last executing test programs: 3.030984414s ago: executing program 2 (id=1096): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x3c, 0x32, 0x301, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x3c}}, 0x0) 2.989758367s ago: executing program 2 (id=1097): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="60dc41d5f5d24c138ba5891cefccbbf56c2c5c831700d6b900000000000004000000ff00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000004000000ae070000142c000096d1733442074b19d2cfc52b6bfc3bacca829e24e977ecc26f95f99d2b358932ab441b0aeea934dd3eb2212b9503e31a933cb96968a3683c0dbbea9235e782b091d62f86c3f226a4e63e4d7f45e75cd426e8ddd0ad9984705d588307", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0x1ffffffffffffe08, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000040007020000f8ffffffb703000008000000b70400df000000008500000058", @ANYRESHEX=r1, @ANYBLOB="1800000000008000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x5d4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5a4, 0x2, [@TCA_BASIC_EMATCHES={0x15c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x2, 0xf0}, {0x7, 0x9, 0x2, "6903cf01f5b48da0e8"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xc, 0x8, 0x4}, {0xffffffffffffffff, 0x6, 0xa}}}, @TCF_EM_CONTAINER={0x50, 0x1, 0x0, 0x0, {{0xc29, 0x0, 0x2}, "1ccb2094147df92e621f955b925c6e84212bb3bb5337616f72be7b14d61c67ce88e3bfb5b3a4b825965dbd0f7507befd5b23357787807b8a3cac150db247652785198d45"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x2, 0x2, 0xd}, {0x3, 0x4, 0x2, "40bb8beb"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfff9, 0x1, 0xdc}, {0x5, 0x7, 0xd571, 0x2, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0xa8, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x4}, "7af8607f957af03f99e16b664a975fd399be68ac883c7594fb6cb690bc071bfd15a5f6bdce9eff16407f1c4633373f991c9727f3365a8f1782241bc67bc37bc7c91a64749f4f232b3b99464ffaae347c2440a0ea1c6e0ec71adecc8e95e57446171aea9aa6be34c3152b54de70ddc05186739fcbe3ec19809d4b0eff4881aeb5cbf82699f14b870fc67d77e3359936c9bcfe5dfb5dba76279ebeb6"}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffffffff, 0x0, 0x101, 0x8000, 0x10000, 0x0, 0x6, 0x7, 0xff, 0x3, 0x3, 0x9, 0x4, 0x3, 0x9, 0x6, 0xe8, 0x9, 0x80, 0xffffffff, 0x8, 0x51, 0x80000001, 0xc992, 0x7, 0xe, 0x7, 0x5, 0x100, 0xd, 0x1, 0x100, 0xa9, 0x7, 0x9, 0x2, 0x1, 0x1d, 0xff, 0x2, 0x9, 0x0, 0x7, 0x5, 0x7ffffeff, 0xffffffff, 0x1, 0x9, 0x522edf2b, 0x0, 0x4, 0x6f4b, 0x5, 0x22c767a3, 0x801e, 0x5, 0xffffff30, 0x2, 0x3f0, 0x5, 0x8, 0x2, 0x9, 0x0, 0x101, 0x100, 0x8, 0x6, 0x10, 0x9, 0x5, 0x7, 0x7, 0x7fffffff, 0xffffffff, 0x8, 0x0, 0x7, 0x3, 0x4, 0x2, 0x4, 0x400, 0x76c2, 0x0, 0x4, 0x5f, 0x401, 0x8, 0xfff, 0x8b1f, 0x1ff, 0x5, 0x10001, 0x7fffffff, 0x91, 0x7, 0x1, 0x2, 0x0, 0x5, 0x400, 0x3, 0x0, 0x1, 0x7, 0x3010, 0x3, 0x2, 0x318a8646, 0x9, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x9, 0x40006a9e, 0xffffffff, 0x4, 0x3a, 0xffffffc0, 0xaa1, 0x3, 0x3, 0x4, 0x631, 0x4, 0xfffffff9, 0x9, 0x1, 0xa5, 0x9, 0x0, 0xd, 0xfffffffa, 0x0, 0x9, 0xf32, 0x6a, 0x7, 0x4, 0x0, 0x0, 0xff, 0xfffffff8, 0x6, 0x1000, 0x8, 0x1, 0x8, 0x2, 0x0, 0xfffffffe, 0x0, 0x6, 0x6, 0x1, 0x87, 0xa25, 0x3, 0x789, 0x3, 0x4a, 0x3, 0x0, 0x800, 0x7, 0x8001, 0xffff, 0x16, 0x5, 0x80, 0xf, 0x7, 0xfffffffb, 0xe8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x7ff, 0x7, 0x7, 0x8, 0x0, 0x401, 0x7fffffff, 0xb, 0xd, 0x9, 0x200, 0x2, 0x822, 0x10000, 0x1, 0x9, 0x5ca, 0x4, 0x0, 0x100, 0x3, 0x1, 0x16, 0x249, 0x4, 0x1000, 0x5, 0x7, 0xc3, 0x80000001, 0xae9, 0x1f34, 0x9, 0x400, 0x9, 0x80000001, 0x6, 0x1, 0x9, 0x8, 0xfff, 0x5, 0x2489440, 0x5c, 0xfe, 0xc, 0xfffffffa, 0x2, 0xfffffff8, 0x7, 0x6, 0x79a, 0x0, 0x401, 0x2, 0x5, 0xf52, 0x9, 0xfffffffe, 0x7, 0x5, 0x687, 0x1, 0x1, 0x2, 0xb, 0xfffffffc, 0x8, 0x4, 0x4, 0x1, 0x1, 0x1]}, @TCA_POLICE_TBF={0xfffffcb5, 0x1, {0x8f, 0x4, 0xe16, 0x6, 0xcc9, {0x7, 0x1, 0x3, 0x4, 0x5, 0xfffffffd}, {0x7f, 0x2, 0x25, 0x1, 0x2}, 0x7f0, 0x8, 0x3}}]}]}}]}, 0x5d4}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.989291447s ago: executing program 2 (id=1098): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="60dc41d5f5d24c138ba5891cefccbbf56c2c5c831700d6b900000000000004000000ff00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000004000000ae070000142c000096d1733442074b19d2cfc52b6bfc3bacca829e24e977ecc26f95f99d2b358932ab441b0aeea934dd3eb2212b9503e31a933cb96968a3683c0dbbea9235e782b091d62f86c3f226a4e63e4d7f45e75cd426e8ddd0ad9984705d588307", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0x1ffffffffffffe08, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000040007020000f8ffffffb703000008000000b70400df000000008500000058", @ANYRESHEX=r1, @ANYBLOB="1800000000008000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000140)={0x1, 0x4}) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x5d4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5a4, 0x2, [@TCA_BASIC_EMATCHES={0x15c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x2, 0xf0}, {0x7, 0x9, 0x2, "6903cf01f5b48da0e8"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xc, 0x8, 0x4}, {0xffffffffffffffff, 0x6, 0xa}}}, @TCF_EM_CONTAINER={0x50, 0x1, 0x0, 0x0, {{0xc29, 0x0, 0x2}, "1ccb2094147df92e621f955b925c6e84212bb3bb5337616f72be7b14d61c67ce88e3bfb5b3a4b825965dbd0f7507befd5b23357787807b8a3cac150db247652785198d45"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x2, 0x2, 0xd}, {0x3, 0x4, 0x2, "40bb8beb"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfff9, 0x1, 0xdc}, {0x5, 0x7, 0xd571, 0x2, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0xa8, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x4}, "7af8607f957af03f99e16b664a975fd399be68ac883c7594fb6cb690bc071bfd15a5f6bdce9eff16407f1c4633373f991c9727f3365a8f1782241bc67bc37bc7c91a64749f4f232b3b99464ffaae347c2440a0ea1c6e0ec71adecc8e95e57446171aea9aa6be34c3152b54de70ddc05186739fcbe3ec19809d4b0eff4881aeb5cbf82699f14b870fc67d77e3359936c9bcfe5dfb5dba76279ebeb6"}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffffffff, 0x0, 0x101, 0x8000, 0x10000, 0x0, 0x6, 0x7, 0xff, 0x3, 0x3, 0x9, 0x4, 0x3, 0x9, 0x6, 0xe8, 0x9, 0x80, 0xffffffff, 0x8, 0x51, 0x80000001, 0xc992, 0x7, 0xe, 0x7, 0x5, 0x100, 0xd, 0x1, 0x100, 0xa9, 0x7, 0x9, 0x2, 0x1, 0x1d, 0xff, 0x2, 0x9, 0x0, 0x7, 0x5, 0x7ffffeff, 0xffffffff, 0x1, 0x9, 0x522edf2b, 0x0, 0x4, 0x6f4b, 0x5, 0x22c767a3, 0x801e, 0x5, 0xffffff30, 0x2, 0x3f0, 0x5, 0x8, 0x2, 0x9, 0x0, 0x101, 0x100, 0x8, 0x6, 0x10, 0x9, 0x5, 0x7, 0x7, 0x7fffffff, 0xffffffff, 0x8, 0x0, 0x7, 0x3, 0x4, 0x2, 0x4, 0x400, 0x76c2, 0x0, 0x4, 0x5f, 0x401, 0x8, 0xfff, 0x8b1f, 0x1ff, 0x5, 0x10001, 0x7fffffff, 0x91, 0x7, 0x1, 0x2, 0x0, 0x5, 0x400, 0x3, 0x0, 0x1, 0x7, 0x3010, 0x3, 0x2, 0x318a8646, 0x9, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x9, 0x40006a9e, 0xffffffff, 0x4, 0x3a, 0xffffffc0, 0xaa1, 0x3, 0x3, 0x4, 0x631, 0x4, 0xfffffff9, 0x9, 0x1, 0xa5, 0x9, 0x0, 0xd, 0xfffffffa, 0x0, 0x9, 0xf32, 0x6a, 0x7, 0x4, 0x0, 0x0, 0xff, 0xfffffff8, 0x6, 0x1000, 0x8, 0x1, 0x8, 0x2, 0x0, 0xfffffffe, 0x0, 0x6, 0x6, 0x1, 0x87, 0xa25, 0x3, 0x789, 0x3, 0x4a, 0x3, 0x0, 0x800, 0x7, 0x8001, 0xffff, 0x16, 0x5, 0x80, 0xf, 0x7, 0xfffffffb, 0xe8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x7ff, 0x7, 0x7, 0x8, 0x0, 0x401, 0x7fffffff, 0xb, 0xd, 0x9, 0x200, 0x2, 0x822, 0x10000, 0x1, 0x9, 0x5ca, 0x4, 0x0, 0x100, 0x3, 0x1, 0x16, 0x249, 0x4, 0x1000, 0x5, 0x7, 0xc3, 0x80000001, 0xae9, 0x1f34, 0x9, 0x400, 0x9, 0x80000001, 0x6, 0x1, 0x9, 0x8, 0xfff, 0x5, 0x2489440, 0x5c, 0xfe, 0xc, 0xfffffffa, 0x2, 0xfffffff8, 0x7, 0x6, 0x79a, 0x0, 0x401, 0x2, 0x5, 0xf52, 0x9, 0xfffffffe, 0x7, 0x5, 0x687, 0x1, 0x1, 0x2, 0xb, 0xfffffffc, 0x8, 0x4, 0x4, 0x1, 0x1, 0x1]}, @TCA_POLICE_TBF={0xfffffcb5, 0x1, {0x8f, 0x4, 0xe16, 0x6, 0xcc9, {0x7, 0x1, 0x3, 0x4, 0x5, 0xfffffffd}, {0x7f, 0x2, 0x25, 0x1, 0x2}, 0x7f0, 0x8, 0x3}}]}]}}]}, 0x5d4}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 2.849903406s ago: executing program 2 (id=1099): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x0, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000003340)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000001000000000000000000000000000464bde42ec0aaa19c2d23b681809488fd5254ed90294f3997db0be06aee4ae0ba3030ae1ad312a9cd3689f6ef77922c4f3ecc786293ff2ae4d7e3f11c1f8629fdc88c385bb73ffffffffa9729c00eb1cca29b0866b16e2d2d3d300d785d6b4b93a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000400000090600000000000000", @ANYRES32=r5, @ANYBLOB="05c100"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000030000000100"/28], 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0xd, 0x8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x7, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x10001}, [@ringbuf_query]}, &(0x7f0000000400)='syzkaller\x00', 0x8e9, 0x2a, &(0x7f0000000580)=""/42, 0x40f00, 0x0, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000640)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xa, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000900)=[r9, r10, r11, r12, r13, r14, r15], &(0x7f0000000bc0)=[{0x2, 0x1, 0x3, 0x3}, {0x4, 0x3, 0x6, 0x5}, {0x5, 0x5, 0x1, 0xa}, {0x4, 0x3, 0xe, 0xa}, {0x0, 0x3, 0x0, 0x5}], 0x10, 0xb1, @void, @value}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e6430"], 0x4b0}}, 0x0) 2.747687883s ago: executing program 2 (id=1100): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 2.686418788s ago: executing program 2 (id=1101): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18040000000018010000696c6c2500000000002020207b1af8ff00000000bfb10000100000001a010000f8ffffb702000008000000b70300000000000085000000b10000019500", @ANYBLOB="efe596d21e2af20093f0f1d79cc5d82faf2773b16ee6a11989039ccc5f2bd93ab744ebaa815a100d526db3d6ed1389e15362469377d47069426442b1dbbd5560bb2fcbd4b578c2c5d5d6bab30c77ea198b72710eaab4bea5245d595d52e31426493b33e40c9aa84a85f9be0cf1571752c9224fbd19904294ea9ba7d43b68dfb684224a69c45224ec873794932bb3a507d12b08e7f853dc5de960a4f6ea72856ce8343de48276f0a77bf19a094648612bd96a1cc4bf3a01b77b78b6b5368c6eb6a217901733b62d07b4fea269b8112f6713b532d92f1aa3d3f70e4fd6b7c4045cd79ac872909ab7730617e228a9801d40ac1762e6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) dup3(r4, r3, 0x0) socket$unix(0x1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0xf3a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x48) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x8) socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) 2.36130551s ago: executing program 3 (id=1108): iopl(0x3) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000070020000100010009000000051f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYRES8=r0, @ANYRESDEC=r0, @ANYBLOB="e09c960b0e40d3323e6bf14ec19864ebcf85cf8ae1ee2b6024aaa58a6ce073a9beae586e2922bba5e9e55d3ea24ee8df75a1cfd3a594fab11ddef985b76d369b3d5886ee85b0fd803f43848bd6", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0xe8, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000040), {[{{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r5, 0x10e, 0x8, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095", @ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) readv(r6, &(0x7f0000001400)=[{&(0x7f0000000200)=""/244, 0xf4}], 0x1) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0x7}, 0xfffffffd}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffff00, 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x6, 0x3, 0x4b}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) fstat(r7, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r8 = inotify_init1(0x0) r9 = syz_open_pts(0xffffffffffffffff, 0x2401) dup3(r9, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) close_range(r8, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x22, &(0x7f0000000080)={0x10003c, 0x5, 0x39}) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000100)={[0x80]}, 0x8) 2.190466461s ago: executing program 3 (id=1115): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') readlinkat(r1, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/157, 0x9d) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x5, 0x3, @vifc_lcl_addr=@rand_addr=0x64010102, @multicast1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)="01000000", 0x4}, {&(0x7f0000000340)='\b', 0xfffffefe}], 0x2) 2.141201915s ago: executing program 3 (id=1116): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fc0aa00b846dff4648690c0f80623a17cf848a0c274f1e87550c4cefa9bf0e00"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000400000002000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01defffffeffffff00"/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) stat(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="0000000000060000000000000000000410000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x33) 2.140947224s ago: executing program 3 (id=1117): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='mpol=interleave,mpol=l']) 2.122905896s ago: executing program 3 (id=1119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.068065389s ago: executing program 3 (id=1120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xf, 0x2000004, 0x1001, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}}, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000011c0), 0x4200, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x13, &(0x7f0000000780)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @printk={@s}, @printk={@li}], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x78, &(0x7f00000010c0)=""/120, 0x41000, 0x6, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x3, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r6, r0], 0x0, 0x10, 0x2, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007", @ANYRES8=0x0, @ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r10, 0x5608, 0x0) 1.413474954s ago: executing program 4 (id=1129): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fc0aa00b846dff4648690c0f80623a17cf848a0c274f1e87550c4cefa9bf0e00"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000400000002000000000000000102", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01defffffeffffff00"/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) stat(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="0000000000060000000000000000000410000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x33) 1.370223837s ago: executing program 4 (id=1130): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='mpol=interleave,mpol=l']) 1.335863599s ago: executing program 4 (id=1131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1.298820522s ago: executing program 4 (id=1132): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.297845112s ago: executing program 4 (id=1133): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_usb_connect(0x2, 0xcbe, &(0x7f00000026c0)={{0x12, 0x1, 0x310, 0x8a, 0xc3, 0x67, 0xff, 0x1b3d, 0x1bb, 0x292f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcac, 0x4, 0x7, 0x7, 0xa0, 0x3, [{{0x9, 0x4, 0x20, 0x0, 0xf, 0x58, 0x9d, 0x53, 0xa7, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xf41, 0x8, 0x2a, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x6, 0x7, 0x2, 0xd, 0x7}, @acm={0x4, 0x24, 0x2, 0x5f4f8a3d2e472e4}, @mbim={0xc, 0x24, 0x1b, 0x7fff, 0x2, 0x10, 0x3, 0x4, 0x4}, @dmm={0x7, 0x24, 0x14, 0x7fff, 0x7ff}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x4, 0xfff1}, @dmm={0x7, 0x24, 0x14, 0x401, 0x7fff}]}], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0x1, 0x46, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x101}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x5, 0x6, 0x6, [@generic={0x3d, 0x9, "8f145ba730e3c583cc5a0a6b19487f48acbe73021bdd34908419629f1d07d402a20f2a08e680f88a34be1bdbf55c9ef6f76729543a9b122a6c0e26"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x0, 0x2b, 0x38, [@generic={0xb1, 0x21, "dd7fab96070baabc43b5729a51a9497a9ce83f99ce865e99776a7bf5d61d5fea93b3675848699640788c9b5f9fc63fa8c9c8bd724785a750bb73f838f0b51a5ebe23cc9da94e55bd4c828cafb1b29d7e74dc6f996e426d0da81288506a2751b92234157865b8727ade7917cf825d831df596b622684d7b7226926e5970f1ab2fb930b876b9bb8468969426c5a7ac9296b6c9e823850497228893d241b91680fbb84edaf7ad936fc5f859b8b59a70d0"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x4, 0x1, 0xc8, [@generic={0xbe, 0xc, "b43b2a3dfb44669f9374e01c4a43a2c2a3a30070b1aaa8a9c02f04c45cbdfae066e03f490371d3c7551458e1541e5a686a89a9699ddb2b1d49ab7ebbb6990eec8d8e7cd85bfe252d22c4e166246d6504e30d09adc4ca3702ea5e6cd188bff7cbde1ed9b574ed7e1292f82298b44c72d17376caf298b648b202c185bef199bb39ea302352c5e3a213c158deb5469b045864b98418159a0b7341ad561b79f3557d1e1d2672ac1490cd54ccaab92adf288db1062bc59defdf1f524755c9"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x9, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6e, 0x1}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x3, 0xfb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x3a}]}}, {{0x9, 0x5, 0x0, 0x6, 0x20, 0xf0, 0x79, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3e, 0x2}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7, 0xa8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x40}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x31, 0xf, 0x8, [@generic={0x5f, 0xa, "2b35a3d5abed6dc96d54dd4e5b6b3bc345b1a81f34626d054d741bbae39746269a49258f43263c44e0e24c62602ca5d59fb7995bbb28cd284d5b2ad965693b24a35035d70edb27b549bd56f0fb2324b53827a42a98a88dd7c1b359bd5f"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x7f, 0x1, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3ff}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0xb, 0xd, 0x8, [@generic={0x5a, 0xd, "7f2fbf2abf522c364047d38656aa85fc4b8abc51c16d48652d659fb89e72f7e7028b18dfe87017c6b9947a3ffd7320a9c6ac2abcc06bd38c7d5b0628b62c29c1f4b9c5e5dd4bef9d81482a91592b98ada807c1b4b72e505c"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x6, 0x2, 0x5, [@generic={0xfe, 0xd, "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"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x1, 0x4, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x80}]}}, {{0x9, 0x5, 0x0, 0x5, 0x0, 0x83, 0x1, 0x1, [@generic={0xd8, 0xb, "217a53ad9c6897b1e7e97bcac4179852995c602cbeb142f792e193e278d336a6b06d92cc7cb118666b5ab1be9b2501cded3d06ec50639027761f1b5486960b0f083ecf6654bca080a83dbb348ad9b5a3464d81309b1dea6a619f8ba89288918a69557fcf5ecb0258cdd9486925c85565c22ee772ee71469945c43e42483bf3b6cf9d9acaa02ade0bfed3674c094bede8bdd020d5c08f00a26fa061fae275c4e6b9b5c09abb0dc3e98464ee793e676b59e42b04d624e9077924a2961068c59b1792d13bcc1d2b8cc46da833252f3dafb406bf0e1dbac1"}]}}]}}, {{0x9, 0x4, 0xe4, 0x4, 0x2, 0x77, 0x62, 0xf7, 0xf, [], [{{0x9, 0x5, 0x0, 0x3, 0x10, 0x3, 0x11, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x56, 0xa}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x3, 0x5, 0x6, [@generic={0x14, 0x2, "5d1148d3787b40eca111a7d164d043d24b28"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x9}]}}]}}, {{0x9, 0x4, 0xf, 0x5, 0x1, 0xff, 0x3, 0x7a, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x400, 0xfffe, 0x9}, [@obex={0x5, 0x24, 0x15, 0x2123}, @mdlm_detail={0x37, 0x24, 0x13, 0x2, "ac7ed2417eaee2da2e0ee700a41c55ddcc30f99649253ffc8847dff4759024df4e80d8138c08509ff6e6376396e18d5687d1ef"}, @obex={0x5, 0x24, 0x15, 0x7}]}], [{{0x9, 0x5, 0xb, 0x8, 0x40, 0x9, 0xc, 0x1, [@generic={0xec, 0xb, "6ccbe209e830deec47af1e8cc213d1741fed353e192148def56fdf36c65a171599cdd3080cbd94b22adfdecd089cbcd581293c338ae69ed8852c8fa9083f4517449f0b501f0788efd65b5c0603c1b66545f8f204087d0182226b68d31916f9b2e775f03210f001c279d52cb0b2f9203754c6e55d0aafd777162decf114a762683d4caaeb81688701101e4934d3739b7d15cba1ddeb7f0d2a8c795dbb8eb99acf3141f293a171920e8ad4b7d8eb1c431fe4b5b28b8ad015e5faeb251bf6a5d1c5f1156dccd36836aa2022724d2d99a9352adfec116a5d787a828e0762401c8f9ab8b1408f4a136c6f2f2c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xa}]}}]}}, {{0x9, 0x4, 0xae, 0xfb, 0xe, 0xc7, 0x6f, 0x9f, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x96, 0xe}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x5}]}], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0xfe, 0x5, 0xc, [@generic={0x15, 0x21, "b50464fb597e5d378198a55a7f74221d8dbe53"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xdee}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x8e, 0x9, 0xba, [@generic={0xbc, 0x7, "ba530ab647a13fb92446b2b8f8375c8731ddb38252f22d74b448d0c36bc26b7b932ade160b06729e454c80cc0fe8b7fecd28dce11c05b96c5d1a5bf8eb14620a500f7352d7b7917725d593a676c7ec35b478aad18c9c44eb9e4e97150309f0a74a24fb2a5431cc5dd39a1e4a55e1b122bc40c8e87cec606edfeec28271d2e514aed0a2e5a2a2cfdcde00d4132d38deaa8eb8167c398ceeb3c0f36a162210c09818e0a7ecdb2da39d3542e8a02d7bc443ac76ce9e62575ba7e09b"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x0, 0x7, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x9}, @generic={0xa2, 0x6, "330c310fb0057430873e0749d631de9d6feb9c344d073b5c750b0fb6d1e02aa2da8a5f7d2dff4a69fcbdc9e6e429712f9446f0cffcddafdd3b4ae1e2b4f63eee2fa8f3e1ade45e1e52770c466da345b767f70e220f995bddef28e6cca2ed4d27942e580889431c483abb8e919ce3e3db853e9ce7f9691754d5f9b73875561d40f45a250a404337bb4c14a1d95d43f13e4bda809abd7baa814c5ef2af2f7c706e"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xd, 0x7, 0x7, [@generic={0x52, 0x22, "ecb1b42ff8d26c17d46d2a089c342de16d704b9d142abb505b76163b9dc576a358904401e316866ea84ff566b7c5671616ee831e2e853f4b49d0a7522f2d9d99d2ff8f80982969467e8bda9ba72e4e9d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x6, 0x10, 0x6, [@generic={0x29, 0xf, "adf1c977043deed8083b441b6f8c39a6d3c15e0f73e4da4666f54d60691a0330e56a0bf31a7f6c"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xff, 0xf9, 0x80, [@generic={0x9, 0x2, "6579a3f0ea481f"}, @generic={0xa4, 0xe, "192489905b11191b2cf7865429d8c5dd444907113acc7fe23ff86689c0abfc54481234dfb0a02be3dcf382d5183342bcacfdf5af92b193fe49a9bc05bec04bd3794db31d3a91aef2f119218d504d5f0d2086fca0640946b8214068457f36901915114e651937080be3f15155c9d7e1ed355095ffe461b04f3f0b5a413707427720c6a52d8a2a02a93a0a85a9444ff462ce1c9344e71404bc781f4384efc7ff4ebf30"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x7, 0x81, 0x9, [@generic={0xa2, 0xe, "2ca6f00b5617fbc290f0590a79bc9cea91896a085ba1ea88d784af83879ef76eed822b91c7a3f991ad6420c4d999ef5f53a9087ed78c6cc34a59aa067b196fe1df19f013ec1310dbfddbfb475f912dd6137911294f061fb007c8edc411ecf45e6261ae3a4782a9a508e6b8e2d9ae18c38b256980c4ecebec6d083c73e4724bcdd2a5ee2454e9ff3d790d607452aaf60f79dc89738bd79d38d299be00cfb67811"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x93, 0xfd, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe5, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x6, 0x89, 0x8, [@generic={0x26, 0x2d, "cc23f4d067b3fcc717c9cd5e0ac1e1e5b40c44819fcdb5a310f39c428110ba1ba8dc4f84"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x6, 0x8b, 0xb3, [@generic={0x58, 0x7, "ff94ab24358fc5110803d96ca7c7d22d84192df90fd85a094d92a1a1ed87633616f2b05351d1c888c1b52684fee3060829940980f9e00075fdafde0807e0f14591b6355fcda349996994213fbbe63bda43351f627448"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x2}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x40, 0x9, 0xa7, [@generic={0xa8, 0x21, "2a807c3fcd44b92f420c03d6d543acdc5fa7d18bb019e0e3e828023c6235630158a40238d64821e32666d9959930e947895c1a5794234290978dab99d54b361d6aa1562d91d1364545f978585a17bc343de792f4eb65a8ef6b3770b95589b6c5b66e04fc046b4f0b849e4e5516d1c088fb06f6255ab103ff2059d2c4251e2a2573c82f21737529c7b305962625d68d9804867b9ca563f8991cbb5d68434f06069c6762adc664"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xac5}]}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0xc0, 0x12, 0x1, [@generic={0x72, 0x21, "0c1e9895bba4159e330232f4ba91e8d21aaf8f9b2e0ed9389ddc46013ba4ee681d8b6bd8a181abd2d4e680eec40afc75c67b4866c62d3b1f92247d0973be55498655cbefc377e6532a70c7a29ef195d4406944971dc8c452ae6d93549492ead36b364cf82f8b5e06a7d73610a861fa83"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x30, 0x3, 0xfa, [@generic={0x29, 0xc, "58bb1a7522a032237a82e53cd91d63d21a1a2a18b6fbe7719b918329ec07587d3b65f414f67d56"}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x5, 0xe, 0x5, 0xff, 0x3}, 0xb2, &(0x7f0000000e00)={0x5, 0xf, 0xb2, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "bbaa6a8335c36b0c85ae50889203455d"}, @generic={0x99, 0x10, 0x4, "e538fce325f253148f90112cbdb740a5bd3746cc5a24c7ea2eb4710b15cc128fcdbcc907401bd83ac47e8053d955f760c94ab776a620f91cd3f5f7023596db281bdfafe799b98d3f5e80d89665d1e23797644d95495cb5556a8dcad4d93cfa5a83eecaae3503aee4c11f65feb3bb07ba4d0e434f62d3cbb1961e40823d917153c65ad1d9d61e307922e2cba1ddfd9c897ac7bdab6b2c"}]}, 0x4, [{0xee, &(0x7f0000000ec0)=@string={0xee, 0x3, "3d5cbbb044a68047e6c7a1938d5d860e0d9b3a5af0f5ae70a17f9c9685e5151abd9418ceafd2b039c9e4c266cb13d3df48f3d3f43dfd46b145cf221ca5c11b63f7e882f800200952b6690dc62d552d1afd7a1d0c94b5e9e7d7bb78322c415750ce7bcfe02669edf29f8f999facbf9d28823955c23a5d9f527d1ee34bda2c1f98501731a735a0fd8aed0c4ba2a9617707f12d8bc701627783c9b4f6fe289bfa21a11cf853427a3bea0a67b23e92b28e990ca169990e1cd57197bab4691ddb8d8eb2cf03ae2938d3093bfd66e8202d0c0f76a7ad227a4947f8c624fb7ef64b874da11d46e084c3c0cd9999e828"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x850367027409b3ee}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000001e80)={0x14, &(0x7f0000001100)={0x0, 0xf, 0xf6, {0xf6, 0x3, "122d6746c5430492e7554fe2426a2be5742517809ad14983925d0164670d896128144e72c846c0dcec1e772456a1bae210c06c8ef9be1673276178c89782a9408078db358e109f7de072bc9ad6df55141faa91930f12719b63aa3fac4e2f59cc535c99447931f332d70ba91cef4feca876879c41f0f1d904b3d6d1aeec9fbeae41e372041b28be7fed61383c72407072ae50e9c95d4abca98ac263a563f75abcb9d2067d57658704d8f1cbc47c0ead0f2ff3d00bf348c49a7e4619b9978a0dc8f9aeecb94b690fa86c607fa06460c55116d59f172443ba3cf036124f38e2fc364374cbda26f615a7a9cf7b3773b99205fb8c975c"}}, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002140)={0x44, &(0x7f0000001ec0)={0x20, 0x16, 0x94, "ead61061d6c203952aa4a305342ccd9ff83c1f023d5f16d61ffe17451910a7948b163456d903d1a1a050c63ad93bf84655d1b05ab713a246f050fa75d13404f38c0d6bf75a9feeef1f2434c348de783ae018924ac0e32361b9a3627872e372a5b99e2e496c6191121be12cebc5deb1687657d89200a20488447301b2b5b8bc4966e434c3e61602f987177d0ebc636f5d4769ec9d"}, &(0x7f0000001f80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001fc0)={0x0, 0x8, 0x1}, &(0x7f0000002000)={0x20, 0x80, 0x1c, {0x5, 0x53, 0x9, 0x8, 0x28, 0x5, 0x3, 0xe, 0x4, 0xfaed, 0x15, 0x4}}, &(0x7f0000002040)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000002080)={0x20, 0x83, 0x2}, &(0x7f00000020c0)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000002100)={0x20, 0x89, 0x2, 0x1}}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050810004149004003040800", 0x58}], 0x1) r4 = syz_usb_connect$cdc_ecm(0x0, 0x85, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0xf0, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x44, 0x2, 0x2, 0x6, 0x0, 0xd1, {{0xa, 0x24, 0x6, 0x0, 0x0, "46622205b3"}, {0x5, 0x24, 0x0, 0x87f}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x40, 0x1200, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x1, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x28}, @dmm={0x7, 0x24, 0x14, 0x2, 0xe8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x3, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0xff, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xf, 0x1}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0xff, 0x78, 0x4, 0x20, 0x2}, 0x34, &(0x7f0000000dc0)={0x5, 0xf, 0x34, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "1de2cee9f55c4e071df60e006555c628"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x10, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x9b, 0x5, 0x100}]}, 0x5, [{0x5f, &(0x7f0000000480)=@string={0x5f, 0x3, "2340f5e5b40f3563d902559f2ff67ec7be371f7dd7a44bee02a45491ed9ce57302f94403f4c440cf865956408a7d59441e5ae52e941ee741f3ce201ed7df388bd74d067020388a98a751ce504402b4419c610dd85cc6acf7be43f72194"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40f}}]}) syz_usb_control_io(r4, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x0, 0xb, 0x60, {0x60, 0xd, "2d4694e74195d9ac7550e55e738967a3e9c5038ea5ddec0beedc87d0e1f5571afc21cac8c8183c8b5e3235d79c4ddcd8358098ff33449d5deead6cafb4283917d3d06a4bb64f844114e5d760ac4dd898e7bbdb1d0d12f0aa1d03f5c85abd"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000000780)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x9, 0xf000, 0x5, [0xf]}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x18, 0x2, 0xd0, "fea9dbe1", "2ae464cd"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0x6, 0xdf, 0x80, 0x83d8, 0x6}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x40, 0x12, 0x93, "90a721366b4213400fd7d029925bb057682881b3302bd2c575896580db5ef64bebc0b0a18feda08ea839d8aa0165ecd5e3975595a4b43d791262ff50520085b59ede01adf9f107d0387fa046a935859b776c151a644c3239cd5e006ff5fab5802c58a2f9d609c7b5412930b7cc5a50402bc77aa6ce5327f1416f51b19c753d524bc13e6275320785832f74eb4bd648d8bc6b22"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x18}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x100, 0x8, [0x0]}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x28}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "2187"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "f8a7"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000cc0)={0x40, 0x21, 0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) readlink(0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x0) 592.340929ms ago: executing program 0 (id=1147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000090000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x84002) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x100, 0x0, r0, 0xd, '\x00', 0x0, r2, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 536.166463ms ago: executing program 0 (id=1149): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 535.891934ms ago: executing program 0 (id=1150): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') readlinkat(r1, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/157, 0x9d) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x5, 0x3, @vifc_lcl_addr=@rand_addr=0x64010102, @multicast1}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000acc2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000079743bea000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="01000000", 0x4}, {&(0x7f0000000340)='\b', 0xfffffefe}], 0x2) 535.603544ms ago: executing program 0 (id=1151): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fc0aa00b846dff4648690c0f80623a17cf848a0c274f1e87550c4cefa9bf0e00"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000400000002000000000000000102", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01defffffeffffff00"/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) stat(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="0000000000060000000000000000000410000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x33) 516.606375ms ago: executing program 0 (id=1153): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) 493.855256ms ago: executing program 0 (id=1155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x5888, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1}, 0x18) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="d087870903ef5beb", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 434.06894ms ago: executing program 4 (id=1159): prctl$PR_MCE_KILL(0x3c, 0x0, 0x931ea4710eec458) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES16=0x0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x400000, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x1407, 0x4, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x9}]}, 0x48}}, 0x40094) 111.335312ms ago: executing program 1 (id=1163): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="60dc41d5f5d24c138ba5891cefccbbf56c2c5c831700d6b900000000000004000000ff00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000004000000ae070000142c000096d1733442074b19d2cfc52b6bfc3bacca829e24e977ecc26f95f99d2b358932ab441b0aeea934dd3eb2212b9503e31a933cb96968a3683c0dbbea9235e782b091d62f86c3f226a4e63e4d7f45e75cd426e8ddd0ad9984705d588307", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0x1ffffffffffffe08, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000040007020000f8ffffffb703000008000000b70400df000000008500000058", @ANYRESHEX=r1, @ANYBLOB="1800000000008000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000140)={0x1, 0x4}) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x5d4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5a4, 0x2, [@TCA_BASIC_EMATCHES={0x15c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x2, 0xf0}, {0x7, 0x9, 0x2, "6903cf01f5b48da0e8"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xc, 0x8, 0x4}, {0xffffffffffffffff, 0x6, 0xa}}}, @TCF_EM_CONTAINER={0x50, 0x1, 0x0, 0x0, {{0xc29, 0x0, 0x2}, "1ccb2094147df92e621f955b925c6e84212bb3bb5337616f72be7b14d61c67ce88e3bfb5b3a4b825965dbd0f7507befd5b23357787807b8a3cac150db247652785198d45"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x2, 0x2, 0xd}, {0x3, 0x4, 0x2, "40bb8beb"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfff9, 0x1, 0xdc}, {0x5, 0x7, 0xd571, 0x2, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0xa8, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x4}, "7af8607f957af03f99e16b664a975fd399be68ac883c7594fb6cb690bc071bfd15a5f6bdce9eff16407f1c4633373f991c9727f3365a8f1782241bc67bc37bc7c91a64749f4f232b3b99464ffaae347c2440a0ea1c6e0ec71adecc8e95e57446171aea9aa6be34c3152b54de70ddc05186739fcbe3ec19809d4b0eff4881aeb5cbf82699f14b870fc67d77e3359936c9bcfe5dfb5dba76279ebeb6"}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffffffff, 0x0, 0x101, 0x8000, 0x10000, 0x0, 0x6, 0x7, 0xff, 0x3, 0x3, 0x9, 0x4, 0x3, 0x9, 0x6, 0xe8, 0x9, 0x80, 0xffffffff, 0x8, 0x51, 0x80000001, 0xc992, 0x7, 0xe, 0x7, 0x5, 0x100, 0xd, 0x1, 0x100, 0xa9, 0x7, 0x9, 0x2, 0x1, 0x1d, 0xff, 0x2, 0x9, 0x0, 0x7, 0x5, 0x7ffffeff, 0xffffffff, 0x1, 0x9, 0x522edf2b, 0x0, 0x4, 0x6f4b, 0x5, 0x22c767a3, 0x801e, 0x5, 0xffffff30, 0x2, 0x3f0, 0x5, 0x8, 0x2, 0x9, 0x0, 0x101, 0x100, 0x8, 0x6, 0x10, 0x9, 0x5, 0x7, 0x7, 0x7fffffff, 0xffffffff, 0x8, 0x0, 0x7, 0x3, 0x4, 0x2, 0x4, 0x400, 0x76c2, 0x0, 0x4, 0x5f, 0x401, 0x8, 0xfff, 0x8b1f, 0x1ff, 0x5, 0x10001, 0x7fffffff, 0x91, 0x7, 0x1, 0x2, 0x0, 0x5, 0x400, 0x3, 0x0, 0x1, 0x7, 0x3010, 0x3, 0x2, 0x318a8646, 0x9, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x9, 0x40006a9e, 0xffffffff, 0x4, 0x3a, 0xffffffc0, 0xaa1, 0x3, 0x3, 0x4, 0x631, 0x4, 0xfffffff9, 0x9, 0x1, 0xa5, 0x9, 0x0, 0xd, 0xfffffffa, 0x0, 0x9, 0xf32, 0x6a, 0x7, 0x4, 0x0, 0x0, 0xff, 0xfffffff8, 0x6, 0x1000, 0x8, 0x1, 0x8, 0x2, 0x0, 0xfffffffe, 0x0, 0x6, 0x6, 0x1, 0x87, 0xa25, 0x3, 0x789, 0x3, 0x4a, 0x3, 0x0, 0x800, 0x7, 0x8001, 0xffff, 0x16, 0x5, 0x80, 0xf, 0x7, 0xfffffffb, 0xe8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x7ff, 0x7, 0x7, 0x8, 0x0, 0x401, 0x7fffffff, 0xb, 0xd, 0x9, 0x200, 0x2, 0x822, 0x10000, 0x1, 0x9, 0x5ca, 0x4, 0x0, 0x100, 0x3, 0x1, 0x16, 0x249, 0x4, 0x1000, 0x5, 0x7, 0xc3, 0x80000001, 0xae9, 0x1f34, 0x9, 0x400, 0x9, 0x80000001, 0x6, 0x1, 0x9, 0x8, 0xfff, 0x5, 0x2489440, 0x5c, 0xfe, 0xc, 0xfffffffa, 0x2, 0xfffffff8, 0x7, 0x6, 0x79a, 0x0, 0x401, 0x2, 0x5, 0xf52, 0x9, 0xfffffffe, 0x7, 0x5, 0x687, 0x1, 0x1, 0x2, 0xb, 0xfffffffc, 0x8, 0x4, 0x4, 0x1, 0x1, 0x1]}, @TCA_POLICE_TBF={0xfffffcb5, 0x1, {0x8f, 0x4, 0xe16, 0x6, 0xcc9, {0x7, 0x1, 0x3, 0x4, 0x5, 0xfffffffd}, {0x7f, 0x2, 0x25, 0x1, 0x2}, 0x7f0, 0x8, 0x3}}]}]}}]}, 0x5d4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 110.845892ms ago: executing program 1 (id=1164): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fc0aa00b846dff4648690c0f80623a17cf848a0c274f1e87550c4cefa9bf0e00"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000040000000200000000000000010200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01defffffeffffff00"/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) stat(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="0000000000060000000000000000000410000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x33) 92.806643ms ago: executing program 1 (id=1165): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='mpol=interleave,mpol=l']) 74.534785ms ago: executing program 1 (id=1166): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 56.155716ms ago: executing program 1 (id=1167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=1168): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0a00ff000000007110630000000000950002000000000036247bb77ca29df9f690bca69a4dd4d06cfc4822b24f55e03e76eb6e53265d833252385b2ff7fe613a1587cd2689a7947a74bee3c1a2f289a8a6024a2e8cac7c75a167dd810f6eb04eee77bbfcfd3e48bd5496a0d930d066dc03973b16430c1755d856479e61b8747ce9e54491978e38578a818a90fa77e3edfe4c400948a7dd5290f59cc660c9ff034f840d711b49b14d948525216679708a722a5774260b269f7efb1509d0"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00'}) write(r5, &(0x7f0000004200)='t', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0x3}}, 0x20) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x4008031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f00000010c0)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x4004550e, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x4000}) kernel console output (not intermixed with test programs): .489262][ T5743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.500543][ T5743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.518225][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 124.518242][ T29] audit: type=1400 audit(1726434483.512:3151): avc: denied { mounton } for pid=5626 comm="syz-executor" path="/root/syzkaller.398W8i/syz-tmp" dev="sda1" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 124.549830][ T29] audit: type=1400 audit(1726434483.512:3152): avc: denied { mount } for pid=5626 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.560110][ T5743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.572028][ T29] audit: type=1400 audit(1726434483.542:3153): avc: denied { mounton } for pid=5626 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 124.628526][ T29] audit: type=1326 audit(1726434483.622:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b48c0def9 code=0x7ffc0000 [ 124.652113][ T29] audit: type=1326 audit(1726434483.622:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b48c0def9 code=0x7ffc0000 [ 124.675527][ T29] audit: type=1326 audit(1726434483.622:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b48c0def9 code=0x7ffc0000 [ 124.679386][ T5750] bridge0: port 3(bond0) entered blocking state [ 124.699188][ T29] audit: type=1326 audit(1726434483.622:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b48c0def9 code=0x7ffc0000 [ 124.699227][ T29] audit: type=1326 audit(1726434483.622:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3b48c0def9 code=0x7ffc0000 [ 124.699259][ T29] audit: type=1326 audit(1726434483.622:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b48c0def9 code=0x7ffc0000 [ 124.705632][ T5750] bridge0: port 3(bond0) entered disabled state [ 124.706360][ T5750] bond0: entered allmulticast mode [ 124.729168][ T29] audit: type=1326 audit(1726434483.622:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b48c0def9 code=0x7ffc0000 [ 124.752866][ T5750] bond_slave_0: entered allmulticast mode [ 124.780730][ T5748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.782972][ T5750] bond_slave_1: entered allmulticast mode [ 124.833822][ T5750] bond0: entered promiscuous mode [ 124.838985][ T5750] bond_slave_0: entered promiscuous mode [ 124.844779][ T5750] bond_slave_1: entered promiscuous mode [ 124.850963][ T5750] bridge0: port 3(bond0) entered blocking state [ 124.857403][ T5750] bridge0: port 3(bond0) entered forwarding state [ 124.867746][ T5753] vhci_hcd: invalid port number 36 [ 124.872874][ T5753] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 124.934433][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 125.062786][ T5770] netlink: 'syz.0.713': attribute type 6 has an invalid length. [ 125.113618][ T5772] loop0: detected capacity change from 0 to 4096 [ 125.120465][ T5772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.148022][ T5772] EXT4-fs mount: 44 callbacks suppressed [ 125.148037][ T5772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.188133][ T4353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.232439][ T5775] wireguard0: entered allmulticast mode [ 125.267633][ T5781] loop0: detected capacity change from 0 to 4096 [ 125.274416][ T5781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.287472][ T5783] loop4: detected capacity change from 0 to 2048 [ 125.296930][ T5781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.316746][ T5783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.338674][ T4353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.373930][ T5788] FAULT_INJECTION: forcing a failure. [ 125.373930][ T5788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.387177][ T5788] CPU: 1 UID: 0 PID: 5788 Comm: syz.0.719 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 125.397798][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 125.407878][ T5788] Call Trace: [ 125.411175][ T5788] [ 125.414343][ T5788] dump_stack_lvl+0xf2/0x150 [ 125.418963][ T5788] dump_stack+0x15/0x20 [ 125.423128][ T5788] should_fail_ex+0x229/0x230 [ 125.427858][ T5788] should_fail+0xb/0x10 [ 125.432061][ T5788] should_fail_usercopy+0x1a/0x20 [ 125.437110][ T5788] _copy_from_user+0x1e/0xd0 [ 125.441775][ T5788] io_openat2_prep+0xbd/0x310 [ 125.446551][ T5788] io_submit_sqes+0x64c/0x1080 [ 125.451385][ T5788] ? __rcu_read_unlock+0x4e/0x70 [ 125.456372][ T5788] ? xa_load+0xb9/0xe0 [ 125.460468][ T5788] __se_sys_io_uring_enter+0x1c6/0x15a0 [ 125.466101][ T5788] ? fput+0x13b/0x180 [ 125.470103][ T5788] ? ksys_write+0x178/0x1b0 [ 125.474815][ T5788] __x64_sys_io_uring_enter+0x78/0x90 [ 125.480235][ T5788] x64_sys_call+0x2567/0x2d60 [ 125.484984][ T5788] do_syscall_64+0xc9/0x1c0 [ 125.489564][ T5788] ? clear_bhb_loop+0x55/0xb0 [ 125.494267][ T5788] ? clear_bhb_loop+0x55/0xb0 [ 125.498964][ T5788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.504880][ T5788] RIP: 0033:0x7f3b48c0def9 [ 125.509374][ T5788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.529061][ T5788] RSP: 002b:00007f3b47881038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 125.537487][ T5788] RAX: ffffffffffffffda RBX: 00007f3b48dc5f80 RCX: 00007f3b48c0def9 [ 125.545460][ T5788] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000005 [ 125.553438][ T5788] RBP: 00007f3b47881090 R08: 0000000000000000 R09: 0000000000000000 [ 125.561484][ T5788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.569512][ T5788] R13: 0000000000000000 R14: 00007f3b48dc5f80 R15: 00007fffd92ecf48 [ 125.577512][ T5788] [ 125.676970][ T5783] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.697628][ T5783] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 125.710175][ T5783] EXT4-fs (loop4): This should not happen!! Data will be lost [ 125.710175][ T5783] [ 125.720061][ T5783] EXT4-fs (loop4): Total free blocks count 0 [ 125.726097][ T5783] EXT4-fs (loop4): Free/Dirty block details [ 125.732003][ T5783] EXT4-fs (loop4): free_blocks=2415919104 [ 125.734012][ T5801] netlink: 'syz.1.724': attribute type 6 has an invalid length. [ 125.738014][ T5783] EXT4-fs (loop4): dirty_blocks=32 [ 125.738032][ T5783] EXT4-fs (loop4): Block reservation details [ 125.738044][ T5783] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 125.797876][ T5806] loop1: detected capacity change from 0 to 4096 [ 125.805146][ T5806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.823462][ T5806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.849895][ T5806] ./file0: Can't lookup blockdev [ 125.855518][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.870817][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.886163][ T5814] syz.4.729[5814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.886222][ T5814] syz.4.729[5814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.903903][ T5817] wireguard4: entered allmulticast mode [ 125.924829][ T5814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.729'. [ 125.942798][ T5814] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 125.942798][ T5814] program syz.4.729 not setting count and/or reply_len properly [ 125.979602][ T5822] loop1: detected capacity change from 0 to 2048 [ 125.986066][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 125.993905][ T5826] Invalid ELF header magic: != ELF [ 126.055551][ T5837] loop4: detected capacity change from 0 to 512 [ 126.072050][ T5843] loop1: detected capacity change from 0 to 2048 [ 126.087008][ T5837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.094042][ T5845] loop0: detected capacity change from 0 to 4096 [ 126.100156][ T5837] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.106886][ T5843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.117082][ T5845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.137419][ T5845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.170069][ T4353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.295251][ T5858] wireguard5: entered allmulticast mode [ 126.365492][ T5866] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.388749][ T5866] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 126.401259][ T5866] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.401259][ T5866] [ 126.411057][ T5866] EXT4-fs (loop1): Total free blocks count 0 [ 126.417102][ T5866] EXT4-fs (loop1): Free/Dirty block details [ 126.423004][ T5866] EXT4-fs (loop1): free_blocks=2415919104 [ 126.428831][ T5866] EXT4-fs (loop1): dirty_blocks=32 [ 126.433947][ T5866] EXT4-fs (loop1): Block reservation details [ 126.439979][ T5866] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 126.549431][ T5869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.745'. [ 126.614515][ T3340] usb 7-1: enqueue for inactive port 0 [ 126.620132][ T3340] usb 7-1: enqueue for inactive port 0 [ 126.704427][ T3340] vhci_hcd: vhci_device speed not set [ 126.891998][ T4367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.975857][ T5879] syz.4.750[5879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.975994][ T5879] syz.4.750[5879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.988977][ T5879] FAULT_INJECTION: forcing a failure. [ 126.988977][ T5879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.013760][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: syz.4.750 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 127.024693][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 127.034750][ T5879] Call Trace: [ 127.038024][ T5879] [ 127.040984][ T5879] dump_stack_lvl+0xf2/0x150 [ 127.045652][ T5879] dump_stack+0x15/0x20 [ 127.049807][ T5879] should_fail_ex+0x229/0x230 [ 127.054493][ T5879] should_fail+0xb/0x10 [ 127.058703][ T5879] should_fail_usercopy+0x1a/0x20 [ 127.063749][ T5879] copy_to_user_nofault+0x7a/0x110 [ 127.068876][ T5879] bpf_probe_write_user+0x80/0xc0 [ 127.073908][ T5879] bpf_prog_6303d92f98284ad8+0x43/0x47 [ 127.079388][ T5879] bpf_trace_run2+0x104/0x1d0 [ 127.084079][ T5879] ? skb_put+0xba/0x100 [ 127.088289][ T5879] ? gnet_stats_finish_copy+0x22c/0x2a0 [ 127.093847][ T5879] ? skb_put+0xba/0x100 [ 127.098060][ T5879] ? gnet_stats_finish_copy+0x22c/0x2a0 [ 127.103648][ T5879] kfree+0x20d/0x290 [ 127.107626][ T5879] ? nla_put_64bit+0xe3/0x110 [ 127.112313][ T5879] gnet_stats_finish_copy+0x22c/0x2a0 [ 127.117769][ T5879] tc_fill_qdisc+0x858/0x9a0 [ 127.122382][ T5879] tc_dump_qdisc_root+0x113/0x360 [ 127.127495][ T5879] tc_dump_qdisc+0x22d/0x4c0 [ 127.132106][ T5879] ? kmalloc_reserve+0x16e/0x190 [ 127.137046][ T5879] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 127.142176][ T5879] rtnl_dumpit+0x6c/0x130 [ 127.146563][ T5879] netlink_dump+0x388/0x760 [ 127.151079][ T5879] netlink_recvmsg+0x427/0x780 [ 127.155855][ T5879] ? __pfx_netlink_recvmsg+0x10/0x10 [ 127.161144][ T5879] sock_recvmsg+0x13f/0x170 [ 127.165749][ T5879] ____sys_recvmsg+0xf9/0x280 [ 127.170441][ T5879] __sys_recvmsg+0x1ea/0x280 [ 127.175045][ T5879] __x64_sys_recvmsg+0x46/0x50 [ 127.179830][ T5879] x64_sys_call+0xb84/0x2d60 [ 127.184480][ T5879] do_syscall_64+0xc9/0x1c0 [ 127.188979][ T5879] ? clear_bhb_loop+0x55/0xb0 [ 127.193712][ T5879] ? clear_bhb_loop+0x55/0xb0 [ 127.198386][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.204291][ T5879] RIP: 0033:0x7fb79c73def9 [ 127.208744][ T5879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.228349][ T5879] RSP: 002b:00007fb79b3b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 127.236801][ T5879] RAX: ffffffffffffffda RBX: 00007fb79c8f5f80 RCX: 00007fb79c73def9 [ 127.244768][ T5879] RDX: 0000000000000000 RSI: 0000000020000a80 RDI: 0000000000000005 [ 127.252860][ T5879] RBP: 00007fb79b3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 127.260824][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.268824][ T5879] R13: 0000000000000000 R14: 00007fb79c8f5f80 R15: 00007ffce36fcde8 [ 127.276846][ T5879] [ 127.280222][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 127.291184][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 127.325783][ T5885] Illegal XDP return value 4294967294 on prog (id 655) dev N/A, expect packet loss! [ 127.336187][ T5885] netlink: 228 bytes leftover after parsing attributes in process `syz.4.755'. [ 127.345628][ T5889] netlink: 276 bytes leftover after parsing attributes in process `syz.1.752'. [ 127.362725][ T5890] wireguard6: entered allmulticast mode [ 127.396847][ T5892] loop4: detected capacity change from 0 to 2048 [ 127.406865][ T5892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.505173][ T4367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.519359][ T5897] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.581185][ T5906] loop4: detected capacity change from 0 to 1024 [ 127.589515][ T5906] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.594159][ T5897] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.612553][ T5906] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 127.620840][ T5906] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.628173][ T5906] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 127.642764][ T5906] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 127.651439][ T5906] EXT4-fs (loop4): 1 truncate cleaned up [ 127.658381][ T5906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.672400][ T5897] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.714252][ T4367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.724889][ T5912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5912 comm=syz.2.760 [ 127.726006][ T5911] tmpfs: Bad value for 'mpol' [ 127.753693][ T5897] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.820689][ T5897] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.832048][ T5897] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.835517][ T5927] loop2: detected capacity change from 0 to 4096 [ 127.845216][ T5897] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.846993][ T5927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.859502][ T5897] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.873349][ T5922] wireguard1: entered allmulticast mode [ 127.880079][ T5927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.915528][ T5934] FAULT_INJECTION: forcing a failure. [ 127.915528][ T5934] name failslab, interval 1, probability 0, space 0, times 0 [ 127.928311][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.3.769 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 127.938957][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 127.949017][ T5934] Call Trace: [ 127.952291][ T5934] [ 127.955218][ T5934] dump_stack_lvl+0xf2/0x150 [ 127.959916][ T5934] dump_stack+0x15/0x20 [ 127.964082][ T5934] should_fail_ex+0x229/0x230 [ 127.968841][ T5934] ? vm_area_dup+0x2c/0x130 [ 127.973343][ T5934] should_failslab+0x8f/0xb0 [ 127.978017][ T5934] kmem_cache_alloc_noprof+0x4c/0x290 [ 127.983411][ T5934] vm_area_dup+0x2c/0x130 [ 127.987749][ T5934] __split_vma+0xf7/0x690 [ 127.992136][ T5934] do_vmi_align_munmap+0x227/0xa60 [ 127.997273][ T5934] do_vmi_munmap+0x1fb/0x250 [ 128.001883][ T5934] mmap_region+0x52a/0x1620 [ 128.006395][ T5934] ? mm_get_unmapped_area+0x8a/0xa0 [ 128.011600][ T5934] ? security_mmap_addr+0x4c/0x70 [ 128.016637][ T5934] ? __get_unmapped_area+0x2d1/0x300 [ 128.021971][ T5934] do_mmap+0x72a/0xb70 [ 128.026061][ T5934] ? security_mmap_file+0x128/0x150 [ 128.031338][ T5934] vm_mmap_pgoff+0x133/0x290 [ 128.035989][ T5934] ksys_mmap_pgoff+0xd0/0x340 [ 128.040691][ T5934] ? fpregs_assert_state_consistent+0x83/0xa0 [ 128.046799][ T5934] x64_sys_call+0x1884/0x2d60 [ 128.051504][ T5934] do_syscall_64+0xc9/0x1c0 [ 128.056023][ T5934] ? clear_bhb_loop+0x55/0xb0 [ 128.060745][ T5934] ? clear_bhb_loop+0x55/0xb0 [ 128.065426][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.071358][ T5934] RIP: 0033:0x7f7bedf1def9 [ 128.075777][ T5934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.095393][ T5934] RSP: 002b:00007f7becb91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 128.103806][ T5934] RAX: ffffffffffffffda RBX: 00007f7bee0d5f80 RCX: 00007f7bedf1def9 [ 128.111805][ T5934] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 128.119778][ T5934] RBP: 00007f7becb91090 R08: ffffffffffffffff R09: 0000000000000000 [ 128.127792][ T5934] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 128.135805][ T5934] R13: 0000000000000000 R14: 00007f7bee0d5f80 R15: 00007ffddfccf1f8 [ 128.143807][ T5934] [ 128.178763][ T4363] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.198025][ T5940] SELinux: failed to load policy [ 128.199037][ T5938] loop3: detected capacity change from 0 to 2048 [ 128.226856][ T5942] tmpfs: Bad value for 'mpol' [ 128.273407][ T5948] FAULT_INJECTION: forcing a failure. [ 128.273407][ T5948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.286628][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: syz.4.776 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 128.297374][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 128.307446][ T5948] Call Trace: [ 128.310732][ T5948] [ 128.313666][ T5948] dump_stack_lvl+0xf2/0x150 [ 128.318283][ T5948] dump_stack+0x15/0x20 [ 128.322461][ T5948] should_fail_ex+0x229/0x230 [ 128.327237][ T5948] should_fail+0xb/0x10 [ 128.331405][ T5948] should_fail_usercopy+0x1a/0x20 [ 128.336462][ T5948] _copy_to_user+0x1e/0xa0 [ 128.340988][ T5948] simple_read_from_buffer+0xa0/0x110 [ 128.344503][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.346356][ T5948] proc_fail_nth_read+0xff/0x140 [ 128.358162][ T5948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.363744][ T5948] vfs_read+0x1a2/0x6e0 [ 128.367917][ T5948] ? __rcu_read_unlock+0x4e/0x70 [ 128.372878][ T5948] ? __fget_files+0x1da/0x210 [ 128.377578][ T5948] ksys_read+0xeb/0x1b0 [ 128.381784][ T5948] __x64_sys_read+0x42/0x50 [ 128.386307][ T5948] x64_sys_call+0x27d3/0x2d60 [ 128.390998][ T5948] do_syscall_64+0xc9/0x1c0 [ 128.395575][ T5948] ? clear_bhb_loop+0x55/0xb0 [ 128.400268][ T5948] ? clear_bhb_loop+0x55/0xb0 [ 128.404983][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.405273][ T5938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.410897][ T5948] RIP: 0033:0x7fb79c73c93c [ 128.427323][ T5948] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 128.447039][ T5948] RSP: 002b:00007fb79b3b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.455446][ T5948] RAX: ffffffffffffffda RBX: 00007fb79c8f5f80 RCX: 00007fb79c73c93c [ 128.463422][ T5948] RDX: 000000000000000f RSI: 00007fb79b3b10a0 RDI: 0000000000000004 [ 128.471384][ T5948] RBP: 00007fb79b3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 128.479348][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.487316][ T5948] R13: 0000000000000000 R14: 00007fb79c8f5f80 R15: 00007ffce36fcde8 [ 128.495326][ T5948] [ 128.510878][ T4361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.546537][ T5954] loop4: detected capacity change from 0 to 1024 [ 128.579524][ T5954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.612550][ T5960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.636689][ T5964] loop2: detected capacity change from 0 to 2048 [ 128.684873][ T5964] loop2: p1 < > p4 [ 128.689147][ T5964] loop2: p4 size 8388608 extends beyond EOD, truncated [ 128.698602][ T5964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.782'. [ 128.699565][ T5969] xt_hashlimit: size too large, truncated to 1048576 [ 129.125351][ T5981] tmpfs: Bad value for 'mpol' [ 129.171300][ T5987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=5987 comm=syz.2.788 [ 129.246131][ T5992] loop2: detected capacity change from 0 to 512 [ 129.253103][ T5992] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 129.263924][ T5992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 129.272058][ T5992] EXT4-fs (loop2): orphan cleanup on readonly fs [ 129.279057][ T5992] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.790: bg 0: block 361: padding at end of block bitmap is not set [ 129.293685][ T5992] EXT4-fs (loop2): Remounting filesystem read-only [ 129.300664][ T5992] EXT4-fs (loop2): 1 truncate cleaned up [ 129.306786][ T5992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 129.319003][ T5992] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 129.319007][ T5997] xt_hashlimit: max too large, truncated to 1048576 [ 129.332781][ T5992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 129.350448][ T5992] veth0_vlan: left allmulticast mode [ 129.360921][ T5992] bridge0: port 3(vlan0) entered disabled state [ 129.385660][ T4367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.397512][ T5992] veth0_vlan: left promiscuous mode [ 129.403659][ T5992] veth0_vlan: entered promiscuous mode [ 129.409270][ T5992] veth0_vlan: entered allmulticast mode [ 129.414993][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 129.428909][ T5992] bridge0: port 3(vlan0) entered blocking state [ 129.435214][ T5992] bridge0: port 3(vlan0) entered forwarding state [ 129.449022][ T6002] FAULT_INJECTION: forcing a failure. [ 129.449022][ T6002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.462189][ T6002] CPU: 1 UID: 0 PID: 6002 Comm: syz.4.793 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 129.472787][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 129.482837][ T6002] Call Trace: [ 129.486207][ T6002] [ 129.489147][ T6002] dump_stack_lvl+0xf2/0x150 [ 129.493798][ T6002] dump_stack+0x15/0x20 [ 129.497948][ T6002] should_fail_ex+0x229/0x230 [ 129.502716][ T6002] should_fail+0xb/0x10 [ 129.506864][ T6002] should_fail_usercopy+0x1a/0x20 [ 129.511923][ T6002] _copy_from_user+0x1e/0xd0 [ 129.516516][ T6002] copy_msghdr_from_user+0x54/0x2a0 [ 129.521739][ T6002] __sys_sendmsg+0x17d/0x280 [ 129.526466][ T6002] __x64_sys_sendmsg+0x46/0x50 [ 129.531237][ T6002] x64_sys_call+0x2689/0x2d60 [ 129.535914][ T6002] do_syscall_64+0xc9/0x1c0 [ 129.540510][ T6002] ? clear_bhb_loop+0x55/0xb0 [ 129.545178][ T6002] ? clear_bhb_loop+0x55/0xb0 [ 129.549883][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.555883][ T6002] RIP: 0033:0x7fb79c73def9 [ 129.560291][ T6002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.579897][ T6002] RSP: 002b:00007fb79b3b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.588306][ T6002] RAX: ffffffffffffffda RBX: 00007fb79c8f5f80 RCX: 00007fb79c73def9 [ 129.596306][ T6002] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000006 [ 129.604277][ T6002] RBP: 00007fb79b3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 129.612266][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.620230][ T6002] R13: 0000000000000000 R14: 00007fb79c8f5f80 R15: 00007ffce36fcde8 [ 129.628332][ T6002] [ 129.665366][ T6015] tmpfs: Bad value for 'mpol' [ 129.746800][ T1249] veth0_vlan: left allmulticast mode [ 129.758986][ T1249] bridge0: port 3(vlan0) entered disabled state [ 129.835851][ T1249] bridge0: port 3(vlan0) entered disabled state [ 129.897976][ T6035] loop4: detected capacity change from 0 to 2048 [ 129.949662][ T6035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.982459][ T6035] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.035905][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 130.035924][ T29] audit: type=1400 audit(1726434489.032:3488): avc: denied { create } for pid=6034 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.063626][ T4367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.116159][ T6042] loop4: detected capacity change from 0 to 164 [ 130.136396][ T29] audit: type=1400 audit(1726434489.132:3489): avc: denied { mount } for pid=6040 comm="syz.4.801" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 130.185981][ T29] audit: type=1400 audit(1726434489.182:3490): avc: denied { unmount } for pid=4367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 130.216325][ T6046] FAULT_INJECTION: forcing a failure. [ 130.216325][ T6046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.229434][ T6046] CPU: 0 UID: 0 PID: 6046 Comm: syz.4.802 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 130.240111][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 130.250188][ T6046] Call Trace: [ 130.253498][ T6046] [ 130.256492][ T6046] dump_stack_lvl+0xf2/0x150 [ 130.261104][ T6046] dump_stack+0x15/0x20 [ 130.265326][ T6046] should_fail_ex+0x229/0x230 [ 130.270229][ T6046] should_fail+0xb/0x10 [ 130.274451][ T6046] should_fail_usercopy+0x1a/0x20 [ 130.279508][ T6046] _copy_from_user+0x1e/0xd0 [ 130.284130][ T6046] do_sock_getsockopt+0xd3/0x260 [ 130.289154][ T6046] __sys_getsockopt+0x19a/0x210 [ 130.294074][ T6046] __x64_sys_getsockopt+0x66/0x80 [ 130.299121][ T6046] x64_sys_call+0x11cd/0x2d60 [ 130.303828][ T6046] do_syscall_64+0xc9/0x1c0 [ 130.308361][ T6046] ? clear_bhb_loop+0x55/0xb0 [ 130.313120][ T6046] ? clear_bhb_loop+0x55/0xb0 [ 130.317814][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.323804][ T6046] RIP: 0033:0x7fb79c73def9 [ 130.328246][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.347882][ T6046] RSP: 002b:00007fb79b3b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 130.356419][ T6046] RAX: ffffffffffffffda RBX: 00007fb79c8f5f80 RCX: 00007fb79c73def9 [ 130.364449][ T6046] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 130.372432][ T6046] RBP: 00007fb79b3b1090 R08: 0000000020000180 R09: 0000000000000000 [ 130.380496][ T6046] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.388525][ T6046] R13: 0000000000000000 R14: 00007fb79c8f5f80 R15: 00007ffce36fcde8 [ 130.396569][ T6046] [ 130.448916][ T6010] syz.2.796 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 130.459931][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.2.796 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 130.464501][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 130.470562][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 130.470578][ T6010] Call Trace: [ 130.490825][ T6010] [ 130.493766][ T6010] dump_stack_lvl+0xf2/0x150 [ 130.498375][ T6010] dump_stack+0x15/0x20 [ 130.502540][ T6010] dump_header+0x83/0x2d0 [ 130.506909][ T6010] oom_kill_process+0x341/0x4c0 [ 130.511851][ T6010] out_of_memory+0x9af/0xbe0 [ 130.516496][ T6010] ? __rcu_read_unlock+0x4e/0x70 [ 130.521511][ T6010] mem_cgroup_out_of_memory+0x13e/0x190 [ 130.527140][ T6010] try_charge_memcg+0x51b/0x810 [ 130.532047][ T6010] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 130.538130][ T6010] __read_swap_cache_async+0x2b7/0x520 [ 130.543607][ T6010] swap_cluster_readahead+0x276/0x3f0 [ 130.549049][ T6010] swapin_readahead+0xe4/0x760 [ 130.553902][ T6010] ? __filemap_get_folio+0x420/0x5b0 [ 130.559634][ T6010] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 130.565200][ T6010] ? swap_cache_get_folio+0x77/0x210 [ 130.570507][ T6010] do_swap_page+0x3da/0x1ef0 [ 130.575115][ T6010] ? cgroup_rstat_updated+0x99/0x550 [ 130.580431][ T6010] ? __rcu_read_lock+0x36/0x50 [ 130.585214][ T6010] ? pte_offset_map_nolock+0x124/0x1d0 [ 130.590697][ T6010] handle_mm_fault+0x8cb/0x2a30 [ 130.595601][ T6010] exc_page_fault+0x3b9/0x650 [ 130.600354][ T6010] asm_exc_page_fault+0x26/0x30 [ 130.605224][ T6010] RIP: 0033:0x7fb74dc819dc [ 130.609638][ T6010] Code: 72 64 0f 1f 40 00 69 3d d6 3c e1 00 e8 03 00 00 48 8d 1d b7 45 2e 00 e8 82 c4 12 00 eb 0c 48 81 c3 d8 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 d8 00 00 [ 130.629374][ T6010] RSP: 002b:00007ffcd297e830 EFLAGS: 00010206 [ 130.635548][ T6010] RAX: 0000000000000000 RBX: 00007fb74df65f80 RCX: 0000000000000000 [ 130.643519][ T6010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555584e62808 [ 130.651504][ T6010] RBP: 00007fb74df67a80 R08: 0000000000000000 R09: 7fffffffffffffff [ 130.659516][ T6010] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001fda8 [ 130.667490][ T6010] R13: 00007ffcd297e930 R14: 0000000000000032 R15: ffffffffffffffff [ 130.675558][ T6010] [ 130.678802][ T6010] memory: usage 307200kB, limit 307200kB, failcnt 199 [ 130.685668][ T6010] memory+swap: usage 307296kB, limit 9007199254740988kB, failcnt 0 [ 130.693576][ T6010] kmem: usage 306808kB, limit 9007199254740988kB, failcnt 0 [ 130.700925][ T6010] Memory cgroup stats for /syz2: [ 130.771935][ T6048] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 130.791121][ T6010] cache 376832 [ 130.794551][ T6010] rss 0 [ 130.797333][ T6010] shmem 0 [ 130.800312][ T6010] mapped_file 376832 [ 130.804237][ T6010] dirty 376832 [ 130.807643][ T6010] writeback 8192 [ 130.811180][ T6010] workingset_refault_anon 4 [ 130.815780][ T6010] workingset_refault_file 0 [ 130.820308][ T6010] swap 98304 [ 130.823590][ T6010] swapcached 24576 [ 130.827414][ T6010] pgpgin 40218 [ 130.830788][ T6010] pgpgout 40120 [ 130.834281][ T6010] pgfault 50283 [ 130.837799][ T6010] pgmajfault 13 [ 130.841306][ T6010] inactive_anon 0 [ 130.845038][ T6010] active_anon 24576 [ 130.848848][ T6010] inactive_file 0 [ 130.852503][ T6010] active_file 376832 [ 130.856435][ T6010] unevictable 0 [ 130.859896][ T6010] hierarchical_memory_limit 314572800 [ 130.865370][ T6010] hierarchical_memsw_limit 9223372036854771712 [ 130.871563][ T6010] total_cache 376832 [ 130.875492][ T6010] total_rss 0 [ 130.878814][ T6010] total_shmem 0 [ 130.882269][ T6010] total_mapped_file 376832 [ 130.886787][ T6010] total_dirty 376832 [ 130.890704][ T6010] total_writeback 8192 [ 130.894854][ T6010] total_workingset_refault_anon 4 [ 130.900200][ T6010] total_workingset_refault_file 0 [ 130.905252][ T6010] total_swap 98304 [ 130.908974][ T6010] total_swapcached 24576 [ 130.913293][ T6010] total_pgpgin 40218 [ 130.917586][ T6010] total_pgpgout 40120 [ 130.921907][ T6010] total_pgfault 50283 [ 130.926236][ T6010] total_pgmajfault 13 [ 130.930533][ T6010] total_inactive_anon 0 [ 130.934757][ T6010] total_active_anon 24576 [ 130.939090][ T6010] total_inactive_file 0 [ 130.943267][ T6010] total_active_file 376832 [ 130.947875][ T6010] total_unevictable 0 [ 130.951887][ T6010] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.796,pid=6010,uid=0 [ 130.966866][ T6010] Memory cgroup out of memory: Killed process 6010 (syz.2.796) total-vm:97356kB, anon-rss:612kB, file-rss:15648kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 131.011074][ T4361] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 131.021995][ T4361] CPU: 1 UID: 0 PID: 4361 Comm: syz-executor Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 131.032854][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 131.042920][ T4361] Call Trace: [ 131.046199][ T4361] [ 131.049158][ T4361] dump_stack_lvl+0xf2/0x150 [ 131.053798][ T4361] dump_stack+0x15/0x20 [ 131.057972][ T4361] dump_header+0x83/0x2d0 [ 131.062377][ T4361] oom_kill_process+0x341/0x4c0 [ 131.067312][ T4361] out_of_memory+0x9af/0xbe0 [ 131.071932][ T4361] ? __rcu_read_unlock+0x4e/0x70 [ 131.076953][ T4361] mem_cgroup_out_of_memory+0x13e/0x190 [ 131.082579][ T4361] try_charge_memcg+0x51b/0x810 [ 131.087445][ T4361] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 131.093633][ T4361] __read_swap_cache_async+0x2b7/0x520 [ 131.099189][ T4361] swap_cluster_readahead+0x276/0x3f0 [ 131.104718][ T4361] swapin_readahead+0xe4/0x760 [ 131.109497][ T4361] ? __filemap_get_folio+0x420/0x5b0 [ 131.114917][ T4361] ? save_fpregs_to_fpstate+0x102/0x160 [ 131.120557][ T4361] ? swap_cache_get_folio+0x77/0x210 [ 131.125915][ T4361] do_swap_page+0x3da/0x1ef0 [ 131.130506][ T4361] ? hrtimer_start_range_ns+0x53d/0x580 [ 131.136168][ T4361] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 131.141642][ T4361] ? __rcu_read_lock+0x36/0x50 [ 131.146414][ T4361] ? pte_offset_map_nolock+0x124/0x1d0 [ 131.151889][ T4361] handle_mm_fault+0x8cb/0x2a30 [ 131.156761][ T4361] exc_page_fault+0x3b9/0x650 [ 131.161526][ T4361] asm_exc_page_fault+0x26/0x30 [ 131.166601][ T4361] RIP: 0033:0x7f7bedf4ffa5 [ 131.171100][ T4361] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e c5 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 131.190853][ T4361] RSP: 002b:00007ffddfccf548 EFLAGS: 00010246 [ 131.197056][ T4361] RAX: 0000000000000000 RBX: 000000000000014e RCX: 00007f7bedf4ffa3 [ 131.205028][ T4361] RDX: 00007ffddfccf560 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.213098][ T4361] RBP: 00007ffddfccf5bc R08: 0000000029158ca8 R09: 7fffffffffffffff [ 131.221062][ T4361] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 131.229038][ T4361] R13: 000000000001faf7 R14: 000000000001fa58 R15: 00007ffddfccf610 [ 131.237017][ T4361] [ 131.240149][ T4361] memory: usage 307200kB, limit 307200kB, failcnt 251 [ 131.247162][ T4361] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 131.249131][ T6053] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 131.255070][ T4361] kmem: usage 306584kB, limit 9007199254740988kB, failcnt 0 [ 131.255085][ T4361] Memory cgroup stats for /syz3: [ 131.275214][ T4361] cache 622592 [ 131.283664][ T4361] rss 0 [ 131.286511][ T4361] shmem 0 [ 131.289459][ T4361] mapped_file 622592 [ 131.293346][ T4361] dirty 622592 [ 131.296840][ T4361] writeback 4096 [ 131.300408][ T4361] workingset_refault_anon 11 [ 131.305050][ T4361] workingset_refault_file 0 [ 131.309582][ T4361] swap 196608 [ 131.312880][ T4361] swapcached 8192 [ 131.316537][ T4361] pgpgin 27495 [ 131.319983][ T4361] pgpgout 27341 [ 131.323443][ T4361] pgfault 41540 [ 131.327083][ T4361] pgmajfault 21 [ 131.330607][ T4361] inactive_anon 0 [ 131.334292][ T4361] active_anon 8192 [ 131.338038][ T4361] inactive_file 0 [ 131.341715][ T4361] active_file 622592 [ 131.345688][ T4361] unevictable 0 [ 131.349171][ T4361] hierarchical_memory_limit 314572800 [ 131.354576][ T4361] hierarchical_memsw_limit 9223372036854771712 [ 131.360755][ T4361] total_cache 622592 [ 131.364693][ T4361] total_rss 0 [ 131.367979][ T4361] total_shmem 0 [ 131.371494][ T4361] total_mapped_file 622592 [ 131.375941][ T4361] total_dirty 622592 [ 131.379846][ T4361] total_writeback 4096 [ 131.383914][ T4361] total_workingset_refault_anon 11 [ 131.389092][ T4361] total_workingset_refault_file 0 [ 131.394202][ T4361] total_swap 196608 [ 131.398044][ T4361] total_swapcached 8192 [ 131.402203][ T4361] total_pgpgin 27495 [ 131.406169][ T4361] total_pgpgout 27341 [ 131.410154][ T4361] total_pgfault 41540 [ 131.414131][ T4361] total_pgmajfault 21 [ 131.418221][ T4361] total_inactive_anon 0 [ 131.422402][ T4361] total_active_anon 8192 [ 131.426688][ T4361] total_inactive_file 0 [ 131.427799][ T29] audit: type=1400 audit(1726434490.422:3491): avc: denied { ioctl } for pid=6050 comm="syz.0.804" path="socket:[16226]" dev="sockfs" ino=16226 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 131.431536][ T4361] total_active_file 622592 [ 131.460603][ T4361] total_unevictable 0 [ 131.464613][ T4361] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.795,pid=6008,uid=0 [ 131.479483][ T4361] Memory cgroup out of memory: Killed process 6008 (syz.3.795) total-vm:87116kB, anon-rss:612kB, file-rss:16036kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 131.504500][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 131.613019][ T6060] FAULT_INJECTION: forcing a failure. [ 131.613019][ T6060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.626193][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.2.807 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 131.636810][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 131.646988][ T6060] Call Trace: [ 131.650329][ T6060] [ 131.653268][ T6060] dump_stack_lvl+0xf2/0x150 [ 131.657893][ T6060] dump_stack+0x15/0x20 [ 131.662067][ T6060] should_fail_ex+0x229/0x230 [ 131.666854][ T6060] should_fail+0xb/0x10 [ 131.671106][ T6060] should_fail_usercopy+0x1a/0x20 [ 131.676158][ T6060] _copy_from_user+0x1e/0xd0 [ 131.680788][ T6060] copy_msghdr_from_user+0x54/0x2a0 [ 131.686024][ T6060] __sys_sendmsg+0x17d/0x280 [ 131.690653][ T6060] __x64_sys_sendmsg+0x46/0x50 [ 131.695458][ T6060] x64_sys_call+0x2689/0x2d60 [ 131.700238][ T6060] do_syscall_64+0xc9/0x1c0 [ 131.704764][ T6060] ? clear_bhb_loop+0x55/0xb0 [ 131.709461][ T6060] ? clear_bhb_loop+0x55/0xb0 [ 131.714208][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.720135][ T6060] RIP: 0033:0x7fb74ddadef9 [ 131.724608][ T6060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.744311][ T6060] RSP: 002b:00007fb74ca21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.752754][ T6060] RAX: ffffffffffffffda RBX: 00007fb74df65f80 RCX: 00007fb74ddadef9 [ 131.760735][ T6060] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000008 [ 131.768723][ T6060] RBP: 00007fb74ca21090 R08: 0000000000000000 R09: 0000000000000000 [ 131.776770][ T6060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.784745][ T6060] R13: 0000000000000000 R14: 00007fb74df65f80 R15: 00007ffcd297e6c8 [ 131.792787][ T6060] [ 131.855295][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.874999][ T6066] tmpfs: Bad value for 'mpol' [ 131.879945][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.912878][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.922544][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.931101][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.939126][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.947584][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.965675][ T5960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.976366][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.999427][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.008230][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.017281][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.026186][ T29] audit: type=1400 audit(1726434491.022:3492): avc: denied { write } for pid=6072 comm="syz.4.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.045811][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.077241][ T5960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.106719][ T6074] vhci_hcd: invalid port number 36 [ 132.111986][ T6074] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 132.119284][ T6075] vhci_hcd: invalid port number 36 [ 132.124458][ T6075] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 132.139641][ T5960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.210594][ T5960] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.221820][ T5960] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.232904][ T5960] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.243805][ T5960] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.253312][ T29] audit: type=1400 audit(1726434491.242:3493): avc: denied { write } for pid=2943 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.274850][ T29] audit: type=1400 audit(1726434491.242:3494): avc: denied { remove_name } for pid=2943 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.297516][ T29] audit: type=1400 audit(1726434491.242:3495): avc: denied { rename } for pid=2943 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.319798][ T29] audit: type=1400 audit(1726434491.242:3496): avc: denied { add_name } for pid=2943 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.329975][ T6080] netlink: 'syz.1.814': attribute type 153 has an invalid length. [ 132.342483][ T29] audit: type=1400 audit(1726434491.242:3497): avc: denied { unlink } for pid=2943 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.362398][ T6080] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 132.380544][ T6080] netlink: 17 bytes leftover after parsing attributes in process `syz.1.814'. [ 132.465791][ T6082] wireguard0: entered allmulticast mode [ 132.534408][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 132.606755][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'. [ 132.626144][ T6092] hsr_slave_1 (unregistering): left promiscuous mode [ 132.674415][ T6095] ref_ctr_offset mismatch. inode: 0x210 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6c [ 132.737524][ T6101] loop0: detected capacity change from 0 to 4096 [ 132.744199][ T6101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.753119][ T6101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.778289][ T4353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.800528][ T6106] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.846237][ T6106] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.899439][ T6112] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 132.912542][ T6106] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.966252][ T6106] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.983535][ T6117] netlink: 'syz.2.825': attribute type 39 has an invalid length. [ 132.991887][ T6117] veth1_macvtap: left promiscuous mode [ 133.021434][ T6106] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.032849][ T6106] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.043985][ T6106] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.055210][ T6106] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.137006][ T6120] wireguard6: entered allmulticast mode [ 133.178866][ T6126] netlink: 'syz.2.828': attribute type 6 has an invalid length. [ 133.206381][ T6128] loop2: detected capacity change from 0 to 2048 [ 133.216363][ T6128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.231339][ T6128] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.246372][ T6128] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 133.258756][ T6128] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.258756][ T6128] [ 133.268427][ T6128] EXT4-fs (loop2): Total free blocks count 0 [ 133.274518][ T6128] EXT4-fs (loop2): Free/Dirty block details [ 133.280457][ T6128] EXT4-fs (loop2): free_blocks=2415919104 [ 133.286268][ T6128] EXT4-fs (loop2): dirty_blocks=16 [ 133.291446][ T6128] EXT4-fs (loop2): Block reservation details [ 133.297500][ T6128] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 133.328554][ T6128] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 133.386298][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.394847][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.407768][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.417196][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.425870][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.434605][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.545695][ T6137] vhci_hcd: invalid port number 36 [ 133.550853][ T6137] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 133.572428][ T6139] FAULT_INJECTION: forcing a failure. [ 133.572428][ T6139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.585766][ T6139] CPU: 0 UID: 0 PID: 6139 Comm: syz.4.831 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 133.594403][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 133.596352][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 133.596369][ T6139] Call Trace: [ 133.596379][ T6139] [ 133.619566][ T6139] dump_stack_lvl+0xf2/0x150 [ 133.624193][ T6139] dump_stack+0x15/0x20 [ 133.628364][ T6139] should_fail_ex+0x229/0x230 [ 133.633056][ T6139] should_fail+0xb/0x10 [ 133.637209][ T6139] should_fail_usercopy+0x1a/0x20 [ 133.642233][ T6139] _copy_to_user+0x1e/0xa0 [ 133.646715][ T6139] bpf_test_finish+0x324/0x4e0 [ 133.651482][ T6139] bpf_prog_test_run_xdp+0x596/0x890 [ 133.656886][ T6139] ? __fget_files+0x1da/0x210 [ 133.661570][ T6139] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.667434][ T6139] bpf_prog_test_run+0x26d/0x3e0 [ 133.672373][ T6139] __sys_bpf+0x400/0x7a0 [ 133.676617][ T6139] __x64_sys_bpf+0x43/0x50 [ 133.681064][ T6139] x64_sys_call+0x2625/0x2d60 [ 133.685762][ T6139] do_syscall_64+0xc9/0x1c0 [ 133.690311][ T6139] ? clear_bhb_loop+0x55/0xb0 [ 133.694991][ T6139] ? clear_bhb_loop+0x55/0xb0 [ 133.699693][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.705672][ T6139] RIP: 0033:0x7fb79c73def9 [ 133.710174][ T6139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.729881][ T6139] RSP: 002b:00007fb79b3b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.738357][ T6139] RAX: ffffffffffffffda RBX: 00007fb79c8f5f80 RCX: 00007fb79c73def9 [ 133.746396][ T6139] RDX: 0000000000000050 RSI: 0000000020000300 RDI: 000000000000000a [ 133.754475][ T6139] RBP: 00007fb79b3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 133.762509][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.770553][ T6139] R13: 0000000000000000 R14: 00007fb79c8f5f80 R15: 00007ffce36fcde8 [ 133.778530][ T6139] [ 133.898621][ T6144] loop3: detected capacity change from 0 to 512 [ 133.905137][ T6144] ext4: Unknown parameter 'fowner>00000000000000000000' [ 133.920313][ T6144] FAULT_INJECTION: forcing a failure. [ 133.920313][ T6144] name failslab, interval 1, probability 0, space 0, times 0 [ 133.933002][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.3.833 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 133.943578][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 133.953642][ T6144] Call Trace: [ 133.957007][ T6144] [ 133.959993][ T6144] dump_stack_lvl+0xf2/0x150 [ 133.964648][ T6144] dump_stack+0x15/0x20 [ 133.968812][ T6144] should_fail_ex+0x229/0x230 [ 133.973507][ T6144] ? kobject_uevent_env+0x1a4/0x550 [ 133.978791][ T6144] should_failslab+0x8f/0xb0 [ 133.983466][ T6144] __kmalloc_cache_noprof+0x4b/0x2a0 [ 133.988755][ T6144] ? up_write+0x30/0xf0 [ 133.993036][ T6144] kobject_uevent_env+0x1a4/0x550 [ 133.998110][ T6144] kobject_uevent+0x1c/0x30 [ 134.002659][ T6144] __kobject_del+0x8e/0x1a0 [ 134.007239][ T6144] kobject_put+0x126/0x180 [ 134.011678][ T6144] netdev_queue_update_kobjects+0x42f/0x470 [ 134.017585][ T6144] netdev_unregister_kobject+0xc1/0x120 [ 134.023139][ T6144] unregister_netdevice_many_notify+0xd21/0x1110 [ 134.029489][ T6144] unregister_netdevice_queue+0x1f4/0x220 [ 134.035271][ T6144] __tun_detach+0x79e/0xaa0 [ 134.039784][ T6144] tun_chr_close+0x5e/0x100 [ 134.044304][ T6144] ? __pfx_tun_chr_close+0x10/0x10 [ 134.049424][ T6144] __fput+0x192/0x6f0 [ 134.053431][ T6144] __fput_sync+0x44/0x60 [ 134.057726][ T6144] __se_sys_close+0x101/0x1b0 [ 134.062428][ T6144] __x64_sys_close+0x1f/0x30 [ 134.067055][ T6144] x64_sys_call+0x25cb/0x2d60 [ 134.071754][ T6144] do_syscall_64+0xc9/0x1c0 [ 134.076260][ T6144] ? clear_bhb_loop+0x55/0xb0 [ 134.080943][ T6144] ? clear_bhb_loop+0x55/0xb0 [ 134.085624][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.091601][ T6144] RIP: 0033:0x7f7bedf1def9 [ 134.096012][ T6144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.115686][ T6144] RSP: 002b:00007f7becb91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 134.124114][ T6144] RAX: ffffffffffffffda RBX: 00007f7bee0d5f80 RCX: 00007f7bedf1def9 [ 134.132182][ T6144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 134.140222][ T6144] RBP: 00007f7becb91090 R08: 0000000000000000 R09: 0000000000000000 [ 134.148204][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.156226][ T6144] R13: 0000000000000000 R14: 00007f7bee0d5f80 R15: 00007ffddfccf1f8 [ 134.164204][ T6144] [ 134.204617][ T6151] tmpfs: Bad value for 'mpol' [ 134.223302][ T6153] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.265774][ T6153] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.304648][ T6156] wireguard7: entered allmulticast mode [ 134.324511][ T6162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.326165][ T6153] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.345427][ T6165] netlink: 'syz.3.840': attribute type 6 has an invalid length. [ 134.366497][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 134.382489][ T6168] FAULT_INJECTION: forcing a failure. [ 134.382489][ T6168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.395604][ T6168] CPU: 1 UID: 0 PID: 6168 Comm: syz.3.841 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 134.406279][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 134.416433][ T6168] Call Trace: [ 134.419715][ T6168] [ 134.422643][ T6168] dump_stack_lvl+0xf2/0x150 [ 134.427393][ T6168] dump_stack+0x15/0x20 [ 134.431586][ T6168] should_fail_ex+0x229/0x230 [ 134.436339][ T6168] should_fail+0xb/0x10 [ 134.440641][ T6168] should_fail_usercopy+0x1a/0x20 [ 134.445678][ T6168] _copy_from_user+0x1e/0xd0 [ 134.450320][ T6168] br_ioctl_stub+0xef/0x5d0 [ 134.454946][ T6168] ? do_vfs_ioctl+0x99e/0x1560 [ 134.459804][ T6168] ? __pfx_br_ioctl_stub+0x10/0x10 [ 134.464941][ T6168] sock_ioctl+0x439/0x640 [ 134.469295][ T6168] ? __pfx_sock_ioctl+0x10/0x10 [ 134.474182][ T6168] __se_sys_ioctl+0xd3/0x150 [ 134.478782][ T6168] __x64_sys_ioctl+0x43/0x50 [ 134.483381][ T6168] x64_sys_call+0x15cc/0x2d60 [ 134.488089][ T6168] do_syscall_64+0xc9/0x1c0 [ 134.492668][ T6168] ? clear_bhb_loop+0x55/0xb0 [ 134.497401][ T6168] ? clear_bhb_loop+0x55/0xb0 [ 134.502082][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.507991][ T6168] RIP: 0033:0x7f7bedf1def9 [ 134.512412][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.532026][ T6168] RSP: 002b:00007f7becb91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.540465][ T6168] RAX: ffffffffffffffda RBX: 00007f7bee0d5f80 RCX: 00007f7bedf1def9 [ 134.548446][ T6168] RDX: 00000000200002c0 RSI: 00000000000089a0 RDI: 0000000000000005 [ 134.556504][ T6168] RBP: 00007f7becb91090 R08: 0000000000000000 R09: 0000000000000000 [ 134.564472][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.572435][ T6168] R13: 0000000000000000 R14: 00007f7bee0d5f80 R15: 00007ffddfccf1f8 [ 134.580423][ T6168] [ 134.588096][ T6153] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.599391][ T6170] netlink: 'syz.2.842': attribute type 10 has an invalid length. [ 134.607199][ T6170] netlink: 152 bytes leftover after parsing attributes in process `syz.2.842'. [ 134.616501][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 134.665331][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.667856][ T6177] loop3: detected capacity change from 0 to 256 [ 134.680402][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.693393][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.693470][ T6177] FAT-fs (loop3): Directory bread(block 64) failed [ 134.708849][ T6177] FAT-fs (loop3): Directory bread(block 65) failed [ 134.715444][ T6177] FAT-fs (loop3): Directory bread(block 66) failed [ 134.722043][ T6177] FAT-fs (loop3): Directory bread(block 67) failed [ 134.725825][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.729801][ T6180] tmpfs: Bad value for 'mpol' [ 134.738844][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.740992][ T6177] FAT-fs (loop3): Directory bread(block 68) failed [ 134.755955][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.755923][ T6177] FAT-fs (loop3): Directory bread(block 69) failed [ 134.771533][ T6177] FAT-fs (loop3): Directory bread(block 70) failed [ 134.782547][ T6177] FAT-fs (loop3): Directory bread(block 71) failed [ 134.789336][ T6177] FAT-fs (loop3): Directory bread(block 72) failed [ 134.797119][ T6177] FAT-fs (loop3): Directory bread(block 73) failed [ 134.821950][ T6184] syz.4.849[6184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.822096][ T6184] syz.4.849[6184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.841804][ T6184] bond1: entered promiscuous mode [ 134.858279][ T6184] bond1: entered allmulticast mode [ 134.859520][ T6188] vhci_hcd: invalid port number 36 [ 134.863766][ T6184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.868605][ T6188] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 134.896373][ T6190] netlink: 'syz.4.851': attribute type 6 has an invalid length. [ 134.909529][ T6187] wireguard8: entered allmulticast mode [ 134.945212][ T6198] FAULT_INJECTION: forcing a failure. [ 134.945212][ T6198] name failslab, interval 1, probability 0, space 0, times 0 [ 134.958034][ T6198] CPU: 0 UID: 0 PID: 6198 Comm: syz.3.854 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 134.968692][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 134.978774][ T6198] Call Trace: [ 134.982051][ T6198] [ 134.985007][ T6198] dump_stack_lvl+0xf2/0x150 [ 134.989638][ T6198] dump_stack+0x15/0x20 [ 134.993793][ T6198] should_fail_ex+0x229/0x230 [ 134.998480][ T6198] ? sidtab_sid2str_get+0xb8/0x140 [ 135.003593][ T6198] should_failslab+0x8f/0xb0 [ 135.008201][ T6198] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 135.014561][ T6198] kmemdup_noprof+0x2a/0x60 [ 135.019132][ T6198] sidtab_sid2str_get+0xb8/0x140 [ 135.024095][ T6198] security_sid_to_context_core+0x1eb/0x2f0 [ 135.030010][ T6198] security_sid_to_context+0x27/0x30 [ 135.035372][ T6198] selinux_secid_to_secctx+0x22/0x30 [ 135.040655][ T6198] security_secid_to_secctx+0x4a/0x80 [ 135.046116][ T6198] audit_log_task_context+0x8c/0x1b0 [ 135.051399][ T6198] audit_log_task+0xfb/0x180 [ 135.056088][ T6198] audit_seccomp+0x68/0x130 [ 135.060717][ T6198] __seccomp_filter+0x6fa/0x1180 [ 135.065660][ T6198] ? proc_fail_nth_write+0x130/0x160 [ 135.070942][ T6198] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 135.076574][ T6198] ? vfs_write+0x5a5/0x900 [ 135.081068][ T6198] __secure_computing+0x9f/0x1c0 [ 135.086007][ T6198] syscall_trace_enter+0xd1/0x1f0 [ 135.091037][ T6198] do_syscall_64+0xaa/0x1c0 [ 135.095533][ T6198] ? clear_bhb_loop+0x55/0xb0 [ 135.100203][ T6198] ? clear_bhb_loop+0x55/0xb0 [ 135.104916][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.110860][ T6198] RIP: 0033:0x7f7bedf1def9 [ 135.115266][ T6198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.134952][ T6198] RSP: 002b:00007f7becb91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 135.143431][ T6198] RAX: ffffffffffffffda RBX: 00007f7bee0d5f80 RCX: 00007f7bedf1def9 [ 135.151397][ T6198] RDX: 0000000000200000 RSI: 0000000000600000 RDI: 0000000020000000 [ 135.159379][ T6198] RBP: 00007f7becb91090 R08: 0000000020a00000 R09: 0000000000000000 [ 135.167417][ T6198] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 135.175385][ T6198] R13: 0000000000000000 R14: 00007f7bee0d5f80 R15: 00007ffddfccf1f8 [ 135.183393][ T6198] [ 135.186543][ T6198] audit_panic: 99 callbacks suppressed [ 135.186555][ T6198] audit: error in audit_log_task_context [ 135.197911][ T29] audit: type=1326 audit(1726434493.942:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6197 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f7bedf1def9 code=0x7ffc0000 [ 135.218909][ T29] audit: type=1326 audit(1726434494.192:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7bedf1c93c code=0x7ffc0000 [ 135.242097][ T29] audit: type=1326 audit(1726434494.192:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7bedf1c9df code=0x7ffc0000 [ 135.259110][ T6202] loop3: detected capacity change from 0 to 2048 [ 135.265419][ T29] audit: type=1326 audit(1726434494.192:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7bedf1cb8a code=0x7ffc0000 [ 135.294869][ T29] audit: type=1326 audit(1726434494.192:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bedf1def9 code=0x7ffc0000 [ 135.318261][ T29] audit: type=1326 audit(1726434494.192:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bedf1def9 code=0x7ffc0000 [ 135.347001][ T6202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.504515][ T6211] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.519980][ T6211] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 135.532364][ T6211] EXT4-fs (loop3): This should not happen!! Data will be lost [ 135.532364][ T6211] [ 135.542152][ T6211] EXT4-fs (loop3): Total free blocks count 0 [ 135.548153][ T6211] EXT4-fs (loop3): Free/Dirty block details [ 135.554158][ T6211] EXT4-fs (loop3): free_blocks=2415919104 [ 135.559936][ T6211] EXT4-fs (loop3): dirty_blocks=32 [ 135.565072][ T6211] EXT4-fs (loop3): Block reservation details [ 135.571050][ T6211] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 135.612999][ T29] audit: type=1326 audit(1726434494.602:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74ddadef9 code=0x7ffc0000 [ 135.636687][ T29] audit: type=1326 audit(1726434494.602:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74ddadef9 code=0x7ffc0000 [ 135.646609][ T6215] tmpfs: Bad value for 'mpol' [ 135.660239][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 135.671824][ T29] audit: type=1326 audit(1726434494.602:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fb74ddadef9 code=0x7ffc0000 [ 135.725689][ T6221] netlink: 'syz.2.862': attribute type 6 has an invalid length. [ 135.803805][ T6223] wireguard7: entered allmulticast mode [ 135.847194][ T6229] tap0: tun_chr_ioctl cmd 1074025675 [ 135.852590][ T6229] tap0: persist disabled [ 136.108055][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.117036][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.130216][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.139073][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.147424][ T1608] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 136.148093][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.168376][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.200771][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 136.265730][ T6246] vhci_hcd: invalid port number 36 [ 136.270922][ T6246] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 136.694494][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 136.793998][ T6248] syz.3.872[6248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.794058][ T6248] syz.3.872[6248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.947880][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 136.991054][ T6256] loop3: detected capacity change from 0 to 1024 [ 136.997712][ T6256] EXT4-fs: Ignoring removed i_version option [ 137.004041][ T6256] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.015203][ T6256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.048758][ T4361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.734413][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 137.886132][ T6271] syz.2.876: attempt to access beyond end of device [ 137.886132][ T6271] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 137.917371][ T6274] netlink: 60 bytes leftover after parsing attributes in process `syz.2.877'. [ 137.929868][ T6274] loop2: detected capacity change from 0 to 512 [ 137.946216][ T6274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.958814][ T6274] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.980500][ T4363] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.011073][ T6281] loop3: detected capacity change from 0 to 2048 [ 138.026228][ T6281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.053414][ T6284] loop2: detected capacity change from 0 to 256 [ 138.065751][ T6284] loop2: detected capacity change from 0 to 512 [ 138.075622][ T6284] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.084727][ T6284] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 138.134559][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.143271][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.156096][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.164742][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.173269][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.181815][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.190623][ T6287] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.205645][ T6287] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 138.218067][ T6287] EXT4-fs (loop3): This should not happen!! Data will be lost [ 138.218067][ T6287] [ 138.227762][ T6287] EXT4-fs (loop3): Total free blocks count 0 [ 138.233866][ T6287] EXT4-fs (loop3): Free/Dirty block details [ 138.239894][ T6287] EXT4-fs (loop3): free_blocks=2415919104 [ 138.245721][ T6287] EXT4-fs (loop3): dirty_blocks=32 [ 138.250841][ T6287] EXT4-fs (loop3): Block reservation details [ 138.256872][ T6287] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 138.279654][ T6290] vhci_hcd: invalid port number 36 [ 138.284859][ T6290] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 138.449362][ T6296] netlink: 'syz.4.885': attribute type 6 has an invalid length. [ 138.507801][ T6302] SELinux: policydb string length 16 does not match expected length 8 [ 138.516230][ T6302] SELinux: failed to load policy [ 138.752220][ T6311] loop4: detected capacity change from 0 to 4096 [ 138.758944][ T6311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.768002][ T6311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.780538][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 138.798470][ T4367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.845505][ T6320] loop4: detected capacity change from 0 to 1024 [ 138.852286][ T6320] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.860438][ T6320] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 138.907764][ T6320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.921835][ T6326] netlink: 'syz.2.897': attribute type 6 has an invalid length. [ 138.930582][ T3353] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 138.951976][ T6328] loop2: detected capacity change from 0 to 256 [ 139.189071][ T6340] loop1: detected capacity change from 0 to 4096 [ 139.195797][ T6340] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.204420][ T6340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.226798][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.247768][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.256382][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.269009][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.277808][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.286411][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.295133][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.362444][ T6349] tmpfs: Bad value for 'mpol' [ 139.363338][ T6350] netlink: 'syz.2.905': attribute type 3 has an invalid length. [ 139.377312][ T6350] netlink: 'syz.2.905': attribute type 3 has an invalid length. [ 139.385638][ T6353] vhci_hcd: invalid port number 36 [ 139.390840][ T6353] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 139.415827][ T6357] FAULT_INJECTION: forcing a failure. [ 139.415827][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 139.428523][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.3.908 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 139.439140][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 139.441272][ T6359] loop2: detected capacity change from 0 to 2048 [ 139.449261][ T6357] Call Trace: [ 139.449273][ T6357] [ 139.449286][ T6357] dump_stack_lvl+0xf2/0x150 [ 139.466476][ T6357] dump_stack+0x15/0x20 [ 139.470640][ T6357] should_fail_ex+0x229/0x230 [ 139.475372][ T6357] ? __kvmalloc_node_noprof+0x72/0x170 [ 139.480839][ T6357] should_failslab+0x8f/0xb0 [ 139.485457][ T6357] __kmalloc_node_noprof+0xa8/0x380 [ 139.490672][ T6357] __kvmalloc_node_noprof+0x72/0x170 [ 139.495966][ T6357] xt_alloc_table_info+0x3d/0x80 [ 139.500918][ T6357] do_ip6t_set_ctl+0x678/0x8c0 [ 139.505702][ T6357] nf_setsockopt+0x195/0x1b0 [ 139.510297][ T6357] ipv6_setsockopt+0x126/0x140 [ 139.515103][ T6357] rawv6_setsockopt+0x21e/0x410 [ 139.520038][ T6357] sock_common_setsockopt+0x64/0x80 [ 139.525254][ T6357] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 139.531194][ T6357] __sys_setsockopt+0x1d8/0x250 [ 139.536053][ T6357] __x64_sys_setsockopt+0x66/0x80 [ 139.541140][ T6357] x64_sys_call+0x278d/0x2d60 [ 139.545871][ T6357] do_syscall_64+0xc9/0x1c0 [ 139.550390][ T6357] ? clear_bhb_loop+0x55/0xb0 [ 139.555137][ T6357] ? clear_bhb_loop+0x55/0xb0 [ 139.559816][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.565870][ T6357] RIP: 0033:0x7f7bedf1def9 [ 139.570285][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.589942][ T6357] RSP: 002b:00007f7becb91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.598395][ T6357] RAX: ffffffffffffffda RBX: 00007f7bee0d5f80 RCX: 00007f7bedf1def9 [ 139.606444][ T6357] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 139.614547][ T6357] RBP: 00007f7becb91090 R08: 0000000000000438 R09: 0000000000000000 [ 139.622525][ T6357] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 139.630581][ T6357] R13: 0000000000000000 R14: 00007f7bee0d5f80 R15: 00007ffddfccf1f8 [ 139.638573][ T6357] [ 139.658550][ T6361] netlink: 44 bytes leftover after parsing attributes in process `syz.3.910'. [ 139.668805][ T6359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.707662][ T6365] loop3: detected capacity change from 0 to 128 [ 139.736038][ T4367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.745650][ T6365] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.759215][ T6365] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.793280][ T6369] FAULT_INJECTION: forcing a failure. [ 139.793280][ T6369] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.806588][ T6369] CPU: 1 UID: 0 PID: 6369 Comm: syz.4.912 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 139.817374][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 139.827450][ T6369] Call Trace: [ 139.830739][ T6369] [ 139.833671][ T6369] dump_stack_lvl+0xf2/0x150 [ 139.838297][ T6369] dump_stack+0x15/0x20 [ 139.842450][ T6369] should_fail_ex+0x229/0x230 [ 139.847129][ T6369] should_fail_alloc_page+0xfd/0x110 [ 139.852498][ T6369] __alloc_pages_noprof+0x109/0x360 [ 139.857744][ T6369] ___kmalloc_large_node+0x7a/0x120 [ 139.862966][ T6369] __kmalloc_large_noprof+0x1f/0xb0 [ 139.865588][ T6370] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 139.868172][ T6369] bpf_check+0x78/0xa360 [ 139.876463][ T6370] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.880639][ T6369] ? cgroup_rstat_updated+0x99/0x550 [ 139.891169][ T6370] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 139.894693][ T6369] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 139.894740][ T6369] ? cgroup_rstat_updated+0x99/0x550 [ 139.907094][ T6370] EXT4-fs (loop2): This should not happen!! Data will be lost [ 139.907094][ T6370] [ 139.913090][ T6369] ? pcpu_chunk_relocate+0x183/0x280 [ 139.918385][ T6370] EXT4-fs (loop2): Total free blocks count 0 [ 139.927959][ T6369] ? __mod_memcg_state+0x10d/0x200 [ 139.933241][ T6370] EXT4-fs (loop2): Free/Dirty block details [ 139.939245][ T6369] ? __rcu_read_unlock+0x4e/0x70 [ 139.944387][ T6370] EXT4-fs (loop2): free_blocks=2415919104 [ 139.950230][ T6369] ? pcpu_memcg_post_alloc_hook+0x158/0x1c0 [ 139.955162][ T6370] EXT4-fs (loop2): dirty_blocks=32 [ 139.960858][ T6369] ? bpf_prog_alloc+0x59/0x150 [ 139.960879][ T6369] ? pcpu_alloc_noprof+0xb92/0x10c0 [ 139.960908][ T6369] ? should_fail_ex+0xd7/0x230 [ 139.966810][ T6370] EXT4-fs (loop2): Block reservation details [ 139.971867][ T6369] ? selinux_bpf_prog_load+0x35/0xe0 [ 139.976634][ T6370] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 139.981781][ T6369] ? should_failslab+0x8f/0xb0 [ 140.008753][ T6369] ? __kmalloc_cache_noprof+0x10b/0x2a0 [ 140.014344][ T6369] ? selinux_bpf_prog_load+0xbb/0xe0 [ 140.019738][ T6369] bpf_prog_load+0xed4/0x1070 [ 140.024517][ T6369] __sys_bpf+0x463/0x7a0 [ 140.028784][ T6369] __x64_sys_bpf+0x43/0x50 [ 140.033288][ T6369] x64_sys_call+0x2625/0x2d60 [ 140.038038][ T6369] do_syscall_64+0xc9/0x1c0 [ 140.042608][ T6369] ? clear_bhb_loop+0x55/0xb0 [ 140.047325][ T6369] ? clear_bhb_loop+0x55/0xb0 [ 140.052062][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.057965][ T6369] RIP: 0033:0x7fb79c73def9 [ 140.062375][ T6369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.082057][ T6369] RSP: 002b:00007fb79b3b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.090464][ T6369] RAX: ffffffffffffffda RBX: 00007fb79c8f5f80 RCX: 00007fb79c73def9 [ 140.098495][ T6369] RDX: 0000000000000094 RSI: 00000000200000c0 RDI: 0000000000000005 [ 140.106486][ T6369] RBP: 00007fb79b3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 140.114570][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.122533][ T6369] R13: 0000000000000000 R14: 00007fb79c8f5f80 R15: 00007ffce36fcde8 [ 140.130501][ T6369] [ 140.133632][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 140.148256][ T4361] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.190118][ T6377] loop3: detected capacity change from 0 to 4096 [ 140.197239][ T6377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.208193][ T6377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.223478][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 140.223493][ T29] audit: type=1326 audit(1726434499.212:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bedf1def9 code=0x7ffc0000 [ 140.253183][ T29] audit: type=1326 audit(1726434499.212:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bedf1def9 code=0x7ffc0000 [ 140.253770][ T4361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.276475][ T29] audit: type=1326 audit(1726434499.212:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f7bedf1def9 code=0x7ffc0000 [ 140.308805][ T29] audit: type=1326 audit(1726434499.212:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bedf1def9 code=0x7ffc0000 [ 140.317690][ T6387] tmpfs: Bad value for 'mpol' [ 140.356770][ T6389] FAULT_INJECTION: forcing a failure. [ 140.356770][ T6389] name failslab, interval 1, probability 0, space 0, times 0 [ 140.369689][ T6389] CPU: 1 UID: 0 PID: 6389 Comm: syz.4.918 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 140.380349][ T6389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 140.390489][ T6389] Call Trace: [ 140.391329][ T6395] netlink: 'syz.1.920': attribute type 6 has an invalid length. [ 140.393760][ T6389] [ 140.393770][ T6389] dump_stack_lvl+0xf2/0x150 [ 140.408904][ T6389] dump_stack+0x15/0x20 [ 140.413072][ T6389] should_fail_ex+0x229/0x230 [ 140.417847][ T6389] ? __alloc_skb+0x10b/0x310 [ 140.421567][ T6398] netlink: 'syz.1.921': attribute type 6 has an invalid length. [ 140.422462][ T6389] should_failslab+0x8f/0xb0 [ 140.431411][ T29] audit: type=1400 audit(1726434499.422:3814): avc: denied { shutdown } for pid=6397 comm="syz.1.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 140.434776][ T6389] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 140.434815][ T6389] __alloc_skb+0x10b/0x310 [ 140.464546][ T6389] netlink_alloc_large_skb+0xad/0xe0 [ 140.469838][ T6389] netlink_sendmsg+0x3b4/0x6e0 [ 140.474613][ T6389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.479897][ T6389] __sock_sendmsg+0x140/0x180 [ 140.484658][ T6389] ____sys_sendmsg+0x312/0x410 [ 140.489555][ T6389] __sys_sendmsg+0x1e9/0x280 [ 140.494299][ T6389] __x64_sys_sendmsg+0x46/0x50 [ 140.499078][ T6389] x64_sys_call+0x2689/0x2d60 [ 140.503826][ T6389] do_syscall_64+0xc9/0x1c0 [ 140.508330][ T6389] ? clear_bhb_loop+0x55/0xb0 [ 140.513020][ T6389] ? clear_bhb_loop+0x55/0xb0 [ 140.517721][ T6389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.523726][ T6389] RIP: 0033:0x7fb79c73def9 [ 140.528222][ T6389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.547839][ T6389] RSP: 002b:00007fb79b3b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.556414][ T6389] RAX: ffffffffffffffda RBX: 00007fb79c8f5f80 RCX: 00007fb79c73def9 [ 140.564383][ T6389] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000009 [ 140.572386][ T6389] RBP: 00007fb79b3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 140.580465][ T6389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.588458][ T6389] R13: 0000000000000000 R14: 00007fb79c8f5f80 R15: 00007ffce36fcde8 [ 140.596517][ T6389] [ 140.649935][ T28] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 140.732308][ T6153] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.747532][ T6153] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.759330][ T6153] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.770646][ T6153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.779106][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 140.810161][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 140.821868][ T6414] loop0: detected capacity change from 0 to 512 [ 140.828455][ T6414] EXT4-fs: Ignoring removed i_version option [ 140.834644][ T6414] EXT4-fs: Ignoring removed nobh option [ 140.840879][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.922'. [ 140.841100][ T6414] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.861644][ T6414] EXT4-fs (loop0): 1 truncate cleaned up [ 140.867737][ T6414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.888480][ T29] audit: type=1400 audit(1726434499.882:3815): avc: denied { lock } for pid=6413 comm="syz.0.926" path="/104/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.912000][ T29] audit: type=1400 audit(1726434499.882:3816): avc: denied { setattr } for pid=6413 comm="syz.0.926" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.937493][ T4353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.975744][ T6424] tmpfs: Bad value for 'mpol' [ 141.174405][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 141.202945][ T29] audit: type=1400 audit(1726434500.192:3817): avc: denied { write } for pid=6430 comm="syz.0.930" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 141.282404][ T6436] netlink: 'syz.0.932': attribute type 6 has an invalid length. [ 141.327063][ T29] audit: type=1400 audit(1726434500.322:3818): avc: denied { setopt } for pid=6437 comm="syz.0.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.327238][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 141.513266][ T6442] loop4: detected capacity change from 0 to 2048 [ 141.526147][ T6442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.699982][ T6451] wireguard1: entered allmulticast mode [ 141.785669][ T6464] tmpfs: Bad value for 'mpol' [ 141.795740][ T6465] syz.2.940[6465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.795874][ T6465] syz.2.940[6465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.819132][ T6465] loop2: detected capacity change from 0 to 128 [ 141.835540][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.941'. [ 141.837536][ T6465] EXT4-fs: Ignoring removed nobh option [ 141.853566][ T6465] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.869269][ T29] audit: type=1400 audit(1726434500.862:3819): avc: denied { create } for pid=6466 comm="syz.1.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.888978][ T6465] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.952905][ T6470] loop1: detected capacity change from 0 to 4096 [ 141.959796][ T6470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.971058][ T6470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.989847][ T6469] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.942: corrupted inode contents [ 142.003124][ T6469] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #15: comm syz.1.942: mark_inode_dirty error [ 142.015856][ T6469] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.942: corrupted inode contents [ 142.028551][ T4363] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.028573][ T6469] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.942: mark_inode_dirty error [ 142.038406][ T6469] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.942: corrupted inode contents [ 142.061064][ T6469] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.942: mark_inode_dirty error [ 142.073075][ T6469] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.942: corrupted inode contents [ 142.085229][ T6469] EXT4-fs error (device loop1): ext4_truncate:4241: inode #15: comm syz.1.942: mark_inode_dirty error [ 142.104425][ T6469] EXT4-fs error (device loop1): ext4_evict_inode:262: comm syz.1.942: couldn't truncate inode 15 (err -117) [ 142.106615][ T6473] netlink: 'syz.2.943': attribute type 6 has an invalid length. [ 142.133917][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.155107][ T6475] FAULT_INJECTION: forcing a failure. [ 142.155107][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 142.167811][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.2.945 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 142.178415][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 142.188502][ T6475] Call Trace: [ 142.191789][ T6475] [ 142.194724][ T6475] dump_stack_lvl+0xf2/0x150 [ 142.199379][ T6475] dump_stack+0x15/0x20 [ 142.203662][ T6475] should_fail_ex+0x229/0x230 [ 142.208365][ T6475] ? __alloc_skb+0x10b/0x310 [ 142.212963][ T6475] should_failslab+0x8f/0xb0 [ 142.217633][ T6475] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 142.223525][ T6475] __alloc_skb+0x10b/0x310 [ 142.224558][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 142.227974][ T6475] netlink_alloc_large_skb+0xad/0xe0 [ 142.240183][ T6475] netlink_sendmsg+0x3b4/0x6e0 [ 142.245045][ T6475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.250354][ T6475] __sock_sendmsg+0x140/0x180 [ 142.255136][ T6475] ____sys_sendmsg+0x312/0x410 [ 142.259942][ T6475] __sys_sendmsg+0x1e9/0x280 [ 142.264573][ T6475] __x64_sys_sendmsg+0x46/0x50 [ 142.269360][ T6475] x64_sys_call+0x2689/0x2d60 [ 142.274074][ T6475] do_syscall_64+0xc9/0x1c0 [ 142.278596][ T6475] ? clear_bhb_loop+0x55/0xb0 [ 142.283283][ T6475] ? clear_bhb_loop+0x55/0xb0 [ 142.288031][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.294038][ T6475] RIP: 0033:0x7fb74ddadef9 [ 142.298471][ T6475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.318166][ T6475] RSP: 002b:00007fb74ca21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.326618][ T6475] RAX: ffffffffffffffda RBX: 00007fb74df65f80 RCX: 00007fb74ddadef9 [ 142.334603][ T6475] RDX: 0000000000000084 RSI: 0000000020000200 RDI: 0000000000000004 [ 142.342717][ T6475] RBP: 00007fb74ca21090 R08: 0000000000000000 R09: 0000000000000000 [ 142.350708][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.358688][ T6475] R13: 0000000000000000 R14: 00007fb74df65f80 R15: 00007ffcd297e6c8 [ 142.366670][ T6475] [ 142.373967][ T6479] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.385186][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 142.394020][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.401543][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.409297][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.416826][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.449591][ T6479] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.461317][ T4367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.478345][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.487365][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.501233][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.509969][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.518880][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.520178][ T6479] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.537721][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.548866][ T6487] wireguard2: entered allmulticast mode [ 142.587097][ T6479] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.633534][ T6479] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.642859][ T6498] vhci_hcd: invalid port number 36 [ 142.648078][ T6498] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 142.651330][ T6479] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.666622][ T6479] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.678529][ T6479] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.706081][ T6501] tmpfs: Bad value for 'mpol' [ 142.947999][ T6521] loop1: detected capacity change from 0 to 512 [ 142.955317][ T6521] EXT4-fs (loop1): #blocks per group too big: 8199 [ 142.981827][ T6525] syz.1.960[6525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.981872][ T6525] syz.1.960[6525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.005844][ T6523] wireguard3: entered allmulticast mode [ 143.055330][ T6532] netlink: 60 bytes leftover after parsing attributes in process `syz.4.962'. [ 143.068219][ T6532] loop4: detected capacity change from 0 to 512 [ 143.086219][ T6532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.098824][ T6532] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.106910][ T6525] loop1: detected capacity change from 0 to 1024 [ 143.123390][ T4367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.134712][ T6525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.148487][ T6538] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.189235][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.191218][ T6540] tmpfs: Bad value for 'mpol' [ 143.208489][ T6538] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.255450][ T6547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.967'. [ 143.264552][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 143.271496][ T6547] netlink: 1 bytes leftover after parsing attributes in process `syz.1.967'. [ 143.288330][ T6538] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.356004][ T6538] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.414660][ T6538] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.426021][ T6538] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.440496][ T6538] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.457085][ T6538] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.514194][ T6560] loop4: detected capacity change from 0 to 2048 [ 143.554734][ T6560] loop4: p1 < > p2 p3 < p5 > [ 143.560042][ T6560] loop4: p2 start 16908804 is beyond EOD, truncated [ 143.563731][ T6568] wireguard2: entered allmulticast mode [ 143.567174][ T6560] loop4: p5 start 16908804 is beyond EOD, truncated [ 143.580811][ T6560] netlink: 'syz.4.971': attribute type 26 has an invalid length. [ 143.616812][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.625891][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.635714][ T6577] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.650080][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.658767][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.667392][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.676162][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.687331][ T6577] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.701292][ T6582] tmpfs: Bad value for 'mpol' [ 143.736727][ T6577] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.776643][ T6590] vhci_hcd: invalid port number 36 [ 143.781823][ T6590] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 143.791076][ T6592] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.804124][ T6577] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.836345][ T6592] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.869463][ T6577] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.879945][ T6592] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.893003][ T6577] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.903829][ T6577] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.915302][ T6577] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.925961][ T6592] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.989873][ T6592] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.000527][ T6592] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.011333][ T6592] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.022133][ T6592] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.118540][ T6601] wireguard3: entered allmulticast mode [ 144.213693][ T6617] tmpfs: Bad value for 'mpol' [ 144.294440][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 144.340230][ T6625] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.415960][ T6627] wireguard4: entered allmulticast mode [ 144.424253][ T6625] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.480206][ T6625] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.550712][ T6625] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.903103][ T6653] tmpfs: Bad value for 'mpol' [ 145.020351][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.028901][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.041757][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.050442][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.058926][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.067492][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.131612][ T6661] loop2: detected capacity change from 0 to 512 [ 145.146741][ T6661] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.176607][ T6668] vhci_hcd: invalid port number 36 [ 145.181753][ T6668] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 145.197745][ T6667] loop2: detected capacity change from 0 to 4096 [ 145.204601][ T6667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.344550][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 145.419338][ T6676] netlink: 'syz.2.1010': attribute type 6 has an invalid length. [ 145.469542][ T6682] loop2: detected capacity change from 0 to 1024 [ 145.708411][ T6688] tmpfs: Bad value for 'mpol' [ 145.726749][ T6690] loop1: detected capacity change from 0 to 164 [ 145.735127][ T6690] syz.1.1015: attempt to access beyond end of device [ 145.735127][ T6690] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 145.749023][ T6690] syz.1.1015: attempt to access beyond end of device [ 145.749023][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.762622][ T6690] syz.1.1015: attempt to access beyond end of device [ 145.762622][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.776423][ T6690] syz.1.1015: attempt to access beyond end of device [ 145.776423][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.789963][ T6690] syz.1.1015: attempt to access beyond end of device [ 145.789963][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.803505][ T6690] syz.1.1015: attempt to access beyond end of device [ 145.803505][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.817017][ T6690] syz.1.1015: attempt to access beyond end of device [ 145.817017][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.830551][ T6690] syz.1.1015: attempt to access beyond end of device [ 145.830551][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.844006][ T6690] syz.1.1015: attempt to access beyond end of device [ 145.844006][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.857445][ T6690] syz.1.1015: attempt to access beyond end of device [ 145.857445][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.354293][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 146.355162][ T6697] 9pnet_fd: Insufficient options for proto=fd [ 146.360537][ T29] audit: type=1400 audit(1726434505.342:4067): avc: denied { create } for pid=6696 comm="syz.2.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.386374][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 146.397212][ T29] audit: type=1400 audit(1726434505.392:4068): avc: denied { write } for pid=6696 comm="syz.2.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.456514][ T6699] serio: Serial port ptm0 [ 146.582697][ T6708] netlink: 'syz.4.1022': attribute type 6 has an invalid length. [ 146.613340][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.622015][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.646947][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.655933][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.664373][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.672877][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.685047][ T6718] loop2: detected capacity change from 0 to 4096 [ 146.691635][ T6718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.704603][ T29] audit: type=1326 audit(1726434505.702:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74ddadef9 code=0x7ffc0000 [ 146.730016][ T29] audit: type=1326 audit(1726434505.702:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb74ddadef9 code=0x7ffc0000 [ 146.753622][ T29] audit: type=1326 audit(1726434505.702:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74ddadef9 code=0x7ffc0000 [ 146.777040][ T29] audit: type=1326 audit(1726434505.702:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74ddadef9 code=0x7ffc0000 [ 146.800887][ T29] audit: type=1326 audit(1726434505.712:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79c73def9 code=0x7ffc0000 [ 146.824432][ T29] audit: type=1326 audit(1726434505.712:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79c73def9 code=0x7ffc0000 [ 146.848569][ T6723] vhci_hcd: invalid port number 36 [ 146.853696][ T6723] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 146.875019][ T6726] tmpfs: Bad value for 'mpol' [ 146.894260][ T6729] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 147.152120][ T6733] __nla_validate_parse: 5 callbacks suppressed [ 147.152137][ T6733] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1031'. [ 147.169519][ T6731] loop2: detected capacity change from 0 to 4096 [ 147.176290][ T6731] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.187807][ T29] audit: type=1326 audit(1726434506.182:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74ddadef9 code=0x7ffc0000 [ 147.211346][ T29] audit: type=1326 audit(1726434506.182:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74ddadef9 code=0x7ffc0000 [ 147.272052][ T6738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6738 comm=syz.0.1032 [ 147.279967][ T6740] netlink: 'syz.2.1034': attribute type 6 has an invalid length. [ 147.414392][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.436688][ T6758] tmpfs: Bad value for 'mpol' [ 147.467877][ T6765] tmpfs: Bad value for 'mpol' [ 147.492021][ T6769] loop1: detected capacity change from 0 to 128 [ 147.518377][ T6773] netlink: 'syz.2.1049': attribute type 1 has an invalid length. [ 147.531048][ T6773] bond1: entered promiscuous mode [ 147.542011][ T6773] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 147.554602][ T6773] bond1: (slave ip6gretap1): making interface the new active one [ 147.562414][ T6773] ip6gretap1: entered promiscuous mode [ 147.568902][ T6773] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 147.584776][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 147.594047][ T6773] bond1: left promiscuous mode [ 147.598846][ T6773] ip6gretap1: left promiscuous mode [ 147.604292][ T6773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.626496][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.635283][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.648496][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.657205][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.666694][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.670384][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 147.684206][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.691697][ T6781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.698886][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.707169][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.714668][ T6781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.816750][ T6783] vhci_hcd: invalid port number 36 [ 147.822027][ T6783] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 147.851542][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.860257][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.873101][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.881687][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.890316][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.899240][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.995645][ T6786] vhci_hcd: invalid port number 36 [ 148.000796][ T6786] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 148.405703][ T6796] tmpfs: Bad value for 'mpol' [ 148.422126][ T6625] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.433613][ T6625] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.445925][ T6625] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.454385][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 148.467668][ T6625] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.492573][ T6806] syz.3.1062[6806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.492617][ T6806] syz.3.1062[6806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.507780][ T6806] loop3: detected capacity change from 0 to 128 [ 148.525920][ T6806] EXT4-fs: Ignoring removed nobh option [ 148.534041][ T6806] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.659462][ T6826] tmpfs: Bad value for 'mpol' [ 148.699380][ T6832] loop2: detected capacity change from 0 to 2048 [ 148.701220][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.714747][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.728087][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.736737][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.745370][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.754677][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.847802][ T6838] vhci_hcd: invalid port number 36 [ 148.852964][ T6838] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 149.230506][ T6841] netlink: 'syz.0.1075': attribute type 6 has an invalid length. [ 149.255866][ T6843] loop0: detected capacity change from 0 to 1024 [ 149.263052][ T6843] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.275070][ T6843] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.1076: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 149.294167][ T6843] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1076: couldn't read orphan inode 11 (err -117) [ 149.311556][ T6843] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1076: Invalid block bitmap block 0 in block_group 0 [ 149.326129][ T6843] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.1076: Failed to acquire dquot type 0 [ 149.343498][ T6843] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.1076: Failed to acquire dquot type 0 [ 149.357117][ T6843] EXT4-fs error (device loop0): ext4_lookup:1811: inode #15: comm syz.0.1076: iget: bad extra_isize 65535 (inode size 256) [ 149.393300][ T3353] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u8:6: Failed to release dquot type 0 [ 149.420425][ T6858] tmpfs: Bad value for 'mpol' [ 149.437982][ T6860] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1083'. [ 149.468153][ T6864] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1085'. [ 149.482201][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 149.491470][ T8] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 149.494433][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 149.514933][ T6870] netlink: 'syz.0.1088': attribute type 6 has an invalid length. [ 149.539982][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.550949][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.556556][ T6872] loop3: detected capacity change from 0 to 512 [ 149.572102][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.581329][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.590676][ T6872] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.598376][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.610234][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.706727][ T6883] vhci_hcd: invalid port number 36 [ 149.711900][ T6883] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 149.718487][ T6885] tmpfs: Bad value for 'mpol' [ 149.758414][ T6890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1097'. [ 149.784023][ T6892] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1098'. [ 150.308618][ T6910] tmpfs: Bad value for 'mpol' [ 150.444538][ T6922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1110'. [ 150.445194][ T6920] loop1: detected capacity change from 0 to 4096 [ 150.460302][ T6920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.476291][ T6918] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.508275][ T6930] netlink: 'syz.0.1113': attribute type 153 has an invalid length. [ 150.517904][ T6930] netlink: 'syz.0.1113': attribute type 4 has an invalid length. [ 150.525686][ T6930] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1113'. [ 150.534690][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 150.556829][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.565847][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.579637][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.589194][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.597770][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.606761][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.630622][ T6938] tmpfs: Bad value for 'mpol' [ 150.660740][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1120'. [ 150.669844][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.677422][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.685106][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.692631][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.705230][ T6942] bond0: (slave batadv0): Releasing backup interface [ 150.710023][ T6943] vhci_hcd: invalid port number 36 [ 150.717256][ T6943] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 150.949564][ T6948] netlink: 'syz.4.1122': attribute type 6 has an invalid length. [ 150.985297][ T6950] loop4: detected capacity change from 0 to 4096 [ 150.991959][ T6950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.040584][ T6955] netlink: 'syz.4.1125': attribute type 153 has an invalid length. [ 151.049913][ T6955] netlink: 'syz.4.1125': attribute type 4 has an invalid length. [ 151.098128][ T6961] FAULT_INJECTION: forcing a failure. [ 151.098128][ T6961] name failslab, interval 1, probability 0, space 0, times 0 [ 151.110943][ T6961] CPU: 0 UID: 0 PID: 6961 Comm: syz.4.1128 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 151.121620][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 151.131751][ T6961] Call Trace: [ 151.135042][ T6961] [ 151.137973][ T6961] dump_stack_lvl+0xf2/0x150 [ 151.142594][ T6961] dump_stack+0x15/0x20 [ 151.146765][ T6961] should_fail_ex+0x229/0x230 [ 151.151466][ T6961] ? v9fs_session_init+0x79/0xda0 [ 151.156560][ T6961] should_failslab+0x8f/0xb0 [ 151.161193][ T6961] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 151.167534][ T6961] kstrdup+0x3a/0x80 [ 151.171471][ T6961] v9fs_session_init+0x79/0xda0 [ 151.176352][ T6961] ? avc_has_perm_noaudit+0x18d/0x210 [ 151.181825][ T6961] ? __rcu_read_unlock+0x4e/0x70 [ 151.186773][ T6961] ? should_fail_ex+0xd7/0x230 [ 151.191650][ T6961] ? v9fs_mount+0x53/0x560 [ 151.196090][ T6961] ? should_failslab+0x8f/0xb0 [ 151.200871][ T6961] v9fs_mount+0x69/0x560 [ 151.205130][ T6961] ? __pfx_v9fs_mount+0x10/0x10 [ 151.210087][ T6961] legacy_get_tree+0x77/0xd0 [ 151.214687][ T6961] vfs_get_tree+0x56/0x1e0 [ 151.219183][ T6961] do_new_mount+0x227/0x690 [ 151.223777][ T6961] path_mount+0x49b/0xb30 [ 151.228115][ T6961] __se_sys_mount+0x27c/0x2d0 [ 151.232839][ T6961] __x64_sys_mount+0x67/0x80 [ 151.237503][ T6961] x64_sys_call+0x203e/0x2d60 [ 151.242215][ T6961] do_syscall_64+0xc9/0x1c0 [ 151.246768][ T6961] ? clear_bhb_loop+0x55/0xb0 [ 151.251469][ T6961] ? clear_bhb_loop+0x55/0xb0 [ 151.256192][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.262149][ T6961] RIP: 0033:0x7fb79c73def9 [ 151.266633][ T6961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.286246][ T6961] RSP: 002b:00007fb79b3b1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.294668][ T6961] RAX: ffffffffffffffda RBX: 00007fb79c8f5f80 RCX: 00007fb79c73def9 [ 151.302672][ T6961] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 151.310714][ T6961] RBP: 00007fb79b3b1090 R08: 0000000020001340 R09: 0000000000000000 [ 151.318779][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.332692][ T6961] R13: 0000000000000000 R14: 00007fb79c8f5f80 R15: 00007ffce36fcde8 [ 151.340758][ T6961] [ 151.360145][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 151.360162][ T29] audit: type=1326 audit(1726434510.352:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79c73def9 code=0x7ffc0000 [ 151.390239][ T29] audit: type=1326 audit(1726434510.352:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79c73def9 code=0x7ffc0000 [ 151.401569][ T6965] tmpfs: Bad value for 'mpol' [ 151.413671][ T29] audit: type=1326 audit(1726434510.352:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fb79c73def9 code=0x7ffc0000 [ 151.441744][ T29] audit: type=1326 audit(1726434510.352:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79c73def9 code=0x7ffc0000 [ 151.465306][ T29] audit: type=1326 audit(1726434510.352:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb79c73def9 code=0x7ffc0000 [ 151.473569][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.488604][ T29] audit: type=1326 audit(1726434510.352:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79c73def9 code=0x7ffc0000 [ 151.488648][ T29] audit: type=1326 audit(1726434510.352:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79c73def9 code=0x7ffc0000 [ 151.543863][ T29] audit: type=1326 audit(1726434510.352:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb79c73def9 code=0x7ffc0000 [ 151.567324][ T29] audit: type=1326 audit(1726434510.352:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79c73def9 code=0x7ffc0000 [ 151.574447][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 151.590848][ T29] audit: type=1326 audit(1726434510.352:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb79c73def9 code=0x7ffc0000 [ 151.621893][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.640695][ T6973] loop0: detected capacity change from 0 to 4096 [ 151.647270][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.647465][ T6973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.662732][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.671774][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.680331][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.773551][ T6980] netlink: 'syz.0.1137': attribute type 4 has an invalid length. [ 151.775719][ T6981] vhci_hcd: invalid port number 36 [ 151.786479][ T6981] vhci_hcd: default hub control req: d301 v0209 i0024 l1 [ 151.843315][ T6989] tmpfs: Bad value for 'mpol' [ 151.891400][ T6995] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.945870][ T6995] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.996246][ T6995] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.036059][ T6995] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.089793][ T6995] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.100636][ T6995] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.111646][ T6995] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.122601][ T6995] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.159404][ T6999] loop1: detected capacity change from 0 to 4096 [ 152.166140][ T6999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.205128][ T7008] __nla_validate_parse: 4 callbacks suppressed [ 152.205143][ T7008] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1148'. [ 152.237128][ T7014] tmpfs: Bad value for 'mpol' [ 152.280715][ T7023] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1156'. [ 152.337248][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1159'. [ 152.342574][ T7028] loop1: detected capacity change from 0 to 4096 [ 152.352923][ T7028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.381107][ T7033] FAULT_INJECTION: forcing a failure. [ 152.381107][ T7033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.394336][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.1.1160 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 152.405163][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 152.415208][ T7033] Call Trace: [ 152.418597][ T7033] [ 152.421521][ T7033] dump_stack_lvl+0xf2/0x150 [ 152.428026][ T7033] dump_stack+0x15/0x20 [ 152.432182][ T7033] should_fail_ex+0x229/0x230 [ 152.436886][ T7033] should_fail+0xb/0x10 [ 152.441038][ T7033] should_fail_usercopy+0x1a/0x20 [ 152.446076][ T7033] _copy_from_iter+0xd3/0xb00 [ 152.450757][ T7033] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 152.456372][ T7033] copy_page_from_iter+0x14f/0x280 [ 152.461481][ T7033] tun_get_user+0x689/0x24b0 [ 152.466141][ T7033] ? kstrtoull+0x110/0x140 [ 152.470614][ T7033] ? ref_tracker_alloc+0x1f5/0x2f0 [ 152.475797][ T7033] tun_chr_write_iter+0x18e/0x240 [ 152.480941][ T7033] vfs_write+0x78f/0x900 [ 152.485268][ T7033] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 152.490839][ T7033] ksys_write+0xeb/0x1b0 [ 152.495098][ T7033] __x64_sys_write+0x42/0x50 [ 152.499753][ T7033] x64_sys_call+0x27dd/0x2d60 [ 152.504445][ T7033] do_syscall_64+0xc9/0x1c0 [ 152.508956][ T7033] ? clear_bhb_loop+0x55/0xb0 [ 152.513646][ T7033] ? clear_bhb_loop+0x55/0xb0 [ 152.518374][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.524301][ T7033] RIP: 0033:0x7effeeb1c9df [ 152.528724][ T7033] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 152.548404][ T7033] RSP: 002b:00007effed791000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 152.556833][ T7033] RAX: ffffffffffffffda RBX: 00007effeecd5f80 RCX: 00007effeeb1c9df [ 152.564808][ T7033] RDX: 000000000000002a RSI: 0000000020000000 RDI: 00000000000000c8 [ 152.572776][ T7033] RBP: 00007effed791090 R08: 0000000000000000 R09: 0000000000000000 [ 152.580743][ T7033] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 152.588713][ T7033] R13: 0000000000000001 R14: 00007effeecd5f80 R15: 00007ffc5ecd8ed8 [ 152.596714][ T7033] [ 152.615069][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 152.678826][ T7044] tmpfs: Bad value for 'mpol' [ 152.729870][ T7050] loop1: detected capacity change from 0 to 1024 [ 152.736858][ T7050] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.822531][ T7050] ================================================================== [ 152.830672][ T7050] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 152.839925][ T7050] [ 152.842250][ T7050] write to 0xffff8881164301b8 of 8 bytes by task 7052 on cpu 0: [ 152.849886][ T7050] writeback_single_inode+0x10e/0x4a0 [ 152.855289][ T7050] sync_inode_metadata+0x5c/0x90 [ 152.860254][ T7050] generic_buffers_fsync_noflush+0xe4/0x130 [ 152.866200][ T7050] ext4_sync_file+0x20b/0x6c0 [ 152.870901][ T7050] vfs_fsync_range+0x122/0x140 [ 152.875689][ T7050] ext4_buffered_write_iter+0x338/0x380 [ 152.881245][ T7050] ext4_file_write_iter+0x29f/0xe30 [ 152.886466][ T7050] iter_file_splice_write+0x5e6/0x970 [ 152.891883][ T7050] direct_splice_actor+0x16c/0x2c0 [ 152.897019][ T7050] splice_direct_to_actor+0x305/0x670 [ 152.902424][ T7050] do_splice_direct+0xd7/0x150 [ 152.907305][ T7050] do_sendfile+0x3ab/0x950 [ 152.911733][ T7050] __x64_sys_sendfile64+0x110/0x150 [ 152.917050][ T7050] x64_sys_call+0xed5/0x2d60 [ 152.921660][ T7050] do_syscall_64+0xc9/0x1c0 [ 152.926177][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.932109][ T7050] [ 152.934435][ T7050] read to 0xffff8881164301b8 of 8 bytes by task 7050 on cpu 1: [ 152.942002][ T7050] generic_buffers_fsync_noflush+0x89/0x130 [ 152.947922][ T7050] ext4_sync_file+0x20b/0x6c0 [ 152.952607][ T7050] vfs_fsync_range+0x122/0x140 [ 152.957391][ T7050] ext4_buffered_write_iter+0x338/0x380 [ 152.962969][ T7050] ext4_file_write_iter+0x29f/0xe30 [ 152.968179][ T7050] iter_file_splice_write+0x5e6/0x970 [ 152.973591][ T7050] direct_splice_actor+0x16c/0x2c0 [ 152.978718][ T7050] splice_direct_to_actor+0x305/0x670 [ 152.984121][ T7050] do_splice_direct+0xd7/0x150 [ 152.988931][ T7050] do_sendfile+0x3ab/0x950 [ 152.993363][ T7050] __x64_sys_sendfile64+0x110/0x150 [ 152.998601][ T7050] x64_sys_call+0xed5/0x2d60 [ 153.003209][ T7050] do_syscall_64+0xc9/0x1c0 [ 153.007727][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.013668][ T7050] [ 153.015992][ T7050] value changed: 0x0000000000000007 -> 0x0000000000000080 [ 153.023103][ T7050] [ 153.025428][ T7050] Reported by Kernel Concurrency Sanitizer on: [ 153.031581][ T7050] CPU: 1 UID: 0 PID: 7050 Comm: syz.1.1168 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 153.042264][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 153.052420][ T7050] ================================================================== [ 153.654411][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 154.694418][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 155.734441][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 155.756818][ T5626] EXT4-fs unmount: 29 callbacks suppressed [ 155.756959][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.774423][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 157.824415][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 158.864386][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 159.894379][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 160.934602][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 161.974544][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available