT4-fs (loop6): Remounting filesystem read-only [ 204.696658][T10104] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.744807][ T4680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.797699][T10104] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.814661][T10104] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.862582][T10104] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.902057][T10104] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.123069][T10139] Cannot find set identified by id 0 to match [ 205.300613][T10142] loop5: detected capacity change from 0 to 1024 [ 205.350653][T10142] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.361693][T10142] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 205.439645][T10142] JBD2: no valid journal superblock found [ 205.445476][T10142] EXT4-fs (loop5): Could not load journal inode [ 205.519565][T10154] ip6gre5: entered allmulticast mode [ 205.601485][T10157] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.637734][T10157] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.687687][T10157] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.738301][T10157] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.801876][T10157] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.822746][T10157] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.842036][T10161] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2313'. [ 205.851825][T10157] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.866826][T10157] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.883795][T10161] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2313'. [ 205.897976][T10161] netlink: 'syz.6.2313': attribute type 10 has an invalid length. [ 205.948968][T10167] loop5: detected capacity change from 0 to 2048 [ 205.955724][T10167] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.978496][T10167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.002310][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.100547][T10177] loop5: detected capacity change from 0 to 2048 [ 206.108217][T10177] EXT4-fs: Ignoring removed i_version option [ 206.114443][T10179] loop4: detected capacity change from 0 to 2048 [ 206.122283][T10179] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.127616][T10177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.158064][T10179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.173209][T10179] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2320: bg 0: block 234: padding at end of block bitmap is not set [ 206.188301][T10179] EXT4-fs (loop4): Remounting filesystem read-only [ 206.305458][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.415566][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2323'. [ 206.432191][T10193] rdma_op ffff88812cbcb180 conn xmit_rdma 0000000000000000 [ 206.466457][T10195] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.530756][T10195] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.620424][T10195] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.674159][T10200] loop6: detected capacity change from 0 to 2048 [ 206.681736][T10200] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.682713][T10195] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.717082][T10207] 9pnet_fd: Insufficient options for proto=fd [ 206.724295][T10200] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.750581][ T4680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.779723][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2331'. [ 206.791618][T10211] rdma_op ffff88812cbc8580 conn xmit_rdma 0000000000000000 [ 206.819109][T10214] ip6gre4: entered allmulticast mode [ 206.855068][T10216] loop6: detected capacity change from 0 to 2048 [ 206.861936][T10216] EXT4-fs: Ignoring removed i_version option [ 206.888796][T10216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.930990][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.990471][T10226] loop5: detected capacity change from 0 to 512 [ 207.029076][T10226] EXT4-fs (loop5): 1 orphan inode deleted [ 207.035343][T10226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.048391][ T51] __quota_error: 32 callbacks suppressed [ 207.048406][ T51] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 207.064676][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 207.081652][T10226] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.100375][T10230] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.138625][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.149752][T10230] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.163377][ T29] audit: type=1326 audit(1743647636.993:20780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa802bdd169 code=0x7ffc0000 [ 207.168403][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2338'. [ 207.188167][ T29] audit: type=1326 audit(1743647636.993:20781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa802bdd169 code=0x7ffc0000 [ 207.211810][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2338'. [ 207.220594][ T29] audit: type=1326 audit(1743647636.993:20782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa802bdd169 code=0x7ffc0000 [ 207.253180][ T29] audit: type=1326 audit(1743647636.993:20783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa802bdd169 code=0x7ffc0000 [ 207.276876][ T29] audit: type=1326 audit(1743647636.993:20784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa802bdd169 code=0x7ffc0000 [ 207.301058][ T29] audit: type=1326 audit(1743647636.993:20785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa802bdd169 code=0x7ffc0000 [ 207.325354][ T29] audit: type=1326 audit(1743647636.993:20786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa802bdd169 code=0x7ffc0000 [ 207.349675][ T29] audit: type=1326 audit(1743647636.993:20787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa802bdd169 code=0x7ffc0000 [ 207.373911][ T29] audit: type=1326 audit(1743647636.993:20788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa802bdd169 code=0x7ffc0000 [ 207.418197][T10230] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.498381][T10230] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.512866][T10243] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2340'. [ 207.521970][T10243] 0ªX¹¦À: renamed from caif0 [ 207.530949][T10243] 0ªX¹¦À: entered allmulticast mode [ 207.536312][T10243] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 207.565573][T10230] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.577479][T10230] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.589134][T10230] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.609213][T10230] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.639777][T10245] loop5: detected capacity change from 0 to 2048 [ 207.648923][T10245] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.679538][T10251] FAULT_INJECTION: forcing a failure. [ 207.679538][T10251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.684754][T10245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.692647][T10251] CPU: 0 UID: 0 PID: 10251 Comm: syz.1.2343 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 207.692679][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.692708][T10251] Call Trace: [ 207.692744][T10251] [ 207.692796][T10251] dump_stack_lvl+0xf6/0x150 [ 207.692825][T10251] dump_stack+0x15/0x1a [ 207.692842][T10251] should_fail_ex+0x261/0x270 [ 207.692875][T10251] should_fail+0xb/0x10 [ 207.692903][T10251] should_fail_usercopy+0x1a/0x20 [ 207.693007][T10251] _copy_from_user+0x1c/0xa0 [ 207.693045][T10251] core_sys_select+0x35f/0x6d0 [ 207.693102][T10251] ? set_user_sigmask+0x88/0x190 [ 207.693128][T10251] __se_sys_pselect6+0x212/0x270 [ 207.693239][T10251] __x64_sys_pselect6+0x78/0x90 [ 207.693282][T10251] x64_sys_call+0x1c26/0x2e10 [ 207.693351][T10251] do_syscall_64+0xc9/0x1c0 [ 207.693386][T10251] ? clear_bhb_loop+0x25/0x80 [ 207.693414][T10251] ? clear_bhb_loop+0x25/0x80 [ 207.693507][T10251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.693609][T10251] RIP: 0033:0x7f7016bfd169 [ 207.693629][T10251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.693652][T10251] RSP: 002b:00007f7015267038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 207.693676][T10251] RAX: ffffffffffffffda RBX: 00007f7016e15fa0 RCX: 00007f7016bfd169 [ 207.693691][T10251] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 207.693707][T10251] RBP: 00007f7015267090 R08: 0000000000000000 R09: 0000000000000000 [ 207.693796][T10251] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 207.693811][T10251] R13: 0000000000000000 R14: 00007f7016e15fa0 R15: 00007ffd3d205378 [ 207.693836][T10251] [ 207.731170][T10253] ip6gre3: entered allmulticast mode [ 207.890804][ T4680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.895014][ T3551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.988806][T10265] loop1: detected capacity change from 0 to 512 [ 208.044131][T10270] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2351'. [ 208.053518][T10270] 0ªX¹¦À: renamed from caif0 [ 208.062237][T10270] 0ªX¹¦À: entered allmulticast mode [ 208.067687][T10270] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 208.665490][T10297] ip6gre4: entered allmulticast mode [ 208.948704][T10309] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2364'. [ 208.957790][T10309] 0ªX¹¦À: renamed from caif0 [ 208.964486][T10309] 0ªX¹¦À: entered allmulticast mode [ 208.970484][T10309] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 209.087000][T10313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.095432][T10313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.782361][T10339] ip6gre6: entered allmulticast mode [ 209.888817][T10344] loop5: detected capacity change from 0 to 2048 [ 209.896053][T10344] EXT4-fs: Ignoring removed i_version option [ 209.932759][T10346] loop1: detected capacity change from 0 to 2048 [ 209.939677][T10346] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.943044][T10344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.983817][T10346] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2377: bg 0: block 234: padding at end of block bitmap is not set [ 210.000005][T10346] EXT4-fs (loop1): Remounting filesystem read-only [ 210.170324][T10357] loop1: detected capacity change from 0 to 512 [ 210.191246][T10357] EXT4-fs (loop1): 1 orphan inode deleted [ 210.198121][T10357] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.208750][ T6194] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 210.320364][T10361] loop6: detected capacity change from 0 to 2048 [ 210.328738][T10361] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.339922][T10363] rdma_op ffff88812e39f180 conn xmit_rdma 0000000000000000 [ 210.458406][T10379] loop1: detected capacity change from 0 to 2048 [ 210.465382][T10379] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.491758][T10379] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2388: bg 0: block 234: padding at end of block bitmap is not set [ 210.506695][T10379] EXT4-fs (loop1): Remounting filesystem read-only [ 210.606888][T10389] loop1: detected capacity change from 0 to 512 [ 210.619746][T10389] EXT4-fs (loop1): 1 orphan inode deleted [ 210.629098][T10389] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.641502][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 210.674116][T10396] tls_set_device_offload: netdev not found [ 210.705349][T10400] FAULT_INJECTION: forcing a failure. [ 210.705349][T10400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.718791][T10400] CPU: 0 UID: 0 PID: 10400 Comm: syz.6.2395 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 210.718844][T10400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.718878][T10400] Call Trace: [ 210.718884][T10400] [ 210.718893][T10400] dump_stack_lvl+0xf6/0x150 [ 210.718972][T10400] dump_stack+0x15/0x1a [ 210.718988][T10400] should_fail_ex+0x261/0x270 [ 210.719020][T10400] should_fail+0xb/0x10 [ 210.719047][T10400] should_fail_usercopy+0x1a/0x20 [ 210.719076][T10400] _copy_from_iter+0xd8/0xd10 [ 210.719146][T10400] ? kmalloc_reserve+0x16e/0x190 [ 210.719168][T10400] ? __build_skb_around+0x199/0x1f0 [ 210.719189][T10400] ? __alloc_skb+0x24c/0x320 [ 210.719211][T10400] copy_page_from_iter+0x14f/0x280 [ 210.719242][T10400] tcp_connect+0x16be/0x22b0 [ 210.719311][T10400] tcp_sendmsg_fastopen+0x1f0/0x500 [ 210.719351][T10400] tcp_sendmsg_locked+0x2574/0x2760 [ 210.719390][T10400] ? trace_buffer_unlock_commit_regs+0x115/0x320 [ 210.719489][T10400] ? trace_event_buffer_commit+0x18f/0x620 [ 210.719521][T10400] ? __rcu_read_unlock+0x4e/0x70 [ 210.719551][T10400] ? avc_has_perm_noaudit+0x1cc/0x210 [ 210.719658][T10400] ? avc_has_perm+0xd6/0x150 [ 210.719688][T10400] ? _raw_spin_unlock_bh+0x36/0x40 [ 210.719732][T10400] ? __pfx_tcp_sendmsg+0x10/0x10 [ 210.719768][T10400] tcp_sendmsg+0x30/0x50 [ 210.719820][T10400] inet6_sendmsg+0x77/0xd0 [ 210.719846][T10400] __sock_sendmsg+0x8b/0x180 [ 210.719952][T10400] __sys_sendto+0x1aa/0x230 [ 210.719997][T10400] __x64_sys_sendto+0x78/0x90 [ 210.720025][T10400] x64_sys_call+0x2bcb/0x2e10 [ 210.720050][T10400] do_syscall_64+0xc9/0x1c0 [ 210.720078][T10400] ? clear_bhb_loop+0x25/0x80 [ 210.720188][T10400] ? clear_bhb_loop+0x25/0x80 [ 210.720212][T10400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.720252][T10400] RIP: 0033:0x7fabb344d169 [ 210.720269][T10400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.720287][T10400] RSP: 002b:00007fabb1ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 210.720306][T10400] RAX: ffffffffffffffda RBX: 00007fabb3665fa0 RCX: 00007fabb344d169 [ 210.720364][T10400] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000005 [ 210.720436][T10400] RBP: 00007fabb1ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 210.720450][T10400] R10: 0000000000001802 R11: 0000000000000246 R12: 0000000000000001 [ 210.720464][T10400] R13: 0000000000000000 R14: 00007fabb3665fa0 R15: 00007ffee3308738 [ 210.720488][T10400] [ 211.075349][T10416] loop5: detected capacity change from 0 to 2048 [ 211.082343][T10416] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.112254][T10416] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2402: bg 0: block 234: padding at end of block bitmap is not set [ 211.127442][T10416] EXT4-fs (loop5): Remounting filesystem read-only [ 211.169201][T10424] loop1: detected capacity change from 0 to 2048 [ 211.178186][T10424] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.209906][T10430] atomic_op ffff88812e39c928 conn xmit_atomic 0000000000000000 [ 211.313416][T10446] rdma_op ffff888112b05180 conn xmit_rdma 0000000000000000 [ 211.387852][T10195] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.398151][T10451] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2415'. [ 211.411368][T10195] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.424242][T10195] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.436724][T10195] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.448810][T10451] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2415'. [ 211.459787][T10451] netlink: 'syz.5.2415': attribute type 10 has an invalid length. [ 211.481641][T10453] set match dimension is over the limit! [ 211.622771][T10466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.631473][T10466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.085558][T10472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.094725][T10472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.172704][T10478] rdma_op ffff88812e39f180 conn xmit_rdma 0000000000000000 [ 212.284566][T10487] Cannot find set identified by id 0 to match [ 212.574966][T10499] loop5: detected capacity change from 0 to 2048 [ 212.581929][T10499] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.613120][T10499] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2433: bg 0: block 234: padding at end of block bitmap is not set [ 212.628602][T10499] EXT4-fs (loop5): Remounting filesystem read-only [ 212.760631][T10511] rdma_op ffff88812e39f180 conn xmit_rdma 0000000000000000 [ 212.862488][T10513] loop5: detected capacity change from 0 to 2048 [ 212.885711][T10513] EXT4-fs: Ignoring removed i_version option [ 212.918310][T10520] set match dimension is over the limit! [ 212.950724][T10522] rdma_op ffff88812e39d180 conn xmit_rdma 0000000000000000 [ 212.987805][T10525] loop4: detected capacity change from 0 to 512 [ 213.022309][T10525] EXT4-fs (loop4): 1 orphan inode deleted [ 213.039369][ T6194] __quota_error: 153 callbacks suppressed [ 213.039388][ T6194] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 213.054984][ T6194] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 213.069020][T10525] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.220012][T10532] rdma_op ffff88812e39f180 conn xmit_rdma 0000000000000000 [ 213.263001][T10534] loop4: detected capacity change from 0 to 2048 [ 213.270146][T10534] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.337935][T10542] rdma_op ffff88812e39f180 conn xmit_rdma 0000000000000000 [ 213.398152][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2451'. [ 213.441848][T10552] loop4: detected capacity change from 0 to 2048 [ 213.450161][T10552] EXT4-fs: Ignoring removed i_version option [ 213.504122][T10548] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2451'. [ 214.282064][T10565] rdma_op ffff88812e39d580 conn xmit_rdma 0000000000000000 [ 214.321226][T10567] loop4: detected capacity change from 0 to 2048 [ 214.329698][T10567] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.357858][T10573] rdma_op ffff88812cbcad80 conn xmit_rdma 0000000000000000 [ 214.391827][T10577] lo speed is unknown, defaulting to 1000 [ 214.399072][T10577] lo speed is unknown, defaulting to 1000 [ 214.405321][T10577] lo speed is unknown, defaulting to 1000 [ 214.438930][T10577] infiniband sz1: set active [ 214.443671][T10577] infiniband sz1: added lo [ 214.448355][ T3529] lo speed is unknown, defaulting to 1000 [ 214.460838][T10577] RDS/IB: sz1: added [ 214.464912][T10577] smc: adding ib device sz1 with port count 1 [ 214.471289][T10577] smc: ib device sz1 port 1 has pnetid [ 214.477426][ T3529] lo speed is unknown, defaulting to 1000 [ 214.483600][T10577] lo speed is unknown, defaulting to 1000 [ 214.495673][T10581] loop4: detected capacity change from 0 to 2048 [ 214.505194][T10581] EXT4-fs: Ignoring removed i_version option [ 214.521655][T10577] lo speed is unknown, defaulting to 1000 [ 214.586036][T10577] lo speed is unknown, defaulting to 1000 [ 214.660003][T10590] Cannot find set identified by id 0 to match [ 214.681372][T10577] lo speed is unknown, defaulting to 1000 [ 214.717063][T10577] lo speed is unknown, defaulting to 1000 [ 214.769768][T10597] 9pnet_fd: Insufficient options for proto=fd [ 214.797390][T10577] lo speed is unknown, defaulting to 1000 [ 214.841241][T10577] lo speed is unknown, defaulting to 1000 [ 214.879004][T10601] loop5: detected capacity change from 0 to 2048 [ 214.883032][T10577] lo speed is unknown, defaulting to 1000 [ 214.892300][T10601] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.927292][T10577] lo speed is unknown, defaulting to 1000 [ 214.961868][T10607] loop1: detected capacity change from 0 to 512 [ 214.971242][T10577] lo speed is unknown, defaulting to 1000 [ 214.980064][T10607] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 215.005821][T10607] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 215.039483][T10577] lo speed is unknown, defaulting to 1000 [ 215.047270][T10607] EXT4-fs (loop1): mount failed [ 215.105412][T10617] Cannot find set identified by id 0 to match [ 215.137752][T10577] lo speed is unknown, defaulting to 1000 [ 215.142144][T10619] ip6gre5: entered allmulticast mode [ 215.220601][T10577] lo speed is unknown, defaulting to 1000 [ 215.236739][T10627] 9pnet_fd: Insufficient options for proto=fd [ 215.368482][T10639] netem: change failed [ 215.375328][T10638] netem: change failed [ 215.385870][T10639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2486'. [ 215.394933][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2486'. [ 215.471218][T10651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.479731][T10651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.553263][T10657] ip6gre6: entered allmulticast mode [ 215.585214][ T29] audit: type=1404 audit(1743647645.413:20940): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 215.695184][ T29] audit: type=1400 audit(1743647645.443:20941): avc: denied { ioctl } for pid=10656 comm="syz.1.2492" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 215.721090][ T29] audit: type=1400 audit(1743647645.443:20942): avc: denied { create } for pid=10656 comm="syz.1.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 215.741090][ T29] audit: type=1400 audit(1743647645.443:20943): avc: denied { read } for pid=10656 comm="syz.1.2492" dev="nsfs" ino=4026532512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 215.762556][ T29] audit: type=1404 audit(1743647645.453:20944): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 215.777693][ T29] audit: type=1400 audit(1743647645.453:20945): avc: denied { create } for pid=10648 comm="syz.5.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.797310][ T29] audit: type=1400 audit(1743647645.453:20946): avc: denied { write } for pid=10648 comm="syz.5.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.816881][ T29] audit: type=1400 audit(1743647645.463:20947): avc: denied { prog_load } for pid=10649 comm="syz.6.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 215.875213][T10667] rdma_op ffff88810cca9580 conn xmit_rdma 0000000000000000 [ 215.904144][T10671] 9pnet_fd: Insufficient options for proto=fd [ 216.093062][T10684] netlink: 'syz.1.2503': attribute type 1 has an invalid length. [ 216.141256][T10687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.150405][T10687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.250426][T10694] rdma_op ffff88812cbcb180 conn xmit_rdma 0000000000000000 [ 216.481708][T10704] loop6: detected capacity change from 0 to 2048 [ 216.488963][T10704] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.563349][T10709] loop6: detected capacity change from 0 to 2048 [ 216.570975][T10709] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.600342][T10709] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2511: bg 0: block 234: padding at end of block bitmap is not set [ 216.617605][T10709] EXT4-fs (loop6): Remounting filesystem read-only [ 216.862357][T10722] rdma_op ffff888107b77180 conn xmit_rdma 0000000000000000 [ 217.020576][T10732] loop6: detected capacity change from 0 to 2048 [ 217.029903][T10732] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.064061][T10732] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2521: bg 0: block 234: padding at end of block bitmap is not set [ 217.088931][T10732] EXT4-fs (loop6): Remounting filesystem read-only [ 217.148176][T10743] loop1: detected capacity change from 0 to 2048 [ 217.155144][T10743] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.203030][T10743] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2525: bg 0: block 234: padding at end of block bitmap is not set [ 217.220800][T10743] EXT4-fs (loop1): Remounting filesystem read-only [ 217.254794][T10751] loop6: detected capacity change from 0 to 512 [ 217.284714][T10751] EXT4-fs (loop6): 1 orphan inode deleted [ 217.291285][T10751] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.304693][ T37] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 217.382573][T10758] rdma_op ffff88812cbcb580 conn xmit_rdma 0000000000000000 [ 217.409101][T10755] can0: slcan on ttyS3. [ 217.446371][T10755] can0 (unregistered): slcan off ttyS3. [ 217.510217][T10769] wireguard0: entered promiscuous mode [ 217.516047][T10769] wireguard0: entered allmulticast mode [ 217.520338][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 217.535113][T10772] syz_tun: entered promiscuous mode [ 217.579393][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2535'. [ 217.669948][T10780] serio: Serial port ptm0 [ 217.944995][T10790] Cannot find set identified by id 0 to match [ 217.969640][T10792] Cannot find set identified by id 0 to match [ 218.064224][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 218.064242][ T29] audit: type=1400 audit(1743647647.893:21095): avc: denied { write } for pid=10793 comm="syz.0.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.090843][ T29] audit: type=1400 audit(1743647647.893:21096): avc: denied { name_connect } for pid=10793 comm="syz.0.2543" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 218.227248][ T29] audit: type=1400 audit(1743647648.063:21097): avc: denied { create } for pid=10796 comm="syz.6.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.247989][ T29] audit: type=1400 audit(1743647648.063:21098): avc: denied { setopt } for pid=10796 comm="syz.6.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.268771][ T29] audit: type=1400 audit(1743647648.063:21099): avc: denied { write } for pid=10796 comm="syz.6.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.395364][T10800] loop1: detected capacity change from 0 to 1024 [ 219.424058][T10800] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 219.435892][T10800] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 219.447189][T10800] JBD2: no valid journal superblock found [ 219.453046][T10800] EXT4-fs (loop1): Could not load journal inode [ 219.505338][T10812] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2549'. [ 219.593727][T10814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2550'. [ 219.620422][ T29] audit: type=1400 audit(1743647649.453:21100): avc: denied { create } for pid=10809 comm="syz.6.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 219.625063][T10812] sz1: rxe_newlink: already configured on lo [ 219.655544][ T29] audit: type=1400 audit(1743647649.453:21101): avc: denied { write } for pid=10809 comm="syz.6.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 219.701511][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'. [ 219.714707][T10823] rdma_op ffff888112b04980 conn xmit_rdma 0000000000000000 [ 219.718361][T10825] Cannot find set identified by id 0 to match [ 219.731003][T10827] FAULT_INJECTION: forcing a failure. [ 219.731003][T10827] name failslab, interval 1, probability 0, space 0, times 0 [ 219.743961][T10827] CPU: 1 UID: 0 PID: 10827 Comm: syz.4.2554 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 219.744000][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.744015][T10827] Call Trace: [ 219.744088][T10827] [ 219.744097][T10827] dump_stack_lvl+0xf6/0x150 [ 219.744123][T10827] dump_stack+0x15/0x1a [ 219.744142][T10827] should_fail_ex+0x261/0x270 [ 219.744221][T10827] should_failslab+0x8f/0xb0 [ 219.744283][T10827] __kmalloc_noprof+0xad/0x410 [ 219.744307][T10827] ? trace_probe_init+0x50/0x280 [ 219.744338][T10827] trace_probe_init+0x50/0x280 [ 219.744429][T10827] alloc_trace_uprobe+0x9b/0x1f0 [ 219.744468][T10827] create_local_trace_uprobe+0xc0/0x300 [ 219.744504][T10827] perf_uprobe_init+0xc2/0x140 [ 219.744527][T10827] perf_uprobe_event_init+0xe2/0x140 [ 219.744596][T10827] perf_try_init_event+0xcd/0x530 [ 219.744628][T10827] ? perf_event_alloc+0xab7/0x1680 [ 219.744667][T10827] perf_event_alloc+0xac2/0x1680 [ 219.744733][T10827] __se_sys_perf_event_open+0x7f8/0x2220 [ 219.744848][T10827] ? vfs_write+0x5f1/0x950 [ 219.744896][T10827] __x64_sys_perf_event_open+0x67/0x80 [ 219.744938][T10827] x64_sys_call+0x27bb/0x2e10 [ 219.744960][T10827] do_syscall_64+0xc9/0x1c0 [ 219.744987][T10827] ? clear_bhb_loop+0x25/0x80 [ 219.745008][T10827] ? clear_bhb_loop+0x25/0x80 [ 219.745029][T10827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.745083][T10827] RIP: 0033:0x7f0f4780d169 [ 219.745102][T10827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.745124][T10827] RSP: 002b:00007f0f45e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 219.745147][T10827] RAX: ffffffffffffffda RBX: 00007f0f47a25fa0 RCX: 00007f0f4780d169 [ 219.745189][T10827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 219.745203][T10827] RBP: 00007f0f45e77090 R08: 0000000000000000 R09: 0000000000000000 [ 219.745216][T10827] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 219.745229][T10827] R13: 0000000000000000 R14: 00007f0f47a25fa0 R15: 00007ffc96984c68 [ 219.745258][T10827] [ 219.958111][T10827] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 219.974186][ T29] audit: type=1400 audit(1743647649.803:21102): avc: denied { create } for pid=10828 comm="syz.1.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.997022][T10829] FAULT_INJECTION: forcing a failure. [ 219.997022][T10829] name failslab, interval 1, probability 0, space 0, times 0 [ 220.010339][T10829] CPU: 1 UID: 0 PID: 10829 Comm: syz.1.2555 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 220.010485][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.010500][T10829] Call Trace: [ 220.010509][T10829] [ 220.010518][T10829] dump_stack_lvl+0xf6/0x150 [ 220.010547][T10829] dump_stack+0x15/0x1a [ 220.010564][T10829] should_fail_ex+0x261/0x270 [ 220.010601][T10829] should_failslab+0x8f/0xb0 [ 220.010638][T10829] __kmalloc_cache_noprof+0x55/0x320 [ 220.010669][T10829] ? __request_module+0x1bf/0x3f0 [ 220.010700][T10829] ? crypto_alg_mod_lookup+0xf0/0x4d0 [ 220.010722][T10829] __request_module+0x1bf/0x3f0 [ 220.010820][T10829] ? down_read+0x173/0x4c0 [ 220.010849][T10829] ? crypto_alg_mod_lookup+0xc1/0x4d0 [ 220.010885][T10829] ? crypto_alg_lookup+0x312/0x360 [ 220.010909][T10829] crypto_alg_mod_lookup+0xf0/0x4d0 [ 220.010931][T10829] crypto_alloc_tfm_node+0xaa/0x290 [ 220.011009][T10829] crypto_alloc_aead+0x2f/0x40 [ 220.011046][T10829] tls_set_sw_offload+0x57b/0xa90 [ 220.011084][T10829] tls_setsockopt+0xa29/0xf70 [ 220.011176][T10829] sock_common_setsockopt+0x64/0x80 [ 220.011231][T10829] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 220.011271][T10829] __sys_setsockopt+0x187/0x200 [ 220.011296][T10829] __x64_sys_setsockopt+0x66/0x80 [ 220.011351][T10829] x64_sys_call+0x2a09/0x2e10 [ 220.011378][T10829] do_syscall_64+0xc9/0x1c0 [ 220.011408][T10829] ? clear_bhb_loop+0x25/0x80 [ 220.011434][T10829] ? clear_bhb_loop+0x25/0x80 [ 220.011457][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.011478][T10829] RIP: 0033:0x7f7016bfd169 [ 220.011567][T10829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.011588][T10829] RSP: 002b:00007f7015267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 220.011616][T10829] RAX: ffffffffffffffda RBX: 00007f7016e15fa0 RCX: 00007f7016bfd169 [ 220.011631][T10829] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000004 [ 220.011645][T10829] RBP: 00007f7015267090 R08: 0000000000000038 R09: 0000000000000000 [ 220.011657][T10829] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 220.011722][T10829] R13: 0000000000000000 R14: 00007f7016e15fa0 R15: 00007ffd3d205378 [ 220.011743][T10829] [ 220.336110][ T29] audit: type=1400 audit(1743647650.163:21103): avc: denied { create } for pid=10846 comm="syz.4.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 220.356874][ T29] audit: type=1400 audit(1743647650.163:21104): avc: denied { write } for pid=10846 comm="syz.4.2560" path="socket:[37582]" dev="sockfs" ino=37582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 220.388270][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.396741][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.537602][T10852] FAULT_INJECTION: forcing a failure. [ 220.537602][T10852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.550773][T10852] CPU: 0 UID: 0 PID: 10852 Comm: syz.0.2563 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 220.550802][T10852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.550816][T10852] Call Trace: [ 220.550825][T10852] [ 220.550834][T10852] dump_stack_lvl+0xf6/0x150 [ 220.550866][T10852] dump_stack+0x15/0x1a [ 220.550883][T10852] should_fail_ex+0x261/0x270 [ 220.550911][T10852] should_fail+0xb/0x10 [ 220.551065][T10852] should_fail_usercopy+0x1a/0x20 [ 220.551096][T10852] _copy_from_user+0x1c/0xa0 [ 220.551131][T10852] memdup_user+0x6b/0xd0 [ 220.551235][T10852] strndup_user+0x68/0xa0 [ 220.551264][T10852] __se_sys_mount+0x98/0x2e0 [ 220.551301][T10852] ? fput+0x99/0xd0 [ 220.551326][T10852] ? ksys_write+0x180/0x1b0 [ 220.551415][T10852] __x64_sys_mount+0x67/0x80 [ 220.551533][T10852] x64_sys_call+0xd11/0x2e10 [ 220.551559][T10852] do_syscall_64+0xc9/0x1c0 [ 220.551606][T10852] ? clear_bhb_loop+0x25/0x80 [ 220.551631][T10852] ? clear_bhb_loop+0x25/0x80 [ 220.551657][T10852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.551683][T10852] RIP: 0033:0x7f9343d8d169 [ 220.551699][T10852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.551774][T10852] RSP: 002b:00007f93423ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.551794][T10852] RAX: ffffffffffffffda RBX: 00007f9343fa5fa0 RCX: 00007f9343d8d169 [ 220.551806][T10852] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000480 [ 220.551820][T10852] RBP: 00007f93423ef090 R08: 0000000000000000 R09: 0000000000000000 [ 220.551835][T10852] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 220.551849][T10852] R13: 0000000000000000 R14: 00007f9343fa5fa0 R15: 00007ffd2e1f7048 [ 220.551986][T10852] [ 220.776719][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 220.786975][T10858] rdma_op ffff88810cca9980 conn xmit_rdma 0000000000000000 [ 220.839522][T10862] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 220.871245][T10864] loop1: detected capacity change from 0 to 512 [ 220.877631][T10864] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 220.898045][T10864] EXT4-fs (loop1): mount failed [ 220.905670][T10868] loop4: detected capacity change from 0 to 128 [ 220.984509][T10870] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2570'. [ 221.013930][T10870] 1ªX¹¦À: renamed from 60ªX¹¦À [ 221.029446][T10870] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 221.554402][T10868] syz.4.2568: attempt to access beyond end of device [ 221.554402][T10868] loop4: rw=2049, sector=273, nr_sectors = 768 limit=128 [ 221.699947][T10890] ip6gre7: entered allmulticast mode [ 221.843720][T10893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.852200][T10893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.895365][T10895] loop4: detected capacity change from 0 to 512 [ 221.929761][T10895] EXT4-fs (loop4): 1 orphan inode deleted [ 221.936360][T10895] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.947860][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 222.071562][T10902] loop4: detected capacity change from 0 to 2048 [ 222.079326][T10902] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.115971][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'. [ 222.152105][T10907] rdma_op ffff88810422e980 conn xmit_rdma 0000000000000000 [ 222.179389][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2580'. [ 222.224037][T10909] hub 9-0:1.0: USB hub found [ 222.225287][T10911] FAULT_INJECTION: forcing a failure. [ 222.225287][T10911] name failslab, interval 1, probability 0, space 0, times 0 [ 222.235541][T10909] hub 9-0:1.0: 8 ports detected [ 222.242270][T10911] CPU: 1 UID: 0 PID: 10911 Comm: syz.1.2581 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 222.242307][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.242322][T10911] Call Trace: [ 222.242360][T10911] [ 222.242370][T10911] dump_stack_lvl+0xf6/0x150 [ 222.242402][T10911] dump_stack+0x15/0x1a [ 222.242424][T10911] should_fail_ex+0x261/0x270 [ 222.242470][T10911] should_failslab+0x8f/0xb0 [ 222.242510][T10911] __kmalloc_noprof+0xad/0x410 [ 222.242536][T10911] ? nla_strdup+0x7d/0xc0 [ 222.242574][T10911] nla_strdup+0x7d/0xc0 [ 222.242653][T10911] rtnl_linkprop+0x38c/0x5a0 [ 222.242737][T10911] ? security_capable+0x81/0x90 [ 222.242773][T10911] rtnl_newlinkprop+0x2a/0x40 [ 222.242835][T10911] ? __pfx_rtnl_newlinkprop+0x10/0x10 [ 222.242875][T10911] rtnetlink_rcv_msg+0x6b7/0x740 [ 222.242920][T10911] ? netlink_rcv_skb+0xfc/0x230 [ 222.242951][T10911] netlink_rcv_skb+0x12f/0x230 [ 222.242976][T10911] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.243025][T10911] rtnetlink_rcv+0x1c/0x30 [ 222.243059][T10911] netlink_unicast+0x605/0x6c0 [ 222.243110][T10911] netlink_sendmsg+0x609/0x720 [ 222.243179][T10911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.243208][T10911] __sock_sendmsg+0x140/0x180 [ 222.243250][T10911] ____sys_sendmsg+0x350/0x4e0 [ 222.243320][T10911] __sys_sendmsg+0x1a0/0x240 [ 222.243373][T10911] __x64_sys_sendmsg+0x46/0x50 [ 222.243435][T10911] x64_sys_call+0x26f3/0x2e10 [ 222.243463][T10911] do_syscall_64+0xc9/0x1c0 [ 222.243496][T10911] ? clear_bhb_loop+0x25/0x80 [ 222.243524][T10911] ? clear_bhb_loop+0x25/0x80 [ 222.243552][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.243623][T10911] RIP: 0033:0x7f7016bfd169 [ 222.243642][T10911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.243665][T10911] RSP: 002b:00007f7015267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.243696][T10911] RAX: ffffffffffffffda RBX: 00007f7016e15fa0 RCX: 00007f7016bfd169 [ 222.243722][T10911] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 222.243737][T10911] RBP: 00007f7015267090 R08: 0000000000000000 R09: 0000000000000000 [ 222.243825][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.243910][T10911] R13: 0000000000000000 R14: 00007f7016e15fa0 R15: 00007ffd3d205378 [ 222.243935][T10911] [ 222.572679][T10924] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2587'. [ 222.612013][T10924] 1ªX¹¦À: renamed from 60ªX¹¦À [ 222.706984][T10934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.715518][T10934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.028581][T10924] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 223.048359][T10936] loop4: detected capacity change from 0 to 2048 [ 223.055485][T10936] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.085791][T10936] EXT4-fs mount: 45 callbacks suppressed [ 223.085810][T10936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.212098][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.231672][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 223.231689][ T29] audit: type=1400 audit(1743647653.063:21123): avc: denied { getopt } for pid=10938 comm="syz.6.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.231888][T10942] netlink: 'syz.6.2591': attribute type 21 has an invalid length. [ 223.262548][T10950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2594'. [ 223.275266][T10950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2594'. [ 223.287760][ T29] audit: type=1400 audit(1743647653.123:21124): avc: denied { create } for pid=10938 comm="syz.6.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.307756][ T29] audit: type=1400 audit(1743647653.123:21125): avc: denied { write } for pid=10938 comm="syz.6.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.329755][ T29] audit: type=1400 audit(1743647653.123:21126): avc: denied { ioctl } for pid=10938 comm="syz.6.2591" path="socket:[37758]" dev="sockfs" ino=37758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.354868][ T29] audit: type=1400 audit(1743647653.173:21127): avc: denied { listen } for pid=10938 comm="syz.6.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 223.375496][ T29] audit: type=1400 audit(1743647653.173:21128): avc: denied { accept } for pid=10938 comm="syz.6.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 223.543078][ T29] audit: type=1400 audit(1743647653.373:21129): avc: denied { setopt } for pid=10964 comm="syz.4.2600" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.571391][T10965] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.573803][ T29] audit: type=1400 audit(1743647653.403:21130): avc: denied { write } for pid=10964 comm="syz.4.2600" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.578613][T10965] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.599006][ T29] audit: type=1400 audit(1743647653.403:21131): avc: denied { read } for pid=10964 comm="syz.4.2600" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.614110][T10965] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 223.626808][ T29] audit: type=1400 audit(1743647653.403:21132): avc: denied { read write } for pid=10964 comm="syz.4.2600" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 223.706352][T10969] loop4: detected capacity change from 0 to 512 [ 223.738815][T10967] lo speed is unknown, defaulting to 1000 [ 223.745307][T10969] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 223.761146][T10969] EXT4-fs (loop4): mount failed [ 223.881923][T10979] loop4: detected capacity change from 0 to 512 [ 223.898197][T10979] EXT4-fs (loop4): 1 orphan inode deleted [ 223.904395][T10979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.918217][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 223.918270][T10979] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.956091][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.053980][T10987] Cannot find set identified by id 0 to match [ 224.311158][T10998] 0ªX¹¦À: renamed from 61ªX¹¦À [ 224.318780][T10998] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 224.504239][T11005] FAULT_INJECTION: forcing a failure. [ 224.504239][T11005] name failslab, interval 1, probability 0, space 0, times 0 [ 224.517954][T11005] CPU: 1 UID: 0 PID: 11005 Comm: syz.0.2614 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 224.517985][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.518000][T11005] Call Trace: [ 224.518009][T11005] [ 224.518018][T11005] dump_stack_lvl+0xf6/0x150 [ 224.518045][T11005] dump_stack+0x15/0x1a [ 224.518065][T11005] should_fail_ex+0x261/0x270 [ 224.518168][T11005] should_failslab+0x8f/0xb0 [ 224.518205][T11005] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 224.518231][T11005] ? sidtab_sid2str_get+0xb8/0x140 [ 224.518322][T11005] kmemdup_noprof+0x2b/0x70 [ 224.518352][T11005] sidtab_sid2str_get+0xb8/0x140 [ 224.518378][T11005] security_sid_to_context_core+0x1eb/0x2f0 [ 224.518450][T11005] security_sid_to_context+0x27/0x30 [ 224.518522][T11005] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 224.518551][T11005] security_lsmprop_to_secctx+0x40/0x80 [ 224.518609][T11005] audit_log_task_context+0x7a/0x180 [ 224.518637][T11005] audit_log_task+0xfb/0x250 [ 224.518657][T11005] audit_seccomp+0x68/0x130 [ 224.518680][T11005] __seccomp_filter+0x694/0x10e0 [ 224.518726][T11005] ? mntput+0x49/0x70 [ 224.518798][T11005] __secure_computing+0x7e/0x160 [ 224.518831][T11005] syscall_trace_enter+0xcf/0x1f0 [ 224.518928][T11005] ? fpregs_assert_state_consistent+0x83/0xa0 [ 224.518969][T11005] do_syscall_64+0xaa/0x1c0 [ 224.518994][T11005] ? clear_bhb_loop+0x25/0x80 [ 224.519062][T11005] ? clear_bhb_loop+0x25/0x80 [ 224.519103][T11005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.519138][T11005] RIP: 0033:0x7f9343d8bb7c [ 224.519156][T11005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 224.519177][T11005] RSP: 002b:00007f93423ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.519198][T11005] RAX: ffffffffffffffda RBX: 00007f9343fa5fa0 RCX: 00007f9343d8bb7c [ 224.519212][T11005] RDX: 000000000000000f RSI: 00007f93423ef0a0 RDI: 0000000000000005 [ 224.519226][T11005] RBP: 00007f93423ef090 R08: 0000000000000000 R09: 0000000000000000 [ 224.519240][T11005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.519301][T11005] R13: 0000000000000000 R14: 00007f9343fa5fa0 R15: 00007ffd2e1f7048 [ 224.519372][T11005] [ 224.799222][T11011] __nla_validate_parse: 11 callbacks suppressed [ 224.799243][T11011] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2617'. [ 224.814599][T11011] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2617'. [ 224.851408][T11013] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.874183][T11015] loop6: detected capacity change from 0 to 2048 [ 224.895073][T11015] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.903473][T11013] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.927065][T11015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.937056][T11025] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2622'. [ 224.949657][T11025] 1ªX¹¦À: renamed from 60ªX¹¦À [ 224.956746][T11025] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 224.985343][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x4 [ 224.987459][T11013] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.993015][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.010474][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.018013][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.025503][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.033130][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x2 [ 225.040692][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.048297][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.055929][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.063428][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.071036][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.078566][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x4 [ 225.086083][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.093694][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.101228][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x2 [ 225.108770][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.116351][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.123898][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.131503][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.139018][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.146555][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.154099][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.161601][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.169092][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.176723][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.184478][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.192156][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.199658][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.207312][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.214795][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.222491][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.230029][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.237563][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.245113][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.252676][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.260248][ T3377] hid-generic 0000:80000:0000.0007: unknown main item tag 0x0 [ 225.268443][ T3377] hid-generic 0000:80000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 225.292499][T11028] loop4: detected capacity change from 0 to 1024 [ 225.299652][T11028] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 225.310696][T11028] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 225.321867][T11028] JBD2: no valid journal superblock found [ 225.327657][T11028] EXT4-fs (loop4): Could not load journal inode [ 225.348222][T11013] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.364713][ T4680] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.383867][T11032] hub 9-0:1.0: USB hub found [ 225.391117][T11032] hub 9-0:1.0: 8 ports detected [ 225.408263][T11013] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.413958][T11034] hub 9-0:1.0: USB hub found [ 225.420542][T11013] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.421306][T11034] hub 9-0:1.0: 8 ports detected [ 225.435357][T11013] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.459824][T11013] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.477340][T11031] loop4: detected capacity change from 0 to 512 [ 225.490664][T11031] EXT4-fs: Ignoring removed bh option [ 225.497916][T11031] EXT4-fs: dax option not supported [ 225.532739][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2630'. [ 225.542226][T11046] IPVS: Error joining to the multicast group [ 225.550164][T11047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.558715][T11047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.590480][T11050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2629'. [ 225.599540][T11050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2629'. [ 225.637956][T11052] loop4: detected capacity change from 0 to 2048 [ 225.645250][T11052] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.660907][T11054] loop1: detected capacity change from 0 to 2048 [ 225.669855][T11057] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2632'. [ 225.676786][T11054] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.681829][T11057] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2632'. [ 225.687243][T11052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.719877][T11057] netlink: 'syz.5.2632': attribute type 10 has an invalid length. [ 225.757347][T11054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.796048][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.797565][T11054] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2633: bg 0: block 234: padding at end of block bitmap is not set [ 225.820606][T11054] EXT4-fs (loop1): Remounting filesystem read-only [ 225.843738][T11061] FAULT_INJECTION: forcing a failure. [ 225.843738][T11061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.857914][T11061] CPU: 1 UID: 0 PID: 11061 Comm: syz.4.2635 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 225.858030][T11061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.858043][T11061] Call Trace: [ 225.858051][T11061] [ 225.858059][T11061] dump_stack_lvl+0xf6/0x150 [ 225.858090][T11061] dump_stack+0x15/0x1a [ 225.858111][T11061] should_fail_ex+0x261/0x270 [ 225.858163][T11061] should_fail+0xb/0x10 [ 225.858189][T11061] should_fail_usercopy+0x1a/0x20 [ 225.858222][T11061] _copy_to_user+0x20/0xa0 [ 225.858263][T11061] simple_read_from_buffer+0xb2/0x130 [ 225.858321][T11061] proc_fail_nth_read+0x103/0x140 [ 225.858368][T11061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.858401][T11061] vfs_read+0x1b2/0x710 [ 225.858506][T11061] ? __rcu_read_unlock+0x4e/0x70 [ 225.858536][T11061] ? __fget_files+0x186/0x1c0 [ 225.858563][T11061] ksys_read+0xeb/0x1b0 [ 225.858598][T11061] __x64_sys_read+0x42/0x50 [ 225.858628][T11061] x64_sys_call+0x2a3b/0x2e10 [ 225.858721][T11061] do_syscall_64+0xc9/0x1c0 [ 225.858753][T11061] ? clear_bhb_loop+0x25/0x80 [ 225.858853][T11061] ? clear_bhb_loop+0x25/0x80 [ 225.858881][T11061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.858971][T11061] RIP: 0033:0x7f0f4780bb7c [ 225.858986][T11061] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 225.859008][T11061] RSP: 002b:00007f0f45e77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.859031][T11061] RAX: ffffffffffffffda RBX: 00007f0f47a25fa0 RCX: 00007f0f4780bb7c [ 225.859045][T11061] RDX: 000000000000000f RSI: 00007f0f45e770a0 RDI: 0000000000000005 [ 225.859114][T11061] RBP: 00007f0f45e77090 R08: 0000000000000000 R09: 0000000000000000 [ 225.859130][T11061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.859144][T11061] R13: 0000000000000000 R14: 00007f0f47a25fa0 R15: 00007ffc96984c68 [ 225.859163][T11061] [ 226.117548][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.418225][T11077] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.429847][T11080] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 226.489156][T11077] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.503633][T11082] can0: slcan on ttyS3. [ 226.549223][T11077] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.606817][T11077] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.660658][T11077] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.673586][T11077] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.686255][T11077] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.701921][T11077] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.809362][T11099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2651'. [ 226.818389][T11099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2651'. [ 226.892549][T11106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.901091][T11106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.934924][T11109] loop1: detected capacity change from 0 to 512 [ 226.950089][T11109] EXT4-fs (loop1): 1 orphan inode deleted [ 226.962776][T11109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.976702][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 226.978381][T11109] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.012507][T11115] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.069448][T11115] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.081999][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.127967][T11115] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.180398][T11115] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.238743][T11115] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.251792][T11115] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.273021][T11115] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.288068][T11115] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.373966][T11134] loop1: detected capacity change from 0 to 2048 [ 227.391043][T11134] EXT4-fs: Ignoring removed i_version option [ 227.423105][T11134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.762298][T11150] loop4: detected capacity change from 0 to 2048 [ 227.777114][T11150] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.787467][T11150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.805050][T11150] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2669: bg 0: block 234: padding at end of block bitmap is not set [ 227.822016][T11150] EXT4-fs (loop4): Remounting filesystem read-only [ 227.919606][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.189613][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.227881][T11165] Cannot find set identified by id 0 to match [ 228.252801][T11167] rdma_op ffff8881344a5980 conn xmit_rdma 0000000000000000 [ 228.285984][T11169] 9pnet_fd: Insufficient options for proto=fd [ 228.333157][T11174] Cannot find set identified by id 0 to match [ 228.372110][T11177] loop4: detected capacity change from 0 to 2048 [ 228.378980][T11177] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.396456][ T2] ================================================================== [ 228.404572][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 228.411094][ T2] [ 228.413418][ T2] read-write to 0xffffffff86861048 of 4 bytes by task 3305 on cpu 0: [ 228.421487][ T2] free_pid+0x7e/0x180 [ 228.425569][ T2] free_pids+0x54/0xb0 [ 228.429643][ T2] release_task+0x97f/0xb70 [ 228.434227][ T2] wait_consider_task+0x117a/0x16a0 [ 228.439449][ T2] __do_wait+0x108/0x520 [ 228.443702][ T2] do_wait+0xb9/0x270 [ 228.447697][ T2] kernel_wait4+0x147/0x1d0 [ 228.452210][ T2] __x64_sys_wait4+0x99/0x120 [ 228.456897][ T2] x64_sys_call+0x25f3/0x2e10 [ 228.461578][ T2] do_syscall_64+0xc9/0x1c0 [ 228.466094][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.471994][ T2] [ 228.474321][ T2] read to 0xffffffff86861048 of 4 bytes by task 2 on cpu 1: [ 228.481600][ T2] copy_process+0x1754/0x1f60 [ 228.486292][ T2] kernel_clone+0x168/0x5d0 [ 228.490803][ T2] kernel_thread+0xbf/0xf0 [ 228.495227][ T2] kthreadd+0x29f/0x370 [ 228.499384][ T2] ret_from_fork+0x4b/0x60 [ 228.503818][ T2] ret_from_fork_asm+0x1a/0x30 [ 228.508588][ T2] [ 228.510905][ T2] value changed: 0x800000c4 -> 0x800000c3 [ 228.516615][ T2] [ 228.518935][ T2] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 228.525082][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(voluntary) [ 228.536716][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.546774][ T2] ================================================================== [ 228.580198][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 228.580216][ T29] audit: type=1400 audit(1743647658.393:21190): avc: denied { write } for pid=3291 comm="syz-executor" path="pipe:[1595]" dev="pipefs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 228.627807][T11177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.643942][T11177] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2680: bg 0: block 234: padding at end of block bitmap is not set [ 228.660619][T11177] EXT4-fs (loop4): Remounting filesystem read-only [ 228.781194][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.873372][ T8373] syz_tun (unregistering): left promiscuous mode [ 231.506050][ T8373] can0 (unregistered): slcan off ttyS3.