last executing test programs: 2m46.153956973s ago: executing program 32 (id=2335): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) utimes(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x2000000]}, 0x8) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) 1m42.19977644s ago: executing program 5 (id=4409): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) futimesat(0xffffffffffffffff, &(0x7f00000030c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 1m42.142952901s ago: executing program 5 (id=4412): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) 1m42.098894741s ago: executing program 5 (id=4419): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xcd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) 1m42.002472802s ago: executing program 5 (id=4421): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000880)='./bus\x00', 0x28d00, 0x1) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x6) 1m41.901464752s ago: executing program 5 (id=4430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lchown(&(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 1m41.679349843s ago: executing program 5 (id=4445): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x7e6, 0x9) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/33, 0x21}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000680)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x35, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4f21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "460294230dd9478728279565a667999eaea00498b2bdddc41c00bd1ceb896853", "9b556fba5ac9186e961b5e369990e05ceb82d8ba6c36dbf1efe78c36dc834424ffccf65d2751562e3dea6e6ff2a1c877", "f4c414295871f382c70367d761711d3ae7daae897a2a312e9d58b80d", {"fd68479eb43a8b69358660c33ec388b1", "2fd4b0cd6a69ec45a8611a9250e028b7"}}}}}}}, 0x0) 1m41.679091533s ago: executing program 33 (id=4445): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x7e6, 0x9) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/33, 0x21}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000680)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x35, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4f21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "460294230dd9478728279565a667999eaea00498b2bdddc41c00bd1ceb896853", "9b556fba5ac9186e961b5e369990e05ceb82d8ba6c36dbf1efe78c36dc834424ffccf65d2751562e3dea6e6ff2a1c877", "f4c414295871f382c70367d761711d3ae7daae897a2a312e9d58b80d", {"fd68479eb43a8b69358660c33ec388b1", "2fd4b0cd6a69ec45a8611a9250e028b7"}}}}}}}, 0x0) 1m38.763760735s ago: executing program 6 (id=4547): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1m38.756854895s ago: executing program 6 (id=4549): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00"], 0x154}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1, &(0x7f0000000100), 0x0, 0x46e, &(0x7f0000000e80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1m38.468703427s ago: executing program 6 (id=4563): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x700, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x6c}}], 0x30, 0x40841}, 0x0) 1m38.427150217s ago: executing program 6 (id=4564): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3804402, &(0x7f00000002c0)={[{@user_xattr}, {@noload}, {@resuid}, {@data_err_abort}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x8}}, {@noinit_itable}, {@nomblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@nogrpid}]}, 0x1, 0x54f, &(0x7f0000000680)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0) mount$9p_xen(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m38.319741318s ago: executing program 6 (id=4569): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1m36.56427728s ago: executing program 6 (id=4646): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfc, 0x11, 0x0, @private=0xa010101, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1m36.56411048s ago: executing program 34 (id=4646): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfc, 0x11, 0x0, @private=0xa010101, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 57.592752698s ago: executing program 0 (id=6039): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) creat(0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 57.520795909s ago: executing program 2 (id=6042): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000038ba9a7e7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200ffff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 57.520431609s ago: executing program 7 (id=6043): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@local, 0x4e21, 0x0, 0x4e21, 0x4, 0xa, 0xfaab2ff1d7030fae, 0x0, 0x29, r2, r3}, {0xc84, 0xffffffff, 0x1, 0x40, 0x367, 0x80000001, 0x3, 0x6}, {0x1, 0x5, 0x1}, 0xbda, 0x6e6bb2, 0x0, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x2}, 0x4d3, 0x3c}, 0x2, @in6=@local, 0x3506, 0x3, 0x2, 0x5, 0xec0, 0x300000}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 57.4225508s ago: executing program 7 (id=6044): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 57.42224754s ago: executing program 2 (id=6045): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000540)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0x0, 0x0) 57.4218578s ago: executing program 7 (id=6046): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3cdf9a0df115c376edfe5a129e71cc04a100846663b0fa4576b19cbb131cc17fb88f775547cd8571ace7c507ed037f2183abffd89ab8b4ca62ca863357b6b48d305c30d5b69887d2472f508896925e0660adb38902b29f791d95c838042f98b9", 0x60}, {&(0x7f0000000180)="eea99986e4f7ccb042247fe67856fc8e253ecb6f4fa3016ef0e762ac2738fb7f6a4346ac99b50fb421267a17645365b35e566b3354639752c01185e7f41e3d5c2672ea3c4624e84cabd527c74c9da01a2e0f5b964a2ad0f5fb9b740dd54086652a1ca05c64aa67ba434e688ef70287442299c908", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="49e045d1377f5f3ca1c84a498c94", 0xe}, {&(0x7f0000000380)="f3d064919ec3e096b13d306ef7b6c4ca11bfb2191bfe0e715fbe8337c71b05ba4a5015a3f3f3fe7b3464b5f0a76b4fc0594d7234cc6cae2bb3f49e0e671b3bb10d59e4c31a52ee84f26d336d696a43f49c626fc25ffd24cbd689046473665225ecab", 0x62}, {&(0x7f0000000440)="6d7ddccc0f4bde59f95c2f2f8e9f63bfd3bf597c226526ed889b6b4921b44e21a9e15c477b2fd46764ed28b5ec13f817dcf9926ae2d4ca4f3b90307305c94c2013cb0470c4c074b1e64dfae11d4a1f481e544b515582563e1bf7eff481deb32e35b59ba9320af0386c875d370ee2ac22283c2a5df00312c4708382afc65bb9367bd247df", 0x84}, {&(0x7f0000000500)="82ecd52e29fc43073eadc02b964dae38fd1a4dda4e8845559de2", 0x1a}, {&(0x7f0000000540)="2918e647a78743e1ab60dbe7e59065085e24f575e5b944ec946ab1f1b5b6c23cc289096b1ed2ba487aac4679a98b854e7b9405783efdaec6b9fa25bdce1f4ea4d08967466b4ad46acca659b2c3eb7568ea3ae4b08dea296cf35efde79dc9941a798b72545ac8ff4d25a62349c8b42975811fff007f74749382f452c1163ef2ade0bab7e7ff0e835f685f107593941da36c647c803d8cb574538d2d27263890dd94b3c9c6eab09e06b38b2e773cb328691a2c7bb7004fdbf2e4a58e41e2e75dbe63266050c0f906d5d9f24dc50072560a96ad1f02c3ecb022f9e9e249daea6a49940728d3b84a11", 0xe7}, {&(0x7f0000000640)="6576f33482e91c81", 0x8}, {&(0x7f0000000880)="3fde694efb6b43c17bf92103d75945c4668991b5a8b6b181db8705a39503a922e50e087b2df249cdc1924ef996bc941b10d8ad0fe3b9cebbd95618ae0bfffde89500f4df8b949435b2b1eadf771b73bbbb7df9872cb63cc5658772f49545175e5ab784c5130d46", 0x67}, {&(0x7f00000006c0)="5d5e0d1d45bc6a12144312041aca0360e3b269367b1ce7921eb6ab68f2e1c8eb352d6710e18688e3f497f17a85fa70d1b5ee5c1dd2c8cd3da4cf5e441c925a9db29858329a7458fce81f0c7afcf50f29539eb1528e5915134f63c899164844e88e2b71c76a4f3fcdc105b6c0bf7041f1e74cee", 0x73}, {&(0x7f0000000240)="b01bdc44d479626417868bd6d9cee7c3312817e415ec2b4cf10e19e2f8263018109c498ba0544c50a2ca9391d79cb6bb9b0450ca516679597197b47c4dca1c6e2844bdea6d9c5c0b49fc09333a7fc62839", 0x51}, {&(0x7f0000000780)="9bf4187f3847f98574142f7e6a924765", 0x10}], 0xa}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="14e9eb2b4328892813f7a65cbad23a6a1484efeba29d36f200bf436d544c1d5f566464e8be16d1e0287842f7a547aa903342772221fcb36e448a980dcc9b46bdc8adad97ab335f8eb53a5931acdc2dd54674028b2a57b06db577355be0646070d18ec93f1ad96ffc497fec11e3cabecceb22504b118f62beea15b30d5f39e466652b2e60d66b39ed8f5c", 0x8a}, {&(0x7f0000000940)="faced4a3c55a0baee904aa452aadf862fbb1665f60bf5ef26c53d0fe2fb3b84cebdca71c7161135d8dfca94143a2cd93642230ea0568fe0687bc2b748fdebee6c271b4358c1cf71be8829dde3d4ed97f70c5ba8a5cd1ed9e", 0x58}, {&(0x7f00000009c0)="fd8af5e10c88a4544d81f9175dc1f0cddcd9501d8e0157b3fa05e888c2015ee5087ba1f4e9453adb7113f76f8aab87999da78bc4ff2637b6eb5110a460f52a631926f7d44be900e725411402ee71a20057642c6a61c07425483391521405a242af2671f5cc30c2a70d88a7b36d8425ad54b5adb03b43894dd70a61b3ad234193b78f629fa4746b89448ad8da47aee1d5733cb46ffa004b1af613612fb5608bcd01ab90f8d1c6c2761b0de2dfe2b1f23e9125603e543d08d64fd1b7a3d96f7b53a476ac2055c109f5d38b8267cd88a358ebc833", 0xd3}], 0x3}}], 0x3, 0x24048844) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x2000) 57.37208032s ago: executing program 0 (id=6047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) unshare(0x2040600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 57.371761s ago: executing program 0 (id=6048): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff060000000000000014f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x12) 57.37110414s ago: executing program 7 (id=6050): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 57.34781097s ago: executing program 7 (id=6051): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000000bf49000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x900000d2) read(r3, 0x0, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 57.32777693s ago: executing program 2 (id=6052): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 57.240063461s ago: executing program 0 (id=6053): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfdef) 57.239742911s ago: executing program 0 (id=6054): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x1, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {0x1, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000004) 57.198497071s ago: executing program 7 (id=6056): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r5) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r3, 0x0, 0x1100000000f336, 0x0) 57.185785561s ago: executing program 0 (id=6057): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xa) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d1fca4f1d0461442e12c4d90f415ec86aa74e137467ce700772d98322478e", 0x20}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 57.177936011s ago: executing program 2 (id=6058): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1, 0x5, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) gettid() setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14}}, 0x50}}, 0x0) 57.120168702s ago: executing program 2 (id=6059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102036c00fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 57.119970312s ago: executing program 2 (id=6060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) 41.131135886s ago: executing program 35 (id=6057): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xa) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d1fca4f1d0461442e12c4d90f415ec86aa74e137467ce700772d98322478e", 0x20}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 41.019297557s ago: executing program 36 (id=6060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) 40.883475568s ago: executing program 37 (id=6056): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r5) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r3, 0x0, 0x1100000000f336, 0x0) 2.600167511s ago: executing program 4 (id=6935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_io_uring_submit(0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$selinux_user(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 2.420371122s ago: executing program 4 (id=6938): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_io_uring_setup(0x2367, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) 2.046697395s ago: executing program 4 (id=6942): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1.980199906s ago: executing program 4 (id=6944): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000140)=0x7) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), 0x0, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'team_slave_0\x00'}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.768810047s ago: executing program 9 (id=6952): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x4270}], 0x1, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4010) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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") request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) 1.652133418s ago: executing program 4 (id=6956): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000140)={0xf97cff8c, 0x8}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x2a020400) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket(0x15, 0x5, 0x0) recvmsg$can_raw(r4, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2) 1.603973758s ago: executing program 3 (id=6971): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@cgroup=r2, 0x11, 0x0, 0x4, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.556138679s ago: executing program 8 (id=6962): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x1016c7, 0x8, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.470251119s ago: executing program 3 (id=6964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.33415614s ago: executing program 3 (id=6966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000001c80)={0x5, 0x10, 0xfa00, {&(0x7f0000001a80), 0xffffffffffffffff, 0x1}}, 0x18) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) truncate(&(0x7f0000000000)='./file0\x00', 0x7fff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) 1.131618741s ago: executing program 9 (id=6968): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.093915162s ago: executing program 9 (id=6970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) close(r0) 1.093678592s ago: executing program 9 (id=6973): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0xd, 0xe, 0x3, 0x9, 0x0, 0x0, 0x16016, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x6, 0xac6}, 0x400, 0xa7, 0x8001, 0x2, 0x9, 0x7, 0x7, 0x0, 0xd9, 0x0, 0x4}, 0x0, 0x0, r1, 0x13) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000f000000cc0002000600000005000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) syncfs(r2) 1.093074622s ago: executing program 9 (id=6975): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.066010772s ago: executing program 1 (id=6976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000380), &(0x7f0000000440)='%ps \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) socket(0x10, 0x3, 0x0) 1.065527762s ago: executing program 1 (id=6977): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r0, 0x2, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000d80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa33"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 1.052927362s ago: executing program 1 (id=6978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 1.034941552s ago: executing program 1 (id=6979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 624.484775ms ago: executing program 9 (id=6980): accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000), 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 584.986475ms ago: executing program 4 (id=6981): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = mq_open(&(0x7f0000000000)='!\x00', 0x80, 0x22, &(0x7f0000000040)={0x1, 0x5, 0xc843, 0x1}) mq_timedsend(r1, &(0x7f0000000080)="656ad1a50f433d8a54caa4c6f33eb26ff1cca9f846ae866fb2a8084f479b342ccf126757f192057db0cf95db3569ab4f2e602bd139f77a72966247115f835ddf30d4", 0x42, 0x8, &(0x7f0000000100)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0x0) waitid(0x1, r2, 0x0, 0x4, 0x0) 482.678536ms ago: executing program 8 (id=6982): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$bsg(0xffffffffffffff9c, 0x0, 0x103400, 0x0) 407.440107ms ago: executing program 8 (id=6983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r2, 0xffffffffffffffff, 0x0) 407.029157ms ago: executing program 3 (id=6984): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000002000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 320.196907ms ago: executing program 3 (id=6985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000400)=0x802, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r2) 319.878877ms ago: executing program 8 (id=6986): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x1a1281) 319.617937ms ago: executing program 3 (id=6987): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x75, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x53, 0x0, @gue={{0x1, 0x0, 0x3, 0xdb, 0x100, @void}, "07d44e2d5e25e70dfd6590edf12c62860b754336c9f59f231bd4554b38ace58d60a193fc72ef53b0105f91cfc63d78cf25aa95dc48da0baebb98f7d992d32fbccc3c43aa4c620a"}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) pselect6(0x40, &(0x7f0000000140)={0x9, 0x10001, 0x80000001, 0x6, 0x80000001, 0x9, 0x6, 0x100000001}, 0x0, &(0x7f0000000200)={0x5c, 0x8, 0x6, 0x100000001, 0x4, 0x5, 0x0, 0x843dcc0}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 243.164998ms ago: executing program 8 (id=6988): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}}, 0x18) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @local, @private=0xa010101}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 132.844369ms ago: executing program 1 (id=6989): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) 116.908759ms ago: executing program 1 (id=6990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r7, &(0x7f0000000740)=""/384, 0x200008c0) write(r5, 0x0, 0x0) 0s ago: executing program 8 (id=6991): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000140)={0xf97cff8c, 0x8}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x2a020400) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket(0x15, 0x5, 0x0) recvmsg$can_raw(r4, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2) kernel console output (not intermixed with test programs): 00-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.752368][T21287] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.766085][T21287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.913456][T21321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6024'. [ 365.959654][T21321] lo speed is unknown, defaulting to 1000 [ 365.966705][T21321] lo speed is unknown, defaulting to 1000 [ 366.043872][T21338] loop7: detected capacity change from 0 to 4096 [ 366.060016][T21338] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.121511][T17729] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.149200][T21354] netlink: 'syz.0.6036': attribute type 10 has an invalid length. [ 366.289244][T21371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6042'. [ 366.433867][T21388] lo speed is unknown, defaulting to 1000 [ 366.440099][T21388] lo speed is unknown, defaulting to 1000 [ 366.571429][T21400] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 381.685751][ T6036] page_pool_release_retry() stalled pool shutdown: id 57, 33 inflight 60 sec [ 382.659130][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 382.659144][ T29] audit: type=1326 audit(2002554966.192:101087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52bc5d19 code=0x7ffc0000 [ 382.693608][ T29] audit: type=1326 audit(2002554966.192:101088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52bc5d19 code=0x7ffc0000 [ 382.717508][ T29] audit: type=1326 audit(2002554966.192:101089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7efe52bc5d19 code=0x7ffc0000 [ 382.741192][ T29] audit: type=1326 audit(2002554966.192:101090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe52bc5d19 code=0x7ffc0000 [ 382.958960][T21422] lo speed is unknown, defaulting to 1000 [ 382.965026][T21422] lo speed is unknown, defaulting to 1000 [ 382.972456][T21434] smc: net device bond0 applied user defined pnetid SYZ0 [ 382.999886][T21434] smc: net device bond0 erased user defined pnetid SYZ0 [ 383.201277][T21437] lo speed is unknown, defaulting to 1000 [ 383.225980][T21437] lo speed is unknown, defaulting to 1000 [ 383.253077][ T3965] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.280697][T21422] chnl_net:caif_netlink_parms(): no params data found [ 383.331548][ T29] audit: type=1326 audit(2002554966.862:101091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.3.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 383.332400][T21444] lo speed is unknown, defaulting to 1000 [ 383.355355][ T29] audit: type=1326 audit(2002554966.862:101092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.3.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 383.361467][T21444] lo speed is unknown, defaulting to 1000 [ 383.398786][ T3965] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.409169][ T29] audit: type=1326 audit(2002554966.932:101093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.3.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 383.432837][ T29] audit: type=1326 audit(2002554966.932:101094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.3.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 383.456741][ T29] audit: type=1326 audit(2002554966.932:101095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.3.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 383.480444][ T29] audit: type=1326 audit(2002554966.932:101096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.3.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 383.586995][T21476] syz.3.6075[21476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.587159][T21476] syz.3.6075[21476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.599154][T21476] syz.3.6075[21476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.648722][ T3965] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.693491][T21422] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.700674][T21422] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.711779][T21422] bridge_slave_0: entered allmulticast mode [ 383.737209][T21422] bridge_slave_0: entered promiscuous mode [ 383.774706][T21422] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.782021][T21422] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.795520][T21422] bridge_slave_1: entered allmulticast mode [ 383.803340][T21422] bridge_slave_1: entered promiscuous mode [ 383.832272][ T3965] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.861675][T21422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.877632][T21422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.913092][T21422] team0: Port device team_slave_0 added [ 383.926182][T21437] chnl_net:caif_netlink_parms(): no params data found [ 383.936912][T21489] tipc: Enabled bearer , priority 7 [ 383.944101][T21422] team0: Port device team_slave_1 added [ 383.991761][T21489] ªªªªªª: renamed from syzkaller0 [ 383.998873][T21489] tipc: Disabling bearer [ 384.027029][T21422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.034069][T21422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.060197][T21422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.071584][T21422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.078618][T21422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.104603][T21422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.119366][T21444] chnl_net:caif_netlink_parms(): no params data found [ 384.164581][ T3965] bridge_slave_1: left allmulticast mode [ 384.170410][ T3965] bridge_slave_1: left promiscuous mode [ 384.176149][ T3965] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.184496][ T3965] bridge_slave_0: left allmulticast mode [ 384.190214][ T3965] bridge_slave_0: left promiscuous mode [ 384.195916][ T3965] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.241062][T21507] xt_HMARK: spi-set and port-set can't be combined [ 384.273273][T21509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6086'. [ 384.313898][T21513] syz.3.6088[21513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.314014][T21513] syz.3.6088[21513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.325542][T21513] syz.3.6088[21513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.361944][ T3965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.395305][ T3965] bond_slave_0: left promiscuous mode [ 384.403798][ T3965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.415056][ T3965] bond_slave_1: left promiscuous mode [ 384.421944][ T3965] bond0 (unregistering): Released all slaves [ 384.455304][T21515] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 384.485738][T21422] hsr_slave_0: entered promiscuous mode [ 384.498036][T21422] hsr_slave_1: entered promiscuous mode [ 384.513580][T21422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.522842][T21422] Cannot create hsr debugfs directory [ 384.528633][T21437] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.535787][T21437] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.535931][T21437] bridge_slave_0: entered allmulticast mode [ 384.536662][T21437] bridge_slave_0: entered promiscuous mode [ 384.555846][T21437] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.562970][T21437] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.570275][T21437] bridge_slave_1: entered allmulticast mode [ 384.577501][T21437] bridge_slave_1: entered promiscuous mode [ 384.588151][ T3965] hsr_slave_0: left promiscuous mode [ 384.594262][ T3965] hsr_slave_1: left promiscuous mode [ 384.601027][ T3965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.608536][ T3965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.618475][ T3965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.625944][ T3965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.636258][ T3965] veth1_macvtap: left promiscuous mode [ 384.641757][ T3965] veth0_macvtap: left promiscuous mode [ 384.647311][ T3965] veth1_vlan: left promiscuous mode [ 384.652537][ T3965] veth0_vlan: left promiscuous mode [ 384.728869][ T3965] team0 (unregistering): Port device team_slave_1 removed [ 384.741083][ T3965] team0 (unregistering): Port device team_slave_0 removed [ 384.804624][T21444] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.811741][T21444] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.819675][T21444] bridge_slave_0: entered allmulticast mode [ 384.829122][T21444] bridge_slave_0: entered promiscuous mode [ 384.841837][T21437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.863168][T21437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.876453][T21444] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.883552][T21444] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.891196][T21444] bridge_slave_1: entered allmulticast mode [ 384.897905][T21444] bridge_slave_1: entered promiscuous mode [ 384.931734][T21437] team0: Port device team_slave_0 added [ 384.939512][T21437] team0: Port device team_slave_1 added [ 384.956897][T21444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.004472][T21437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.011513][T21437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.037421][T21437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.052841][T21444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.063041][T21437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.070045][T21437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.095982][T21437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.121485][T21422] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 385.153475][T21422] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 385.178214][T21444] team0: Port device team_slave_0 added [ 385.185532][T21422] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 385.192759][ T3965] IPVS: stop unused estimator thread 0... [ 385.216992][T21437] hsr_slave_0: entered promiscuous mode [ 385.227392][T21437] hsr_slave_1: entered promiscuous mode [ 385.234710][T21437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.247057][T21437] Cannot create hsr debugfs directory [ 385.253292][T21444] team0: Port device team_slave_1 added [ 385.266070][T21422] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 385.303459][T21444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.310557][T21444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.336633][T21444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.374127][T21444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.381147][T21444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.411304][T21444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.475061][T21422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.509094][T21444] hsr_slave_0: entered promiscuous mode [ 385.515224][T21444] hsr_slave_1: entered promiscuous mode [ 385.521474][T21444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.532145][T21444] Cannot create hsr debugfs directory [ 385.545857][T21568] tipc: New replicast peer: 255.255.255.255 [ 385.551842][T21568] tipc: Enabled bearer , priority 10 [ 385.643142][T21437] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 385.653072][T21422] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.676880][ T3965] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.684063][ T3965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.693065][ T3965] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.700307][ T3965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.715343][T21437] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 385.750644][T21437] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 385.762271][T21437] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 385.838555][T21422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.910758][T21437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.937744][T21437] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.953342][ T4920] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.960432][ T4920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.003014][ T4922] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.010147][ T4922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.125525][T21444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.138107][T21444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 386.154223][T21437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.170152][T21444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 386.188798][T21422] veth0_vlan: entered promiscuous mode [ 386.196838][T21422] veth1_vlan: entered promiscuous mode [ 386.209322][T21422] veth0_macvtap: entered promiscuous mode [ 386.216947][T21422] veth1_macvtap: entered promiscuous mode [ 386.227586][T21422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.234839][T21444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 386.260773][T21422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.268842][T21642] syzkaller0: entered promiscuous mode [ 386.274379][T21642] syzkaller0: entered allmulticast mode [ 386.299460][T21422] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.308263][T21422] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.317017][T21422] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.325729][T21422] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.401866][T21444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.446772][T21444] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.478227][T21662] loop8: detected capacity change from 0 to 1024 [ 386.494201][T21437] veth0_vlan: entered promiscuous mode [ 386.505525][ T3989] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.512638][ T3989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.522708][T21437] veth1_vlan: entered promiscuous mode [ 386.523973][T21662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.551536][T21444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 386.562054][T21444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.590372][ T3989] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.597573][ T3989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.606517][T21422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.655870][T21437] veth0_macvtap: entered promiscuous mode [ 386.674709][T21437] veth1_macvtap: entered promiscuous mode [ 386.694835][T21437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.705396][T21437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.725507][T21437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.747405][T21437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.758053][T21437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.778116][T21437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.793208][T21698] gretap0: entered promiscuous mode [ 386.804522][T21698] netlink: 'syz.8.6113': attribute type 2 has an invalid length. [ 386.812365][T21698] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6113'. [ 386.829227][T21437] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.842128][T21437] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.850896][T21437] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.859720][T21437] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.871774][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6113'. [ 386.920367][T21444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.139097][T21444] veth0_vlan: entered promiscuous mode [ 387.158001][T21444] veth1_vlan: entered promiscuous mode [ 387.205377][T21444] veth0_macvtap: entered promiscuous mode [ 387.217327][T21444] veth1_macvtap: entered promiscuous mode [ 387.243433][T21444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.254028][T21444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.263998][T21444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.274507][T21444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.285690][T21444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.295697][T21444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.306269][T21444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.316117][T21444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.326563][T21444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.337163][T21444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.345533][T21444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.354279][T21444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.363059][T21444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.371837][T21444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.392554][T21770] syzkaller0: Caught tx_queue_len zero misconfig [ 387.527924][T21788] serio: Serial port ptm0 [ 387.602381][T21798] Falling back ldisc for ttyS3. [ 387.821531][T21838] loop4: detected capacity change from 0 to 1024 [ 387.836898][T21838] EXT4-fs: Ignoring removed orlov option [ 387.860084][T21838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.949230][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 387.949243][ T29] audit: type=1326 audit(2002554971.482:101408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.3.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b04dccce7 code=0x7ffc0000 [ 387.979133][ T29] audit: type=1326 audit(2002554971.482:101409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.3.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b04d71f29 code=0x7ffc0000 [ 388.002743][ T29] audit: type=1326 audit(2002554971.482:101410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.3.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b04dccce7 code=0x7ffc0000 [ 388.026449][ T29] audit: type=1326 audit(2002554971.482:101411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.3.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b04d71f29 code=0x7ffc0000 [ 388.050066][ T29] audit: type=1326 audit(2002554971.482:101412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.3.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 388.073968][ T29] audit: type=1326 audit(2002554971.482:101413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.3.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 388.106686][ T29] audit: type=1400 audit(2002554971.492:101414): avc: denied { map } for pid=21858 comm="syz.9.6143" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 388.130935][ T29] audit: type=1400 audit(2002554971.492:101415): avc: denied { execute } for pid=21858 comm="syz.9.6143" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 388.155588][ T29] audit: type=1326 audit(2002554971.542:101416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.3.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 388.179385][ T29] audit: type=1326 audit(2002554971.542:101417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21856 comm="syz.3.6142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b04dccce7 code=0x7ffc0000 [ 388.218886][T21444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.309088][T21875] loop4: detected capacity change from 0 to 512 [ 388.325904][T21875] EXT4-fs: Ignoring removed orlov option [ 388.358500][T21875] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 388.361574][T21877] syzkaller0: entered promiscuous mode [ 388.372570][T21877] syzkaller0: entered allmulticast mode [ 388.376180][T21875] EXT4-fs (loop4): orphan cleanup on readonly fs [ 388.410465][T21875] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6145: bg 0: block 248: padding at end of block bitmap is not set [ 388.470075][T21875] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.6145: Failed to acquire dquot type 1 [ 388.488972][T21875] EXT4-fs (loop4): 1 truncate cleaned up [ 388.507287][T21875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 388.550457][T21875] EXT4-fs: Ignoring removed orlov option [ 388.587455][T21875] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 388.599279][T21875] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 388.647278][T21875] EXT4-fs error (device loop4): __ext4_remount:6749: comm syz.4.6145: Abort forced by user [ 388.649094][T21894] tipc: Enabling of bearer rejected, failed to enable media [ 388.670750][T21875] EXT4-fs (loop4): Remounting filesystem read-only [ 388.677411][T21875] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 388.708032][T21875] ext4 filesystem being remounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.748191][T21875] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 388.757156][T21875] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 388.766205][T21875] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 388.784564][T21444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.874874][T21914] pim6reg1: entered promiscuous mode [ 388.880380][T21914] pim6reg1: entered allmulticast mode [ 388.912477][T21920] netlink: 'syz.3.6160': attribute type 1 has an invalid length. [ 388.979792][T21924] netlink: 'syz.1.6162': attribute type 27 has an invalid length. [ 389.057244][T21927] netlink: 'syz.1.6162': attribute type 27 has an invalid length. [ 389.084927][T21931] loop9: detected capacity change from 0 to 128 [ 389.174099][T21931] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.219775][T21931] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 389.326800][T21437] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.482794][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6167'. [ 389.552025][T21943] pim6reg1: entered promiscuous mode [ 389.557426][T21943] pim6reg1: entered allmulticast mode [ 389.669250][T21948] veth0_vlan: entered allmulticast mode [ 389.787500][T21956] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6174'. [ 389.821856][T21960] loop9: detected capacity change from 0 to 1024 [ 389.847806][T21960] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.897875][T21973] syzkaller0: left allmulticast mode [ 389.929517][T21960] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 389.959967][T21960] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 389.972339][T21960] EXT4-fs (loop9): This should not happen!! Data will be lost [ 389.972339][T21960] [ 389.982190][T21960] EXT4-fs (loop9): Total free blocks count 0 [ 389.988204][T21960] EXT4-fs (loop9): Free/Dirty block details [ 389.994108][T21960] EXT4-fs (loop9): free_blocks=68451041280 [ 389.999968][T21960] EXT4-fs (loop9): dirty_blocks=16 [ 390.005285][T21960] EXT4-fs (loop9): Block reservation details [ 390.011292][T21960] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 390.014883][T21981] ALSA: seq fatal error: cannot create timer (-16) [ 390.052023][T21437] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.249467][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6196'. [ 390.409223][T22017] loop8: detected capacity change from 0 to 1024 [ 390.431689][T22017] EXT4-fs: Ignoring removed nobh option [ 390.437305][T22017] EXT4-fs: Ignoring removed orlov option [ 390.462269][T22017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.614110][T21422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.701947][T22049] pim6reg1: entered promiscuous mode [ 390.707375][T22049] pim6reg1: entered allmulticast mode [ 390.824326][T22058] pim6reg1: entered promiscuous mode [ 390.829755][T22058] pim6reg1: entered allmulticast mode [ 391.022966][T22068] bridge0: port 3(bond0) entered blocking state [ 391.029419][T22068] bridge0: port 3(bond0) entered disabled state [ 391.045717][T22068] bond0: entered allmulticast mode [ 391.050879][T22068] bond_slave_0: entered allmulticast mode [ 391.056661][T22068] bond_slave_1: entered allmulticast mode [ 391.063482][T22068] bond0: entered promiscuous mode [ 391.068558][T22068] bond_slave_0: entered promiscuous mode [ 391.074324][T22068] bond_slave_1: entered promiscuous mode [ 391.080473][T22068] bridge0: port 3(bond0) entered blocking state [ 391.086792][T22068] bridge0: port 3(bond0) entered forwarding state [ 391.176858][T22075] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.197284][T22077] loop4: detected capacity change from 0 to 128 [ 391.202347][T22080] SELinux: syz.1.6226 (22080) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 391.233416][T22077] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.233587][T22075] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.257358][T22077] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 391.310245][T22075] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.321859][T21444] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.378801][T22075] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.429892][T22075] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.442712][T22075] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.451150][T22092] lo speed is unknown, defaulting to 1000 [ 391.453963][T22075] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.474341][T22092] lo speed is unknown, defaulting to 1000 [ 391.500974][T22075] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.561194][T22098] vhci_hcd: invalid port number 223 [ 391.566531][T22098] vhci_hcd: default hub control req: b3c8 v6b02 i00df l46189 [ 391.580892][T22101] bond2: entered promiscuous mode [ 391.586046][T22101] bond2: entered allmulticast mode [ 391.600500][T22101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.614213][T22101] bond2 (unregistering): Released all slaves [ 391.623001][T22104] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 391.699043][T22109] netlink: 1300 bytes leftover after parsing attributes in process `syz.1.6238'. [ 391.866724][T22126] atomic_op ffff888101455128 conn xmit_atomic 0000000000000000 [ 391.902279][T22129] loop4: detected capacity change from 0 to 512 [ 391.910917][T22129] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 391.932356][T22129] EXT4-fs (loop4): 1 truncate cleaned up [ 391.939841][T22129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.098892][T22145] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6254'. [ 392.208526][T22152] Cannot find set identified by id 0 to match [ 392.299539][T22157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 392.506314][T22159] netlink: 'syz.1.6259': attribute type 4 has an invalid length. [ 392.514287][T22159] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6259'. [ 392.745352][T21444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.798047][T22174] pim6reg1: entered promiscuous mode [ 392.803469][T22174] pim6reg1: entered allmulticast mode [ 392.813081][T22176] netlink: 'syz.9.6267': attribute type 10 has an invalid length. [ 392.854685][ T6049] kernel write not supported for file /90/attr/keycreate (pid: 6049 comm: kworker/0:10) [ 392.912456][T22188] netlink: 'syz.1.6272': attribute type 4 has an invalid length. [ 392.953868][T22188] netlink: 'syz.1.6272': attribute type 4 has an invalid length. [ 392.977806][ T6039] lo speed is unknown, defaulting to 1000 [ 392.986615][T22203] loop4: detected capacity change from 0 to 1024 [ 393.024575][T22205] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 393.027722][T22203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.033667][T22199] netlink: 'syz.9.6278': attribute type 1 has an invalid length. [ 393.051725][T22199] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6278'. [ 393.156086][T21444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.193963][T22214] syzkaller0: entered promiscuous mode [ 393.199665][T22214] syzkaller0: entered allmulticast mode [ 393.219876][T22216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6284'. [ 393.237916][T22216] bridge_slave_1: left allmulticast mode [ 393.243602][T22216] bridge_slave_1: left promiscuous mode [ 393.249307][T22216] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.275305][T22216] bridge_slave_0: left allmulticast mode [ 393.281017][T22216] bridge_slave_0: left promiscuous mode [ 393.286742][T22216] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.591995][T22235] SELinux: syz.4.6290 (22235) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 393.637938][T22239] loop4: detected capacity change from 0 to 128 [ 393.666717][T22239] syz.4.6292: attempt to access beyond end of device [ 393.666717][T22239] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 393.830447][T22241] loop4: detected capacity change from 0 to 128 [ 393.866898][T22241] +}[@: attempt to access beyond end of device [ 393.866898][T22241] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 393.874954][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 393.874969][ T29] audit: type=1326 audit(2002554977.402:101570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.8.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf26b15d19 code=0x7ffc0000 [ 393.893491][T22241] +}[@: attempt to access beyond end of device [ 393.893491][T22241] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 393.909831][ T29] audit: type=1326 audit(2002554977.402:101571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.8.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fcf26b15d19 code=0x7ffc0000 [ 393.946881][ T29] audit: type=1326 audit(2002554977.402:101572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.8.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf26b15d19 code=0x7ffc0000 [ 393.953978][T22241] +}[@: attempt to access beyond end of device [ 393.953978][T22241] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 393.970689][ T29] audit: type=1326 audit(2002554977.412:101573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.8.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf26b14680 code=0x7ffc0000 [ 393.984308][T22241] +}[@: attempt to access beyond end of device [ 393.984308][T22241] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 394.006988][ T29] audit: type=1326 audit(2002554977.412:101574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.8.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcf26b17547 code=0x7ffc0000 [ 394.021201][T22241] +}[@: attempt to access beyond end of device [ 394.021201][T22241] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 394.043308][ T29] audit: type=1326 audit(2002554977.412:101575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.8.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf26b15d19 code=0x7ffc0000 [ 394.057299][T22241] +}[@: attempt to access beyond end of device [ 394.057299][T22241] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 394.079479][ T29] audit: type=1326 audit(2002554977.412:101576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.8.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcf26b17547 code=0x7ffc0000 [ 394.079508][ T29] audit: type=1326 audit(2002554977.412:101577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.8.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcf26b1497a code=0x7ffc0000 [ 394.079529][ T29] audit: type=1326 audit(2002554977.412:101578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.8.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf26b15d19 code=0x7ffc0000 [ 394.079565][ T29] audit: type=1326 audit(2002554977.412:101579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22242 comm="syz.8.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf26b15d19 code=0x7ffc0000 [ 394.298689][T22253] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 394.477734][T22257] netlink: 'syz.4.6299': attribute type 1 has an invalid length. [ 394.572754][T22257] bond2: entered allmulticast mode [ 394.578858][T22257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.612155][T22257] bond1: (slave bond2): making interface the new active one [ 394.620286][T22257] bond1: (slave bond2): Enslaving as an active interface with an up link [ 394.631036][T22268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6299'. [ 394.641661][T22268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.954282][T22285] syz.4.6310[22285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.955554][T22285] syz.4.6310[22285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.983205][T22285] syz.4.6310[22285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.024333][T22287] loop8: detected capacity change from 0 to 1024 [ 395.077166][T22287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.106356][T21422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.305192][T22304] loop8: detected capacity change from 0 to 2048 [ 395.338265][T22308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.346992][T22308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.355949][T22304] loop8: p1 < > p4 [ 395.360561][T22304] loop8: p4 size 8388608 extends beyond EOD, truncated [ 395.372132][ T2998] loop8: p1 < > p4 [ 395.376396][ T2998] loop8: p4 size 8388608 extends beyond EOD, truncated [ 395.467888][T22312] pim6reg1: entered promiscuous mode [ 395.473188][T22312] pim6reg1: entered allmulticast mode [ 395.638585][T22318] netlink: 'syz.3.6323': attribute type 1 has an invalid length. [ 395.664833][T22321] lo speed is unknown, defaulting to 1000 [ 395.671134][T22321] lo speed is unknown, defaulting to 1000 [ 395.821781][T22336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6330'. [ 395.894188][T22342] tipc: Enabling of bearer rejected, failed to enable media [ 395.950419][T22345] loop4: detected capacity change from 0 to 8192 [ 396.028071][T22349] syz.3.6336[22349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.028238][T22349] syz.3.6336[22349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.040717][T22349] syz.3.6336[22349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.041404][ T2998] loop8: p1 < > p4 [ 396.082073][ T2998] loop8: p4 size 8388608 extends beyond EOD, truncated [ 396.117470][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 396.128800][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 396.195411][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x1 [ 396.202885][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.210312][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.217727][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.225235][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.232708][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.240284][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x4 [ 396.247715][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.253536][T22361] loop8: detected capacity change from 0 to 512 [ 396.255155][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x2 [ 396.262840][T22361] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 396.268911][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.268937][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.269001][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.269021][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.308842][T22361] EXT4-fs (loop8): 1 truncate cleaned up [ 396.308852][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x4 [ 396.308877][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.308897][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.308916][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.308936][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.315136][T22361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.321999][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.322026][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.379003][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.386406][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.393776][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.401176][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.408634][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.416033][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.423408][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.430870][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.438403][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.445814][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.453190][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.460580][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.467967][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.475380][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.482822][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.490270][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.497662][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.505134][ T6038] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 396.513337][ T6038] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 396.548698][T22370] pim6reg1: entered promiscuous mode [ 396.554036][T22370] pim6reg1: entered allmulticast mode [ 396.571906][T22374] netlink: 'syz.1.6345': attribute type 1 has an invalid length. [ 396.634618][T22377] siw: device registration error -23 [ 396.853823][T22387] loop4: detected capacity change from 0 to 512 [ 396.877798][T22387] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.6361: corrupted xattr block 255: invalid header [ 396.891279][T22387] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 396.904762][T22387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.917320][T22387] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.6361: corrupted xattr block 255: invalid header [ 396.930780][T22387] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 396.943141][T22387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.993773][T22387] loop4: detected capacity change from 0 to 256 [ 397.009791][T22387] FAT-fs (loop4): Directory bread(block 64) failed [ 397.016474][T22387] FAT-fs (loop4): Directory bread(block 65) failed [ 397.023005][T22387] FAT-fs (loop4): Directory bread(block 66) failed [ 397.029714][T22387] FAT-fs (loop4): Directory bread(block 67) failed [ 397.036589][T22387] FAT-fs (loop4): Directory bread(block 68) failed [ 397.043147][T22387] FAT-fs (loop4): Directory bread(block 69) failed [ 397.049688][T22387] FAT-fs (loop4): Directory bread(block 70) failed [ 397.056711][T22387] FAT-fs (loop4): Directory bread(block 71) failed [ 397.063268][T22387] FAT-fs (loop4): Directory bread(block 72) failed [ 397.086255][T21422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.086583][T22387] FAT-fs (loop4): Directory bread(block 73) failed [ 397.138483][T22387] syz.4.6361: attempt to access beyond end of device [ 397.138483][T22387] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 397.177815][T22395] loop8: detected capacity change from 0 to 512 [ 397.199270][T22395] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.6352: corrupted in-inode xattr: invalid ea_ino [ 397.218574][T22395] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.6352: couldn't read orphan inode 15 (err -117) [ 397.231124][T22395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.253849][T22395] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.393285][T22414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.403768][T22414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.467804][T22413] loop4: detected capacity change from 0 to 8192 [ 397.480423][T22413] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 397.573641][T22423] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.580839][T22423] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.602925][T22413] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 397.611833][T22413] FAT-fs (loop4): Filesystem has been set read-only [ 397.619499][T22413] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 397.628519][T22413] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 397.639285][T22424] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 397.669929][T22423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.678058][T21444] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 397.688466][T22423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.720492][T22430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6368'. [ 397.736716][T22423] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.745254][T22423] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.753828][T22423] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.762260][T22423] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.831752][T22439] syz.9.6371[22439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.831916][T22439] syz.9.6371[22439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.843452][T22439] syz.9.6371[22439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.959587][T22449] smc: net device bond0 applied user defined pnetid SYZ0 [ 398.006071][T22449] smc: net device bond0 erased user defined pnetid SYZ0 [ 398.058050][T22461] xt_hashlimit: size too large, truncated to 1048576 [ 398.363243][T22472] syz.8.6384[22472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.420916][T22481] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6388'. [ 398.490126][T22481] lo speed is unknown, defaulting to 1000 [ 398.516702][T22481] lo speed is unknown, defaulting to 1000 [ 398.560590][T22483] loop8: detected capacity change from 0 to 512 [ 398.757162][T22483] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 398.796369][T22483] EXT4-fs (loop8): orphan cleanup on readonly fs [ 398.825780][T22483] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 398.869507][T22483] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.6388: corrupted inode contents [ 398.882167][T22483] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #11: comm syz.8.6388: mark_inode_dirty error [ 398.932952][T22483] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.6388: invalid indirect mapped block 1 (level 1) [ 398.984006][T22483] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.6388: corrupted inode contents [ 399.047753][T22483] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 399.090673][T22483] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.6388: corrupted inode contents [ 399.139278][T22483] EXT4-fs error (device loop8): ext4_truncate:4240: inode #11: comm syz.8.6388: mark_inode_dirty error [ 399.175275][T22483] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 399.200502][T22483] EXT4-fs (loop8): 1 truncate cleaned up [ 399.211268][T22483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 399.224969][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 399.224981][ T29] audit: type=1326 audit(2002554982.752:101638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.9.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f104e5d19 code=0x7ffc0000 [ 399.254970][ T29] audit: type=1326 audit(2002554982.752:101639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.9.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f104e5d19 code=0x7ffc0000 [ 399.316319][T21422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.331498][ T29] audit: type=1326 audit(2002554982.812:101640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.9.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f104e5d19 code=0x7ffc0000 [ 399.355401][ T29] audit: type=1326 audit(2002554982.812:101641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.9.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f104e5d19 code=0x7ffc0000 [ 399.379152][ T29] audit: type=1326 audit(2002554982.812:101642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.9.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f104e5d19 code=0x7ffc0000 [ 399.402950][ T29] audit: type=1326 audit(2002554982.822:101643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.9.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f104e5d19 code=0x7ffc0000 [ 399.426605][ T29] audit: type=1326 audit(2002554982.822:101644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.9.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f104e5d19 code=0x7ffc0000 [ 399.450502][ T29] audit: type=1326 audit(2002554982.822:101645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.9.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f5f104e5d19 code=0x7ffc0000 [ 399.474263][ T29] audit: type=1326 audit(2002554982.822:101646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.9.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f104e5d19 code=0x7ffc0000 [ 399.498123][ T29] audit: type=1326 audit(2002554982.822:101647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.9.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5f104e5d19 code=0x7ffc0000 [ 399.541629][T22519] pim6reg1: entered promiscuous mode [ 399.547026][T22519] pim6reg1: entered allmulticast mode [ 399.720004][T22529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22529 comm=syz.8.6407 [ 399.744648][T22529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22529 comm=syz.8.6407 [ 399.761716][T22529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22529 comm=syz.8.6407 [ 399.783331][T22529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22529 comm=syz.8.6407 [ 399.802775][T22529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22529 comm=syz.8.6407 [ 399.820836][T22529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22529 comm=syz.8.6407 [ 399.834843][T22529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22529 comm=syz.8.6407 [ 399.850322][T22529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22529 comm=syz.8.6407 [ 399.863050][T22529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22529 comm=syz.8.6407 [ 399.887243][T22529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22529 comm=syz.8.6407 [ 400.102080][T22565] syz.9.6424[22565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.102187][T22565] syz.9.6424[22565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.113956][T22565] syz.9.6424[22565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.176555][T22569] @: renamed from bond0 (while UP) [ 400.270717][T22578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6429'. [ 400.297266][T22578] lo speed is unknown, defaulting to 1000 [ 400.306615][T22578] lo speed is unknown, defaulting to 1000 [ 400.377083][T22585] loop4: detected capacity change from 0 to 512 [ 400.386135][T22585] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 400.401951][T22585] EXT4-fs (loop4): orphan cleanup on readonly fs [ 400.415803][T22585] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 400.431390][T22585] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6429: corrupted inode contents [ 400.504114][T22585] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #11: comm syz.4.6429: mark_inode_dirty error [ 400.531892][T22599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.582287][T22601] syz.1.6439[22601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.582414][T22601] syz.1.6439[22601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.596162][T22599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.596786][T22585] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6429: invalid indirect mapped block 1 (level 1) [ 400.625800][T22601] syz.1.6439[22601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.638354][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6440'. [ 400.663853][T22601] syzkaller0: Caught tx_queue_len zero misconfig [ 400.699540][T22585] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6429: corrupted inode contents [ 400.725742][T22585] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 400.762552][T22585] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6429: corrupted inode contents [ 400.798142][T22585] EXT4-fs error (device loop4): ext4_truncate:4240: inode #11: comm syz.4.6429: mark_inode_dirty error [ 400.840222][T22585] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 400.865853][T22585] EXT4-fs (loop4): 1 truncate cleaned up [ 400.876997][T22585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 401.010142][T22628] netlink: 'syz.8.6449': attribute type 13 has an invalid length. [ 401.018580][T21444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.041865][T22628] gretap0: refused to change device tx_queue_len [ 401.048315][T22628] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 401.228548][T22653] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6462'. [ 401.280630][T22653] lo speed is unknown, defaulting to 1000 [ 401.295964][T22653] lo speed is unknown, defaulting to 1000 [ 401.327822][T22666] loop8: detected capacity change from 0 to 512 [ 401.343402][T22666] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 401.364345][T22665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6466'. [ 401.400757][T22666] EXT4-fs (loop8): orphan cleanup on readonly fs [ 401.417714][T22665] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.425984][T22665] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.434187][T22665] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.442459][T22665] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.447711][T22666] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 401.450803][T22665] vxlan0: entered promiscuous mode [ 401.470234][T22665] vxlan0: entered allmulticast mode [ 401.506005][T22666] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.6462: corrupted inode contents [ 401.538981][T22666] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #11: comm syz.8.6462: mark_inode_dirty error [ 401.569382][T22666] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.6462: invalid indirect mapped block 1 (level 1) [ 401.606716][T22666] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.6462: corrupted inode contents [ 401.638933][T22666] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 401.663350][T22666] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.6462: corrupted inode contents [ 401.695159][T22666] EXT4-fs error (device loop8): ext4_truncate:4240: inode #11: comm syz.8.6462: mark_inode_dirty error [ 401.711297][T22666] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 401.726435][T22666] EXT4-fs (loop8): 1 truncate cleaned up [ 401.732638][T22666] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 401.794364][T21422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.085392][T22730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6490'. [ 402.135250][T22730] lo speed is unknown, defaulting to 1000 [ 402.150887][T22730] lo speed is unknown, defaulting to 1000 [ 402.171477][T22731] loop4: detected capacity change from 0 to 512 [ 402.213905][T22731] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 402.261716][T22731] EXT4-fs (loop4): orphan cleanup on readonly fs [ 402.269287][T22731] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 402.302878][T22731] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6490: corrupted inode contents [ 402.372993][T22731] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #11: comm syz.4.6490: mark_inode_dirty error [ 402.400232][T22731] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6490: invalid indirect mapped block 1 (level 1) [ 402.439090][T22731] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6490: corrupted inode contents [ 402.454122][T22731] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 402.474178][T22731] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6490: corrupted inode contents [ 402.525075][T22731] EXT4-fs error (device loop4): ext4_truncate:4240: inode #11: comm syz.4.6490: mark_inode_dirty error [ 402.556112][T22731] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 402.565538][T22731] EXT4-fs (loop4): 1 truncate cleaned up [ 402.574301][T22731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 402.695074][T21444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.741888][T22737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6491'. [ 402.908928][T22746] @: (slave bond_slave_0): Releasing backup interface [ 402.933550][T22746] @: (slave bond_slave_1): Releasing backup interface [ 402.973984][T22746] team0: Port device team_slave_0 removed [ 402.993575][T22746] team0: Port device team_slave_1 removed [ 403.006968][T22746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.014398][T22746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.045951][T22746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.053389][T22746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.101168][T22746] bond1: (slave bond2): Releasing backup interface [ 403.204317][T22760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6503'. [ 403.245945][T22760] lo speed is unknown, defaulting to 1000 [ 403.252131][T22760] lo speed is unknown, defaulting to 1000 [ 403.284741][T22764] loop4: detected capacity change from 0 to 512 [ 403.306536][T22764] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 403.343827][T22764] EXT4-fs (loop4): orphan cleanup on readonly fs [ 403.350502][T22764] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 403.365325][T22764] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6503: corrupted inode contents [ 403.396604][T22764] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #11: comm syz.4.6503: mark_inode_dirty error [ 403.433555][T22774] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6508'. [ 403.450531][T22764] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6503: invalid indirect mapped block 1 (level 1) [ 403.486246][T22764] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6503: corrupted inode contents [ 403.667017][T22794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6516'. [ 403.677092][T22794] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 403.915992][T22764] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 403.924929][T22764] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6503: corrupted inode contents [ 403.955469][T22764] EXT4-fs error (device loop4): ext4_truncate:4240: inode #11: comm syz.4.6503: mark_inode_dirty error [ 404.010380][T22764] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 404.065666][T22764] EXT4-fs (loop4): 1 truncate cleaned up [ 404.074827][T22764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 404.150188][T21444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.192858][T22831] loop4: detected capacity change from 0 to 128 [ 404.201928][T22830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6532'. [ 404.267424][T22831] syz.4.6529: attempt to access beyond end of device [ 404.267424][T22831] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 404.309305][T22840] loop9: detected capacity change from 0 to 2048 [ 404.329757][T22831] syz.4.6529: attempt to access beyond end of device [ 404.329757][T22831] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 404.343901][T22840] EXT4-fs: Ignoring removed oldalloc option [ 404.344104][T22831] syz.4.6529: attempt to access beyond end of device [ 404.344104][T22831] loop4: rw=0, sector=177, nr_sectors = 8 limit=128 [ 404.364254][T22831] syz.4.6529: attempt to access beyond end of device [ 404.364254][T22831] loop4: rw=0, sector=177, nr_sectors = 8 limit=128 [ 404.397429][T22840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.414734][T22831] syz.4.6529: attempt to access beyond end of device [ 404.414734][T22831] loop4: rw=0, sector=177, nr_sectors = 8 limit=128 [ 404.429405][T22831] syz.4.6529: attempt to access beyond end of device [ 404.429405][T22831] loop4: rw=0, sector=177, nr_sectors = 8 limit=128 [ 404.456622][T22852] pim6reg1: entered promiscuous mode [ 404.461960][T22852] pim6reg1: entered allmulticast mode [ 404.512433][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 404.512445][ T29] audit: type=1326 audit(2002554988.042:101876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22853 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 404.550561][ T29] audit: type=1326 audit(2002554988.082:101877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22853 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 404.574331][ T29] audit: type=1326 audit(2002554988.082:101878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22853 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 404.598055][ T29] audit: type=1326 audit(2002554988.082:101879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22853 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 404.621762][ T29] audit: type=1326 audit(2002554988.082:101880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22853 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 404.645536][ T29] audit: type=1326 audit(2002554988.082:101881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22853 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 404.669391][ T29] audit: type=1326 audit(2002554988.082:101882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22853 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 404.693067][ T29] audit: type=1326 audit(2002554988.082:101883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22853 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 404.716981][ T29] audit: type=1326 audit(2002554988.082:101884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22853 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 404.740714][ T29] audit: type=1326 audit(2002554988.082:101885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22853 comm="syz.4.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 404.765534][T21437] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.829009][T22859] loop4: detected capacity change from 0 to 128 [ 404.848546][T22863] pim6reg1: entered promiscuous mode [ 404.853883][T22863] pim6reg1: entered allmulticast mode [ 404.880839][T22859] syz.4.6544: attempt to access beyond end of device [ 404.880839][T22859] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 404.914470][T22865] loop9: detected capacity change from 0 to 8192 [ 405.227534][T22897] loop8: detected capacity change from 0 to 256 [ 405.365418][T22910] loop8: detected capacity change from 0 to 512 [ 405.404869][T22913] bond0: (slave dummy0): Releasing backup interface [ 405.413169][T22913] bond0: (slave bond_slave_0): Releasing backup interface [ 405.421025][T22910] EXT4-fs (loop8): too many log groups per flexible block group [ 405.428756][T22910] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 405.436359][T22910] EXT4-fs (loop8): mount failed [ 405.442352][T22913] bond0: (slave bond_slave_1): Releasing backup interface [ 405.472863][T22913] bond0: (slave geneve1): Releasing backup interface [ 405.724590][T22876] syz.9.6551 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 405.739326][T22876] CPU: 1 UID: 0 PID: 22876 Comm: syz.9.6551 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 405.750106][T22876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 405.760163][T22876] Call Trace: [ 405.763433][T22876] [ 405.766357][T22876] dump_stack_lvl+0xf2/0x150 [ 405.770956][T22876] dump_stack+0x15/0x1a [ 405.775116][T22876] dump_header+0x83/0x2d0 [ 405.779440][T22876] oom_kill_process+0x341/0x4c0 [ 405.784283][T22876] out_of_memory+0x9af/0xbe0 [ 405.789021][T22876] ? css_next_descendant_pre+0x11c/0x140 [ 405.794653][T22876] mem_cgroup_out_of_memory+0x13e/0x190 [ 405.800235][T22876] try_charge_memcg+0x508/0x7f0 [ 405.805120][T22876] obj_cgroup_charge_pages+0xbd/0x1a0 [ 405.810583][T22876] __memcg_kmem_charge_page+0x9d/0x170 [ 405.816047][T22876] __alloc_pages_noprof+0x1bc/0x340 [ 405.821318][T22876] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 405.826747][T22876] alloc_pages_noprof+0xe1/0x100 [ 405.831680][T22876] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 405.837574][T22876] __kvmalloc_node_noprof+0x121/0x170 [ 405.842987][T22876] ? ip_set_alloc+0x1f/0x30 [ 405.847496][T22876] ip_set_alloc+0x1f/0x30 [ 405.851850][T22876] hash_ipport_create+0x4dc/0x9f0 [ 405.856951][T22876] ? __pfx_hash_ipport_create+0x10/0x10 [ 405.862579][T22876] ip_set_create+0x359/0x8a0 [ 405.867184][T22876] ? memchr+0x1/0x50 [ 405.871089][T22876] ? __nla_parse+0x40/0x60 [ 405.875585][T22876] nfnetlink_rcv_msg+0x4a9/0x570 [ 405.880543][T22876] netlink_rcv_skb+0x12c/0x230 [ 405.885306][T22876] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 405.890769][T22876] nfnetlink_rcv+0x16c/0x15d0 [ 405.895443][T22876] ? arch_scale_cpu_capacity+0x15/0x70 [ 405.900911][T22876] ? sched_balance_rq+0x69d/0x1bb0 [ 405.906030][T22876] ? should_fail_ex+0x31/0x230 [ 405.910800][T22876] ? selinux_nlmsg_lookup+0x119/0x8c0 [ 405.916214][T22876] ? __rcu_read_unlock+0x34/0x70 [ 405.921220][T22876] ? __netlink_lookup+0x253/0x290 [ 405.926269][T22876] netlink_unicast+0x599/0x670 [ 405.931034][T22876] netlink_sendmsg+0x5cc/0x6e0 [ 405.935798][T22876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.941139][T22876] __sock_sendmsg+0x140/0x180 [ 405.945925][T22876] ____sys_sendmsg+0x312/0x410 [ 405.950688][T22876] __sys_sendmsg+0x19d/0x230 [ 405.955291][T22876] __x64_sys_sendmsg+0x46/0x50 [ 405.960078][T22876] x64_sys_call+0x2734/0x2dc0 [ 405.964747][T22876] do_syscall_64+0xc9/0x1c0 [ 405.969243][T22876] ? clear_bhb_loop+0x55/0xb0 [ 405.973915][T22876] ? clear_bhb_loop+0x55/0xb0 [ 405.978585][T22876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.984557][T22876] RIP: 0033:0x7f5f104e5d19 [ 405.988969][T22876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.008574][T22876] RSP: 002b:00007f5f0eb57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.016979][T22876] RAX: ffffffffffffffda RBX: 00007f5f106d5fa0 RCX: 00007f5f104e5d19 [ 406.024992][T22876] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 406.032957][T22876] RBP: 00007f5f10561a20 R08: 0000000000000000 R09: 0000000000000000 [ 406.040920][T22876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.048882][T22876] R13: 0000000000000000 R14: 00007f5f106d5fa0 R15: 00007ffcb700fc88 [ 406.056884][T22876] [ 406.060358][T22876] memory: usage 307200kB, limit 307200kB, failcnt 118 [ 406.067273][T22876] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 406.075223][T22876] kmem: usage 306992kB, limit 9007199254740988kB, failcnt 0 [ 406.082621][T22876] Memory cgroup stats for /syz9: [ 406.116788][T22876] cache 0 [ 406.124737][T22876] rss 212992 [ 406.127991][T22876] shmem 0 [ 406.130931][T22876] mapped_file 0 [ 406.134400][T22876] dirty 0 [ 406.137502][T22876] writeback 0 [ 406.141096][T22876] workingset_refault_anon 36 [ 406.145927][T22876] workingset_refault_file 0 [ 406.150442][T22876] swap 0 [ 406.153291][T22876] swapcached 20480 [ 406.157034][T22876] pgpgin 13926 [ 406.160402][T22876] pgpgout 13874 [ 406.163859][T22876] pgfault 25750 [ 406.167336][T22876] pgmajfault 8 [ 406.170708][T22876] inactive_anon 180224 [ 406.174838][T22876] active_anon 32768 [ 406.178659][T22876] inactive_file 0 [ 406.182318][T22876] active_file 0 [ 406.185803][T22876] unevictable 0 [ 406.189266][T22876] hierarchical_memory_limit 314572800 [ 406.194698][T22876] hierarchical_memsw_limit 9223372036854771712 [ 406.205108][T22876] total_cache 0 [ 406.208593][T22876] total_rss 212992 [ 406.212321][T22876] total_shmem 0 [ 406.215824][T22876] total_mapped_file 0 [ 406.219864][T22876] total_dirty 0 [ 406.223320][T22876] total_writeback 0 [ 406.227208][T22876] total_workingset_refault_anon 36 [ 406.232360][T22876] total_workingset_refault_file 0 [ 406.237506][T22876] total_swap 0 [ 406.240929][T22876] total_swapcached 20480 [ 406.245159][T22876] total_pgpgin 13926 [ 406.249059][T22876] total_pgpgout 13874 [ 406.253062][T22876] total_pgfault 25750 [ 406.257064][T22876] total_pgmajfault 8 [ 406.260934][T22876] total_inactive_anon 180224 [ 406.265513][T22876] total_active_anon 32768 [ 406.269838][T22876] total_inactive_file 0 [ 406.273982][T22876] total_active_file 0 [ 406.278035][T22876] total_unevictable 0 [ 406.282048][T22876] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.6551,pid=22875,uid=0 [ 406.296769][T22876] Memory cgroup out of memory: Killed process 22876 (syz.9.6551) total-vm:95564kB, anon-rss:916kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 406.518252][T22971] __nla_validate_parse: 1 callbacks suppressed [ 406.518268][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6590'. [ 406.610760][T22979] hsr_slave_0: left promiscuous mode [ 406.620502][T22979] hsr_slave_1: left promiscuous mode [ 406.824643][T22999] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6600'. [ 406.977329][T22969] loop8: detected capacity change from 0 to 256 [ 407.000503][T22969] FAT-fs (loop8): bogus number of FAT sectors [ 407.006657][T22969] FAT-fs (loop8): Can't find a valid FAT filesystem [ 407.085899][T23021] loop9: detected capacity change from 0 to 8192 [ 407.097993][T23021] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.143400][T23025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6609'. [ 407.256041][T23040] loop9: detected capacity change from 0 to 512 [ 407.262750][T23040] EXT4-fs: Ignoring removed i_version option [ 407.307732][T23040] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c018, mo2=0002] [ 407.316066][T23040] System zones: 0-2, 18-18, 34-35 [ 407.319904][T23044] loop8: detected capacity change from 0 to 256 [ 407.328732][T23040] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.345809][T23040] ext4 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.372490][T23040] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 407.437237][T21437] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.611587][T23064] macvlan1: entered promiscuous mode [ 407.619495][T23060] loop9: detected capacity change from 0 to 2048 [ 407.626586][T23064] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6625'. [ 407.648142][T23064] macvlan1 (unregistering): left promiscuous mode [ 407.672858][T23060] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.785308][T23076] loop8: detected capacity change from 0 to 2048 [ 407.814230][T21437] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.819831][T23076] loop8: p1 p2 p3 [ 407.857913][ T2998] loop8: p1 p2 p3 [ 407.946372][T23092] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.955189][T23092] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.964070][T23092] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.972869][T23092] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.003666][T23092] vxlan0: entered promiscuous mode [ 408.008885][T23092] vxlan0: entered allmulticast mode [ 408.024992][T23092] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.033990][T23092] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.042932][T23092] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.051890][T23092] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.174363][T23101] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6639'. [ 408.467098][T23125] syz.1.6649[23125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.467253][T23125] syz.1.6649[23125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.496290][T23125] syz.1.6649[23125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.571292][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6653'. [ 408.602044][T23135] loop8: detected capacity change from 0 to 8192 [ 408.602127][T23132] lo speed is unknown, defaulting to 1000 [ 408.616811][T23132] lo speed is unknown, defaulting to 1000 [ 408.633207][T23138] loop9: detected capacity change from 0 to 2048 [ 408.643015][T23138] EXT4-fs: Ignoring removed bh option [ 408.685833][T23135] loop9: detected capacity change from 2048 to 2047 [ 408.693718][T23138] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 408.774831][T23146] pimreg: entered allmulticast mode [ 408.807114][T23148] hsr_slave_0: left promiscuous mode [ 408.818430][T23148] hsr_slave_1: left promiscuous mode [ 408.920800][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6665'. [ 409.661553][ T6049] kernel write not supported for file /3395/attr/keycreate (pid: 6049 comm: kworker/0:10) [ 409.881735][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 409.881751][ T29] audit: type=1326 audit(2002554993.412:102134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23187 comm="syz.3.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 409.911815][ T29] audit: type=1326 audit(2002554993.412:102135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23187 comm="syz.3.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 409.935720][ T29] audit: type=1326 audit(2002554993.412:102136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23187 comm="syz.3.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 409.936676][T23188] hsr_slave_0: left promiscuous mode [ 409.959480][ T29] audit: type=1326 audit(2002554993.412:102137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23187 comm="syz.3.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 409.959511][ T29] audit: type=1326 audit(2002554993.412:102138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23187 comm="syz.3.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 409.959538][ T29] audit: type=1326 audit(2002554993.412:102139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23187 comm="syz.3.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 410.036226][ T29] audit: type=1326 audit(2002554993.412:102140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23187 comm="syz.3.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 410.059989][ T29] audit: type=1326 audit(2002554993.412:102141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23187 comm="syz.3.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 410.083742][ T29] audit: type=1326 audit(2002554993.412:102142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23187 comm="syz.3.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 410.107380][ T29] audit: type=1326 audit(2002554993.412:102143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23187 comm="syz.3.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 410.161416][T23198] netlink: 'syz.1.6680': attribute type 10 has an invalid length. [ 410.169799][T23198] netlink: 'syz.1.6680': attribute type 10 has an invalid length. [ 410.175402][T23196] syz_tun: entered promiscuous mode [ 410.183340][T23196] vlan2: entered promiscuous mode [ 410.190134][T23196] syz_tun: left promiscuous mode [ 410.451692][T23224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6692'. [ 410.508241][T23224] lo speed is unknown, defaulting to 1000 [ 410.520974][T23224] lo speed is unknown, defaulting to 1000 [ 410.613738][T23229] netlink: 'syz.9.6693': attribute type 10 has an invalid length. [ 410.633993][T23229] netlink: 'syz.9.6693': attribute type 10 has an invalid length. [ 410.749467][T23240] syz.8.6695[23240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.749639][T23240] syz.8.6695[23240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.765765][T23240] syz.8.6695[23240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.880783][T23256] syz.1.6704[23256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.892620][T23256] syz.1.6704[23256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.904330][T23256] syz.1.6704[23256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.030241][T23263] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6706'. [ 411.067301][T23263] lo speed is unknown, defaulting to 1000 [ 411.073668][T23263] lo speed is unknown, defaulting to 1000 [ 411.080123][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6704'. [ 411.109464][T23265] loop8: detected capacity change from 0 to 512 [ 411.183128][T23265] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 411.203947][T23265] EXT4-fs (loop8): orphan cleanup on readonly fs [ 411.210536][T23265] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 411.225484][T23265] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.6706: corrupted inode contents [ 411.254521][T23265] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #11: comm syz.8.6706: mark_inode_dirty error [ 411.273077][T23265] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.6706: invalid indirect mapped block 1 (level 1) [ 411.295695][T23265] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.6706: corrupted inode contents [ 411.308857][T23265] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 411.328136][T23265] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.6706: corrupted inode contents [ 411.340450][T23265] EXT4-fs error (device loop8): ext4_truncate:4240: inode #11: comm syz.8.6706: mark_inode_dirty error [ 411.352401][T23265] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 411.362216][T23265] EXT4-fs (loop8): 1 truncate cleaned up [ 411.368588][T23265] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 411.401964][T21422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.433320][T23290] pim6reg1: entered promiscuous mode [ 411.438823][T23290] pim6reg1: entered allmulticast mode [ 411.784743][T23313] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6726'. [ 411.808920][T23313] lo speed is unknown, defaulting to 1000 [ 411.815099][T23313] lo speed is unknown, defaulting to 1000 [ 411.848940][T23313] loop8: detected capacity change from 0 to 512 [ 411.855618][T23313] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 411.864246][T23313] EXT4-fs (loop8): orphan cleanup on readonly fs [ 411.870820][T23313] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 411.885908][T23313] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.6726: corrupted inode contents [ 411.898136][T23313] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #11: comm syz.8.6726: mark_inode_dirty error [ 411.909922][T23313] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.6726: invalid indirect mapped block 1 (level 1) [ 411.924017][T23313] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.6726: corrupted inode contents [ 411.936186][T23313] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 411.944895][T23313] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.6726: corrupted inode contents [ 411.957140][T23313] EXT4-fs error (device loop8): ext4_truncate:4240: inode #11: comm syz.8.6726: mark_inode_dirty error [ 411.968363][T23313] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 411.977483][T23313] EXT4-fs (loop8): 1 truncate cleaned up [ 411.983576][T23313] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 412.004140][T21422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.024221][T23317] netlink: 100 bytes leftover after parsing attributes in process `syz.8.6727'. [ 412.185525][T23330] loop9: detected capacity change from 0 to 512 [ 412.193083][T23330] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 412.219868][T23330] EXT4-fs (loop9): orphan cleanup on readonly fs [ 412.226565][T23330] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 412.244003][T23330] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #11: comm syz.9.6732: corrupted inode contents [ 412.256831][T23330] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #11: comm syz.9.6732: mark_inode_dirty error [ 412.270404][T23330] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6732: invalid indirect mapped block 1 (level 1) [ 412.272301][T23335] netlink: 'syz.1.6734': attribute type 4 has an invalid length. [ 412.285473][T23330] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #11: comm syz.9.6732: corrupted inode contents [ 412.304768][T23330] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 412.309379][ T6039] lo speed is unknown, defaulting to 1000 [ 412.313911][T23330] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #11: comm syz.9.6732: corrupted inode contents [ 412.333459][T23330] EXT4-fs error (device loop9): ext4_truncate:4240: inode #11: comm syz.9.6732: mark_inode_dirty error [ 412.345571][T23330] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 412.379758][T23330] EXT4-fs (loop9): 1 truncate cleaned up [ 412.397109][T23330] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 412.418509][T23330] netlink: 'syz.9.6732': attribute type 21 has an invalid length. [ 412.436304][T23330] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6732'. [ 412.477726][T21437] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.755897][T23340] Set syz1 is full, maxelem 65536 reached [ 413.050418][T23356] syzkaller0: entered promiscuous mode [ 413.056520][T23356] syzkaller0: entered allmulticast mode [ 413.204451][T23371] cgroup: Invalid name [ 413.399067][T23381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6753'. [ 413.427899][T23381] lo speed is unknown, defaulting to 1000 [ 413.433852][T23386] selinux_netlink_send: 144 callbacks suppressed [ 413.433865][T23386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23386 comm=syz.1.6755 [ 413.433960][T23381] lo speed is unknown, defaulting to 1000 [ 413.441156][T23386] netlink: 'syz.1.6755': attribute type 7 has an invalid length. [ 413.475409][T23387] loop4: detected capacity change from 0 to 512 [ 413.507572][T23387] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 413.541664][T23387] EXT4-fs (loop4): orphan cleanup on readonly fs [ 413.580298][T23387] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 413.596798][T23387] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6753: corrupted inode contents [ 413.612279][T23387] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #11: comm syz.4.6753: mark_inode_dirty error [ 413.626165][T23387] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6753: invalid indirect mapped block 1 (level 1) [ 413.640768][T23387] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6753: corrupted inode contents [ 413.670251][T23387] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 413.689384][T23393] wg2: entered promiscuous mode [ 413.694286][T23393] wg2: entered allmulticast mode [ 413.701749][T23387] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6753: corrupted inode contents [ 413.730705][T23387] EXT4-fs error (device loop4): ext4_truncate:4240: inode #11: comm syz.4.6753: mark_inode_dirty error [ 413.753539][T23387] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 413.763633][T23387] EXT4-fs (loop4): 1 truncate cleaned up [ 413.770275][T23387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 413.811415][T21444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.820181][T23398] tipc: Enabled bearer , priority 7 [ 413.843426][T23398] ªªªªªª: renamed from syzkaller0 (while UP) [ 413.850830][T23398] tipc: Disabling bearer [ 413.853103][T23402] loop4: detected capacity change from 0 to 256 [ 414.124076][T23425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6769'. [ 414.149102][T23425] lo speed is unknown, defaulting to 1000 [ 414.155262][T23425] lo speed is unknown, defaulting to 1000 [ 414.909065][T23459] syz.4.6781[23459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.909202][T23459] syz.4.6781[23459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.923493][T23459] syz.4.6781[23459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.935395][T23459] syz.4.6781[23459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.946924][T23459] syz.4.6781[23459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.958415][T23459] syz.4.6781[23459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.019612][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 415.019627][ T29] audit: type=1326 audit(2002554998.552:102337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23460 comm="syz.4.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 415.062784][ T29] audit: type=1326 audit(2002554998.582:102338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23460 comm="syz.4.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 415.086537][ T29] audit: type=1326 audit(2002554998.582:102339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23460 comm="syz.4.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 415.110334][ T29] audit: type=1326 audit(2002554998.582:102340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23460 comm="syz.4.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 415.123991][T23463] loop8: detected capacity change from 0 to 164 [ 415.134129][ T29] audit: type=1326 audit(2002554998.582:102341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23460 comm="syz.4.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 415.134154][ T29] audit: type=1326 audit(2002554998.592:102342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23460 comm="syz.4.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 415.169944][T23463] rock: directory entry would overflow storage [ 415.188147][ T29] audit: type=1326 audit(2002554998.592:102343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23460 comm="syz.4.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 415.193998][T23463] rock: sig=0x66, size=4, remaining=3 [ 415.218401][T23461] netlink: 'syz.4.6782': attribute type 4 has an invalid length. [ 415.223028][ T29] audit: type=1326 audit(2002554998.592:102344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23460 comm="syz.4.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 415.254555][ T29] audit: type=1326 audit(2002554998.592:102345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23460 comm="syz.4.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 415.278448][ T29] audit: type=1326 audit(2002554998.592:102346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23460 comm="syz.4.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d2bc5d19 code=0x7ffc0000 [ 415.346507][T23470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6785'. [ 415.375319][T23470] lo speed is unknown, defaulting to 1000 [ 415.383451][T23470] lo speed is unknown, defaulting to 1000 [ 415.439983][T23475] loop4: detected capacity change from 0 to 512 [ 415.467900][T23475] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 415.470368][T23480] loop9: detected capacity change from 0 to 2048 [ 415.495318][T23475] EXT4-fs (loop4): orphan cleanup on readonly fs [ 415.496099][T23480] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.502613][T23475] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 415.513907][T23480] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.539173][T23475] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6785: corrupted inode contents [ 415.553323][T23475] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #11: comm syz.4.6785: mark_inode_dirty error [ 415.569663][T23475] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6785: invalid indirect mapped block 1 (level 1) [ 415.589564][T23475] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6785: corrupted inode contents [ 415.602085][T23475] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 415.613967][T23480] vlan2: entered promiscuous mode [ 415.621124][T23475] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.6785: corrupted inode contents [ 415.633195][T23475] EXT4-fs error (device loop4): ext4_truncate:4240: inode #11: comm syz.4.6785: mark_inode_dirty error [ 415.647578][T23475] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 415.656853][T23475] EXT4-fs (loop4): 1 truncate cleaned up [ 415.662976][T23475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 415.692187][T21437] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.725493][T21444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.745492][T23500] loop9: detected capacity change from 0 to 256 [ 415.798944][T23509] tipc: Started in network mode [ 415.803868][T23509] tipc: Node identity 5a86c95da77a, cluster identity 4711 [ 415.811032][T23509] tipc: Enabled bearer , priority 7 [ 415.827926][T23509] ªªªªªª: renamed from syzkaller0 [ 415.834259][T23509] tipc: Disabling bearer [ 415.874739][T23512] loop4: detected capacity change from 0 to 8192 [ 415.886363][T23512] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000006' [ 415.922856][T23516] rdma_rxe: rxe_newlink: failed to add team0 [ 415.951643][T23518] loop9: detected capacity change from 0 to 512 [ 415.965819][T23518] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 415.990604][T23518] EXT4-fs (loop9): 1 truncate cleaned up [ 415.996918][T23518] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.014949][T23518] msdos: Unknown parameter '18446744073709551615Oþø¥þ›ŸG5”û©s+01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 416.014949][T23518] n'º|$@OOݱµ’-®+·el' [ 416.030465][T23523] serio: Serial port ptm0 [ 416.046302][T21437] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.071566][T23525] loop9: detected capacity change from 0 to 2048 [ 416.078456][T23525] ext4: Unknown parameter 'smackfsdef' [ 416.115242][T23530] netlink: 'syz.1.6806': attribute type 2 has an invalid length. [ 416.123069][T23530] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 416.142938][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6808'. [ 416.151946][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6808'. [ 416.160830][T23534] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6808'. [ 416.172008][T23534] xt_TPROXY: Can be used only with -p tcp or -p udp [ 416.208466][T23536] vhci_hcd: invalid port number 96 [ 416.213780][T23536] vhci_hcd: default hub control req: c306 v0079 i0060 l0 [ 416.301814][T23540] lo speed is unknown, defaulting to 1000 [ 416.308125][T23540] lo speed is unknown, defaulting to 1000 [ 416.312896][T23552] lo speed is unknown, defaulting to 1000 [ 416.331359][T23555] loop8: detected capacity change from 0 to 1024 [ 416.345011][T23552] lo speed is unknown, defaulting to 1000 [ 416.360351][T23555] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.367902][T23559] loop4: detected capacity change from 0 to 1024 [ 416.386587][T23559] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 416.397417][T23559] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 416.405400][T23559] EXT4-fs (loop4): orphan cleanup on readonly fs [ 416.412252][T23559] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 416.422198][T23559] EXT4-fs (loop4): Remounting filesystem read-only [ 416.422846][T21422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.429031][T23559] EXT4-fs (loop4): 1 orphan inode deleted [ 416.445382][T23559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 416.457455][T23559] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 416.469135][T23559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.554261][T23566] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6820'. [ 416.563368][T23566] unsupported nlmsg_type 40 [ 416.590936][T23568] xt_TPROXY: Can be used only with -p tcp or -p udp [ 416.682003][T23571] loop9: detected capacity change from 0 to 1024 [ 416.704156][T23571] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.713577][T23552] syz.4.6816 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 416.726516][T23552] CPU: 0 UID: 0 PID: 23552 Comm: syz.4.6816 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 416.737293][T23552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 416.747427][T23552] Call Trace: [ 416.750707][T23552] [ 416.753636][T23552] dump_stack_lvl+0xf2/0x150 [ 416.758252][T23552] dump_stack+0x15/0x1a [ 416.762428][T23552] dump_header+0x83/0x2d0 [ 416.766767][T23552] oom_kill_process+0x341/0x4c0 [ 416.771621][T23552] out_of_memory+0x9af/0xbe0 [ 416.776209][T23552] ? css_next_descendant_pre+0x11c/0x140 [ 416.781886][T23552] mem_cgroup_out_of_memory+0x13e/0x190 [ 416.787444][T23552] try_charge_memcg+0x508/0x7f0 [ 416.792312][T23552] charge_memcg+0x50/0xc0 [ 416.796640][T23552] __mem_cgroup_charge+0x29/0xb0 [ 416.801714][T23552] handle_mm_fault+0xdf8/0x2ac0 [ 416.806611][T23552] ? __rcu_read_lock+0x36/0x50 [ 416.811474][T23552] __get_user_pages+0xf2c/0x2670 [ 416.816416][T23552] __mm_populate+0x25b/0x3b0 [ 416.821034][T23552] __se_sys_mlockall+0x2c5/0x370 [ 416.825998][T23552] __x64_sys_mlockall+0x1f/0x30 [ 416.830934][T23552] x64_sys_call+0x2bf8/0x2dc0 [ 416.835682][T23552] do_syscall_64+0xc9/0x1c0 [ 416.840192][T23552] ? clear_bhb_loop+0x55/0xb0 [ 416.844881][T23552] ? clear_bhb_loop+0x55/0xb0 [ 416.849552][T23552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.855447][T23552] RIP: 0033:0x7f18d2bc5d19 [ 416.859915][T23552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.879591][T23552] RSP: 002b:00007f18d1237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 416.888051][T23552] RAX: ffffffffffffffda RBX: 00007f18d2db5fa0 RCX: 00007f18d2bc5d19 [ 416.896060][T23552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 416.904095][T23552] RBP: 00007f18d2c41a20 R08: 0000000000000000 R09: 0000000000000000 [ 416.912058][T23552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.920096][T23552] R13: 0000000000000000 R14: 00007f18d2db5fa0 R15: 00007ffe62860958 [ 416.928182][T23552] [ 416.931865][T23552] memory: usage 307160kB, limit 307200kB, failcnt 12249 [ 416.938933][T23552] memory+swap: usage 323580kB, limit 9007199254740988kB, failcnt 0 [ 416.946928][T23552] kmem: usage 273964kB, limit 9007199254740988kB, failcnt 0 [ 416.954219][T23552] Memory cgroup stats for /syz4: [ 416.961480][T23552] cache 372736 [ 416.969827][T23552] rss 18853888 [ 416.973196][T23552] shmem 0 [ 416.976240][T23552] mapped_file 372736 [ 416.980134][T23552] dirty 81920 [ 416.983407][T23552] writeback 0 [ 416.986851][T23552] workingset_refault_anon 1377 [ 416.991666][T23552] workingset_refault_file 2679 [ 417.000468][T23552] swap 16818176 [ 417.003929][T23552] swapcached 4096 [ 417.007578][T23552] pgpgin 451838 [ 417.011030][T23552] pgpgout 447144 [ 417.014566][T23552] pgfault 409334 [ 417.018138][T23552] pgmajfault 209 [ 417.021753][T23552] inactive_anon 4096 [ 417.025661][T23552] active_anon 0 [ 417.029187][T23552] inactive_file 0 [ 417.032810][T23552] active_file 0 [ 417.036286][T23552] unevictable 19222528 [ 417.040349][T23552] hierarchical_memory_limit 314572800 [ 417.045744][T23552] hierarchical_memsw_limit 9223372036854771712 [ 417.051895][T23552] total_cache 372736 [ 417.055815][T23552] total_rss 18853888 [ 417.059699][T23552] total_shmem 0 [ 417.063145][T23552] total_mapped_file 372736 [ 417.067576][T23552] total_dirty 81920 [ 417.071378][T23552] total_writeback 0 [ 417.075215][T23552] total_workingset_refault_anon 1377 [ 417.080611][T23552] total_workingset_refault_file 2679 [ 417.085979][T23552] total_swap 16818176 [ 417.089957][T23552] total_swapcached 4096 [ 417.094104][T23552] total_pgpgin 451838 [ 417.098110][T23552] total_pgpgout 447144 [ 417.102209][T23552] total_pgfault 409334 [ 417.106301][T23552] total_pgmajfault 209 [ 417.110435][T23552] total_inactive_anon 4096 [ 417.114855][T23552] total_active_anon 0 [ 417.118889][T23552] total_inactive_file 0 [ 417.123070][T23552] total_active_file 0 [ 417.127080][T23552] total_unevictable 19222528 [ 417.131672][T23552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6816,pid=23551,uid=0 [ 417.146543][T23552] Memory cgroup out of memory: Killed process 23551 (syz.4.6816) total-vm:95564kB, anon-rss:19092kB, file-rss:66052kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 [ 417.187785][T23578] __nla_validate_parse: 3 callbacks suppressed [ 417.187803][T23578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6824'. [ 417.290042][T23580] rdma_rxe: rxe_newlink: failed to add team0 [ 417.306023][T23582] tipc: Enabled bearer , priority 7 [ 417.319914][T23582] ªªªªªª: renamed from syzkaller0 [ 417.335302][T23589] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6827'. [ 417.339369][T23588] loop4: detected capacity change from 0 to 2048 [ 417.354050][T23582] tipc: Disabling bearer [ 417.360600][T23585] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 417.366956][T23588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.381179][T23588] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.404008][T23588] syz_tun: entered promiscuous mode [ 417.409292][T23588] vlan2: entered promiscuous mode [ 417.416752][T23588] syz_tun: left promiscuous mode [ 417.441706][T23595] SELinux: policydb string does not match my string SE Linux [ 417.457899][T23595] SELinux: failed to load policy [ 417.474484][T21437] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.532190][T21444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.544497][T23605] serio: Serial port ptm0 [ 417.571686][T23612] x_tables: unsorted underflow at hook 2 [ 417.642114][T23623] ip6gre2: entered allmulticast mode [ 417.665434][T23624] loop4: detected capacity change from 0 to 2048 [ 417.717261][T23635] vlan0: entered promiscuous mode [ 417.718029][T23624] loop4: p1 < > p4 [ 417.727256][T23624] loop4: p4 size 8388608 extends beyond EOD, truncated [ 417.842806][T23645] loop4: detected capacity change from 0 to 512 [ 417.849463][T23645] EXT4-fs: Ignoring removed oldalloc option [ 417.855406][T23645] ext2: Unknown parameter 'nouser_xattr' [ 417.863765][T23645] serio: Serial port ptm0 [ 417.953844][T23658] loop4: detected capacity change from 0 to 2048 [ 418.001403][T23658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.068906][T21444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.092660][T23669] loop9: detected capacity change from 0 to 2048 [ 418.126895][T23669] loop9: p1 < > p4 [ 418.142892][T23669] loop9: p4 size 8388608 extends beyond EOD, truncated [ 418.300727][T23654] Set syz1 is full, maxelem 65536 reached [ 418.999858][T23717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23717 comm=syz.3.6881 [ 419.099174][T23723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6884'. [ 419.259619][T23734] batadv0: entered promiscuous mode [ 419.265870][T23734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.443947][T23756] SELinux: failed to load policy [ 419.522902][T23764] loop9: detected capacity change from 0 to 164 [ 419.747447][T23781] lo speed is unknown, defaulting to 1000 [ 419.753640][T23781] lo speed is unknown, defaulting to 1000 [ 419.790208][T23781] loop9: detected capacity change from 0 to 1024 [ 419.797310][T23781] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 419.808076][T23781] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 419.816168][T23781] EXT4-fs (loop9): orphan cleanup on readonly fs [ 419.822967][T23781] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 419.832629][T23781] EXT4-fs (loop9): Remounting filesystem read-only [ 419.839377][T23781] EXT4-fs (loop9): 1 orphan inode deleted [ 419.845661][T23781] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 419.857812][T23781] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 419.864613][T23781] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.049052][T23781] syz.9.6910 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 420.060107][T23781] CPU: 0 UID: 0 PID: 23781 Comm: syz.9.6910 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 420.070903][T23781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 420.080966][T23781] Call Trace: [ 420.084321][T23781] [ 420.087243][T23781] dump_stack_lvl+0xf2/0x150 [ 420.091904][T23781] dump_stack+0x15/0x1a [ 420.096061][T23781] dump_header+0x83/0x2d0 [ 420.100386][T23781] oom_kill_process+0x341/0x4c0 [ 420.105293][T23781] out_of_memory+0x9af/0xbe0 [ 420.109876][T23781] ? css_next_descendant_pre+0x11c/0x140 [ 420.115572][T23781] mem_cgroup_out_of_memory+0x13e/0x190 [ 420.121166][T23781] try_charge_memcg+0x508/0x7f0 [ 420.126073][T23781] charge_memcg+0x50/0xc0 [ 420.130475][T23781] __mem_cgroup_charge+0x29/0xb0 [ 420.135492][T23781] filemap_add_folio+0x53/0x1b0 [ 420.140361][T23781] __filemap_get_folio+0x2f1/0x5b0 [ 420.145469][T23781] filemap_fault+0x46d/0xb30 [ 420.150116][T23781] __do_fault+0xb6/0x200 [ 420.154357][T23781] handle_mm_fault+0xe98/0x2ac0 [ 420.159261][T23781] ? __rcu_read_lock+0x36/0x50 [ 420.164026][T23781] __get_user_pages+0xf2c/0x2670 [ 420.168971][T23781] __mm_populate+0x25b/0x3b0 [ 420.173630][T23781] __se_sys_mlockall+0x2c5/0x370 [ 420.178572][T23781] __x64_sys_mlockall+0x1f/0x30 [ 420.183473][T23781] x64_sys_call+0x2bf8/0x2dc0 [ 420.188290][T23781] do_syscall_64+0xc9/0x1c0 [ 420.192784][T23781] ? clear_bhb_loop+0x55/0xb0 [ 420.197505][T23781] ? clear_bhb_loop+0x55/0xb0 [ 420.202219][T23781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.208188][T23781] RIP: 0033:0x7f5f104e5d19 [ 420.212597][T23781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.232256][T23781] RSP: 002b:00007f5f0eb57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 420.240664][T23781] RAX: ffffffffffffffda RBX: 00007f5f106d5fa0 RCX: 00007f5f104e5d19 [ 420.248665][T23781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 420.256628][T23781] RBP: 00007f5f10561a20 R08: 0000000000000000 R09: 0000000000000000 [ 420.264644][T23781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.272604][T23781] R13: 0000000000000000 R14: 00007f5f106d5fa0 R15: 00007ffcb700fc88 [ 420.280590][T23781] [ 420.288016][T23781] memory: usage 307196kB, limit 307200kB, failcnt 381 [ 420.294837][T23781] memory+swap: usage 307328kB, limit 9007199254740988kB, failcnt 0 [ 420.302863][T23781] kmem: usage 283724kB, limit 9007199254740988kB, failcnt 0 [ 420.310179][T23781] Memory cgroup stats for /syz9: [ 420.323553][T23781] cache 6725632 [ 420.331980][T23781] rss 17293312 [ 420.335471][T23781] shmem 0 [ 420.338502][T23781] mapped_file 6725632 [ 420.342537][T23781] dirty 0 [ 420.345463][T23781] writeback 0 [ 420.348846][T23781] workingset_refault_anon 36 [ 420.353430][T23781] workingset_refault_file 132 [ 420.358119][T23781] swap 135168 [ 420.361396][T23781] swapcached 24576 [ 420.365107][T23781] pgpgin 38318 [ 420.368522][T23781] pgpgout 32452 [ 420.371969][T23781] pgfault 60908 [ 420.375420][T23781] pgmajfault 21 [ 420.379036][T23781] inactive_anon 0 [ 420.382668][T23781] active_anon 24576 [ 420.386505][T23781] inactive_file 0 [ 420.390123][T23781] active_file 0 [ 420.393568][T23781] unevictable 24002560 [ 420.397667][T23781] hierarchical_memory_limit 314572800 [ 420.403073][T23781] hierarchical_memsw_limit 9223372036854771712 [ 420.409257][T23781] total_cache 6725632 [ 420.413227][T23781] total_rss 17293312 [ 420.417269][T23781] total_shmem 0 [ 420.420719][T23781] total_mapped_file 6725632 [ 420.425211][T23781] total_dirty 0 [ 420.428812][T23781] total_writeback 0 [ 420.432705][T23781] total_workingset_refault_anon 36 [ 420.437816][T23781] total_workingset_refault_file 132 [ 420.443153][T23781] total_swap 135168 [ 420.447090][T23781] total_swapcached 24576 [ 420.451328][T23781] total_pgpgin 38318 [ 420.455219][T23781] total_pgpgout 32452 [ 420.459245][T23781] total_pgfault 60908 [ 420.463249][T23781] total_pgmajfault 21 [ 420.467236][T23781] total_inactive_anon 0 [ 420.471437][T23781] total_active_anon 24576 [ 420.475764][T23781] total_inactive_file 0 [ 420.479911][T23781] total_active_file 0 [ 420.483891][T23781] total_unevictable 24002560 [ 420.488541][T23781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.6910,pid=23780,uid=0 [ 420.503277][T23781] Memory cgroup out of memory: Killed process 23780 (syz.9.6910) total-vm:95564kB, anon-rss:17684kB, file-rss:61380kB, shmem-rss:0kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 420.539338][T23786] loop4: detected capacity change from 0 to 512 [ 420.552656][T23786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.578935][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 420.578950][ T29] audit: type=1326 audit(2002555004.102:102526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23791 comm="syz.3.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 420.608837][ T29] audit: type=1326 audit(2002555004.102:102527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23791 comm="syz.3.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 420.632454][ T29] audit: type=1326 audit(2002555004.102:102528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23791 comm="syz.3.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 420.656228][ T29] audit: type=1326 audit(2002555004.102:102529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23791 comm="syz.3.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 420.679928][ T29] audit: type=1326 audit(2002555004.102:102530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23791 comm="syz.3.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 420.703919][ T29] audit: type=1326 audit(2002555004.102:102531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23791 comm="syz.3.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 420.727689][ T29] audit: type=1326 audit(2002555004.102:102532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23791 comm="syz.3.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 420.751430][ T29] audit: type=1326 audit(2002555004.102:102533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23791 comm="syz.3.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 420.775244][ T29] audit: type=1326 audit(2002555004.102:102534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23791 comm="syz.3.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 420.799012][ T29] audit: type=1326 audit(2002555004.102:102535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23791 comm="syz.3.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b04dd5d19 code=0x7ffc0000 [ 420.803908][T23786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.836238][T23786] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.854410][T23803] loop9: detected capacity change from 0 to 164 [ 420.876632][T23803] Unable to read rock-ridge attributes [ 420.957603][T23815] ip6gre1: entered allmulticast mode [ 420.963939][T21444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.253751][T23844] SELinux: syz.4.6935 (23844) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 421.389808][T23849] loop8: detected capacity change from 0 to 512 [ 421.494278][T23849] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6936: bg 0: block 393: padding at end of block bitmap is not set [ 421.554392][T23849] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 421.573934][T23849] EXT4-fs (loop8): 2 truncates cleaned up [ 421.587446][T23849] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.591294][T23855] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 421.591294][T23855] n'º|$@OOݱµ’-®+·el' [ 421.619686][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6936'. [ 421.728206][T21422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.756225][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 421.763915][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 421.772042][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.773126][T23866] netlink: 'syz.4.6944': attribute type 39 has an invalid length. [ 421.779715][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.795185][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.802871][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.810613][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.818295][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.825983][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.833624][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.841304][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.848991][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.856693][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.864350][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.872068][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.879953][ T6047] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 421.938655][T23876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.965718][ T6047] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 421.989282][T23878] tipc: Enabling of bearer rejected, failed to enable media [ 422.019746][T23883] loop9: detected capacity change from 0 to 1024 [ 422.039957][T23883] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.052332][T23885] netlink: 'syz.3.6953': attribute type 10 has an invalid length. [ 422.055755][T23883] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.087926][T23896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6957'. [ 422.103639][T23898] SELinux: failed to load policy [ 422.338364][T23919] netlink: 'syz.1.6965': attribute type 1 has an invalid length. [ 422.383166][T23919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.396622][T23921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.403918][T23921] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 422.418641][T23921] bond2: (slave vcan1): Error -95 calling set_mac_address [ 422.534461][T23911] Set syz1 is full, maxelem 65536 reached [ 422.604921][T21437] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.217729][T23952] loop9: detected capacity change from 0 to 1024 [ 423.261419][T23952] EXT4-fs: Ignoring removed orlov option [ 423.342951][T23952] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.450623][T23969] bond1: entered promiscuous mode [ 423.455815][T23969] bond1: entered allmulticast mode [ 423.461293][T23969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.471272][T23969] bond1 (unregistering): Released all slaves [ 423.739147][T23986] SELinux: failed to load policy [ 423.746841][T23952] ================================================================== [ 423.754930][T23952] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 423.762131][T23952] [ 423.764453][T23952] write to 0xffff888105b0d4a4 of 4 bytes by task 23964 on cpu 1: [ 423.772171][T23952] __xa_set_mark+0x182/0x1b0 [ 423.776773][T23952] __folio_mark_dirty+0x3b5/0x4e0 [ 423.781819][T23952] mark_buffer_dirty+0x134/0x230 [ 423.786775][T23952] block_write_end+0x123/0x210 [ 423.791546][T23952] ext4_write_end+0x148/0x770 [ 423.796243][T23952] generic_perform_write+0x33c/0x4a0 [ 423.801543][T23952] ext4_buffered_write_iter+0x1ea/0x370 [ 423.807113][T23952] ext4_file_write_iter+0x383/0xf20 [ 423.812335][T23952] iter_file_splice_write+0x5f1/0x980 [ 423.817720][T23952] direct_splice_actor+0x160/0x2c0 [ 423.822838][T23952] splice_direct_to_actor+0x302/0x670 [ 423.828215][T23952] do_splice_direct+0xd7/0x150 [ 423.832987][T23952] do_sendfile+0x398/0x660 [ 423.837405][T23952] __x64_sys_sendfile64+0x110/0x150 [ 423.842607][T23952] x64_sys_call+0xfbd/0x2dc0 [ 423.847205][T23952] do_syscall_64+0xc9/0x1c0 [ 423.851713][T23952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.857621][T23952] [ 423.859947][T23952] read to 0xffff888105b0d4a4 of 4 bytes by task 23952 on cpu 0: [ 423.867580][T23952] xas_find_marked+0x60a/0x660 [ 423.872345][T23952] find_get_entry+0x54/0x390 [ 423.876944][T23952] filemap_get_folios_tag+0x9e/0x210 [ 423.882240][T23952] file_write_and_wait_range+0x204/0x2f0 [ 423.887879][T23952] generic_buffers_fsync_noflush+0x46/0x120 [ 423.893778][T23952] ext4_sync_file+0x1ff/0x6c0 [ 423.898473][T23952] vfs_fsync_range+0x116/0x130 [ 423.903254][T23952] ext4_buffered_write_iter+0x326/0x370 [ 423.908809][T23952] ext4_file_write_iter+0x383/0xf20 [ 423.914024][T23952] iter_file_splice_write+0x5f1/0x980 [ 423.919410][T23952] direct_splice_actor+0x160/0x2c0 [ 423.924522][T23952] splice_direct_to_actor+0x302/0x670 [ 423.929909][T23952] do_splice_direct+0xd7/0x150 [ 423.934682][T23952] do_sendfile+0x398/0x660 [ 423.939093][T23952] __x64_sys_sendfile64+0x110/0x150 [ 423.944289][T23952] x64_sys_call+0xfbd/0x2dc0 [ 423.948883][T23952] do_syscall_64+0xc9/0x1c0 [ 423.953395][T23952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.959308][T23952] [ 423.961655][T23952] value changed: 0x04000021 -> 0x0a000021 [ 423.967370][T23952] [ 423.969687][T23952] Reported by Kernel Concurrency Sanitizer on: [ 423.975829][T23952] CPU: 0 UID: 0 PID: 23952 Comm: syz.9.6980 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 423.986599][T23952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 423.996649][T23952] ================================================================== [ 424.047320][T21437] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.