last executing test programs: 1m22.706038145s ago: executing program 2 (id=28): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sysinfo(&(0x7f00000003c0)=""/156) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x820c0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r4, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r4) 1m22.610576176s ago: executing program 2 (id=30): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sysinfo(&(0x7f00000003c0)=""/156) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x820c0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r4, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r4) 1m22.447378588s ago: executing program 2 (id=36): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) inotify_init1(0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x18) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) 1m22.371489689s ago: executing program 2 (id=39): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c0007800800060000000000240007"], 0x108}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'u:object_r:app_data_file:s0:c512,c768\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000004}, 0x4000) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) 1m22.131962193s ago: executing program 2 (id=42): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x7041, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="10001d800c00008008000d8004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r9}, 0x10) 1m21.851186947s ago: executing program 2 (id=49): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x7041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="10001d800c00008008000d8004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r8}, 0x10) 1m21.819202787s ago: executing program 32 (id=49): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x7041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="10001d800c00008008000d8004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r8}, 0x10) 35.256050722s ago: executing program 4 (id=694): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x200014, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0, 0x700, &(0x7f0000000a40)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEBJiBUJGPrbzMnEykzadbtn/b7Qbx358zuNjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU8qi0FdyMJm7Oq3MlrBcQ4T8oFvFWNPutr4xCLof/WsfV6NtVFMOPIgYXLl+6++VcJll/TsIvAosW+Pjp4MG9fn//0Rlis1i4+NcJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJTPvfL1qGDX5nUK0owGUPWvbbrftbkvHhIvDmDvygx9EAcrsSHlw2N/fGsvnWVobh0GVlOQz48FhUPW0za0a1WqlUq1Warfrt+8YRm5qhhESxhCmIpZ+0NIbZrkncKKXkLEa/zH+JIA2iuhiB7uQqT8WGnDhoDNjeSzp/9+5pebWO97/J738ymjxFej+/1r07dqs/n9GLhJSr5C2RMyYv9jPis5I4jGeYoAHuIc++tjHoyWULSHXXrqEvBG35FLymfnTgkIXNjw4sNGBiRa+CBnPkaijhhoMvIdtNOFBogkbbSh42IMHHyo8ovJhpgomfDhwIbEBCzchUUEddWxBQqGMPTjYQRctNGDiX0EQHOBQt/tWnM/zlK1GElSZsREF5JLjbh/VOVs7q///4bNo7bj/N9j/f15Fx0Eh+vh4XgzRZ0AQX/8vaO3VZENEREREREREr4LQv30X+q/ybwMI0LTbypiIKby27IiIiIiIiIhoGQSCAq5CRHfl422I6et/IiIiIiIiInqzCf2MnQBQ0jf1i9HjUmf5JUD2HFIkIiIiIiIiopekn/y/lgcCfZf/GsRC1/9ERERERERE9Ab41dgY+7lsPMZukPxZPwNg7c8F8dHfCnBXxHFv96viyAyXmEdxzNQdAH7zirgYD9SrP/IA9DdLXRVxbRL4Z/Lbh9AnB+lj/T8PIkII90QC+ex4ATMSEGHNtVz8DR/gerTK9Xic+fuDDPSSaEThUtNuq7LltO9WYJoXM77a9X/28PDngDvczoPD/n75Rz/u39e5HIezjo/CQp9NpJNJb4xRLk/0eAv6mYu00Y1X0Uyq/HW3UxK6XiPZ/izMo8x4RfN2QG0ViLbyF1iP9tl6EMWWBsMR9wWwpgd/qJT1LpvYendFjLKonNzytB0xY8uLOosbUcyNjRvRR9ImYTkZUfxaFqiWp/fBRBbV8SxObwvx9xPtPz8LiGLYFlthFn8ICzqRxfc/ilbe6u0mw2OcJYupo4CI6HU5GPVCehDzqTH2k+4hOamdvd9BDojPcjN691EtQdx/JL37k98GUQ+VBXLx3ybSa0n6FYRn9A2hy8lHA7rnrqSc0Y3yp0EQmBeLGD+j/zcIkg0yFujdjoMgOHlG//3oHUhx2lNZ/DsIgrsV3ZP85kSv+mG4wocz6/Xa1SyKKODJ0U/0APih9/ff339YrW7VjHcN43YVK/p/FeKPLNj3EBHRlNPfsaMjMnMixLu4HpVx/f5f34mmJnq8L8W3FGi3gD7uYzN5hcBaeqklHOCb/4huQ9iMrlqB9VL0WRrIy5fuhle1w9hDkdNveNmceVWn+9IoVt/eUB3GJu8dOnkFOIrdesV7gYiI6Hytz+iHgYn+H5P9f3Gi/9/ERhSxcSX1urs0dkvhZnJ1PLykH1w4To2tnJ78t5bcGERERJ8Tyv1ElPxfCte1e+9V6vWK6W8r6TrWd6VrN1pK2l1fuda22W0p2XMd37Gctuy5KNirypPeTq/nuL5sOq7sOZ69q9/8LuNXv3uqY3Z92/J6bWV6SlpO1zctXzZsz5K9nW+3bW9buXplr6csu2lbpm87Xek5O66lylJ6So0F2g3V9e2mHU52Zc+1O6a7J7/ntHc6SjaUZ7l2z3eiApO67G7TcTu62DKChV90SERE9P/o8dPBg3v9/v6jkxOr4aV5NOcYM2KmJ/IpBXKMICIios+YUXe9wErFV5gQERERERERERERERERERERERERERERERFNOf2RvgUnVtIeFgSGc356MZ6D5xg9YjhVjsDL5vOp+0c9sN+LrJ5ZtNLkkYjBg4/nBK8O5yTNPx5zvEiluAS8cPv85QvABT0H0ZzcEg+A6edHl36MpU184yBq0VkxemHqosJwX+SW/59DOPHwd9OLRNjyQRAE81cvTLZh/uzHcw7Ao/ycXbB6yvFz3mciIjpv/wsAAP//eO06pA==") futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) 35.098042744s ago: executing program 4 (id=697): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x1000000, 0x400000000000000, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x4) 34.73400409s ago: executing program 4 (id=706): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x29, 0x0, 0x2, 0x9}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)={0x3, 0x800000, 0x5, 0x2, 0x81af}) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0]) 34.431331024s ago: executing program 4 (id=708): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d47406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3fa9632e5d9f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f00300000000"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x11, 0x6, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000008400000000ff07000003000000"], 0x18, 0x14001}], 0x1, 0x4044040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x1100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000540)=""/176, 0xb0, 0x0, &(0x7f0000000740)=""/234, 0xea}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800090000000000000000000000000018010000", @ANYRES32, @ANYRESOCT=r4], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c14, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}]}, 0xff, 0x263, &(0x7f00000002c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x7, 0xffff, 0x7, 0x22, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0xfffffffe, 0x4006, @void, @value, @void, @value}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)=0x100000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) setreuid(0xee01, 0xee01) utimensat(r8, 0x0, &(0x7f0000000880)={{0x0, 0xea60}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 34.306079126s ago: executing program 4 (id=711): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) close(r2) 33.35907257s ago: executing program 4 (id=725): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) splice(0xffffffffffffffff, &(0x7f0000000340)=0xffffffffffffffa3, 0xffffffffffffffff, &(0x7f0000000180)=0xffffffffffff7fff, 0x3, 0x2) clock_nanosleep(0x4, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') mkdir(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xd0) 33.311927851s ago: executing program 33 (id=725): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) splice(0xffffffffffffffff, &(0x7f0000000340)=0xffffffffffffffa3, 0xffffffffffffffff, &(0x7f0000000180)=0xffffffffffff7fff, 0x3, 0x2) clock_nanosleep(0x4, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') mkdir(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xd0) 12.081241193s ago: executing program 5 (id=1093): mq_open(&(0x7f0000000000)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85b\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\xb3\x14\xf6<\x851}y\"\xec\x81\xa9\xba\xd0\x1b3\x9bH\xe3<\xf2`\xe0m3v\xc7\x81\x9dq\xe4\x17\xd97\xc8\xa4\x94y*\x94\x13>\xe2\x1f\xceoX_\xb7\x15\xc8\xf1[\xc8\xa3\xf0\x9e\x80?3\x10\r\xe1\xc2', 0x2, 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 11.962528745s ago: executing program 5 (id=1095): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 11.823035446s ago: executing program 5 (id=1097): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)={[{@noblock_validity}, {@noblock_validity}, {@norecovery}, {@nodelalloc}, {@abort}], [{@dont_hash}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket(0x22, 0x2, 0x1) syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, r0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 10.939780029s ago: executing program 5 (id=1118): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d47406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3fa9632e5d9f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f00300000000"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x11, 0x6, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000008400000000ff07000003000000"], 0x18, 0x14001}], 0x1, 0x4044040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x1100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000540)=""/176, 0xb0, 0x0, &(0x7f0000000740)=""/234, 0xea}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800090000000000000000000000000018010000", @ANYRES32, @ANYRESOCT=r4], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c14, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@errors_continue}]}, 0xff, 0x263, &(0x7f00000002c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x7, 0xffff, 0x7, 0x22, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0xfffffffe, 0x4006, @void, @value, @void, @value}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)=0x100000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) 10.799986621s ago: executing program 5 (id=1121): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r0, 0x0, 0x6}, 0x18) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000005c0)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 9.990767974s ago: executing program 5 (id=1130): r0 = socket$key(0xf, 0x3, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 9.919579124s ago: executing program 34 (id=1130): r0 = socket$key(0xf, 0x3, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 1.972355831s ago: executing program 7 (id=1239): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 1.916841612s ago: executing program 1 (id=1240): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) select(0x0, 0x0, &(0x7f0000000140)={0x81, 0x1000, 0x4, 0x7fff, 0x1, 0x7, 0x405, 0x8000000000000001}, &(0x7f0000000180)={0x7, 0x8, 0x8, 0xcd8, 0x5, 0x3, 0x80000000, 0xfffffffffffff6a2}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x6, 0x0) close(r3) pipe2$9p(0x0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x1f) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5437, 0x0) 1.801755364s ago: executing program 7 (id=1243): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 1.604936787s ago: executing program 6 (id=1245): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2) 1.589554727s ago: executing program 7 (id=1247): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.509547878s ago: executing program 6 (id=1248): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xf5}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r4, 0x40095505, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x4) creat(&(0x7f0000000300)='./file0\x00', 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r5, &(0x7f0000001900)=[{&(0x7f0000000100)="8de7ee2c58dad9f5660ffdc988ca", 0xe}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x6, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fstatfs(r8, &(0x7f0000000500)=""/186) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r9) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000e00000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200000000000000000d0001007564703a73797a3000000000975ece494e857638ddd31d8b58c6f8c5f7e48f6dc0a4f9658c3a0041"], 0x54}}, 0x0) 1.486270368s ago: executing program 7 (id=1250): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.170483163s ago: executing program 7 (id=1254): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)={[{@noblock_validity}, {@noblock_validity}, {@norecovery}, {@nodelalloc}, {@abort}], [{@dont_hash}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket(0x22, 0x2, 0x1) syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, r0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 1.124693784s ago: executing program 0 (id=1257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x24, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000065ff06003950323030300000000000"], 0x13) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000008200"/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000240)='./file0\x00', r5}, 0x18) syz_emit_ethernet(0x62, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004f0000540000000000059078ac1e00010a010100441c060300000000000000100000000000000000ac1e0101000000068907c6ac1e00018202000000fffc0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c000040907800000303e7c2"], 0x0) setfsgid(0xee00) r6 = syz_clone(0x28180, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = syz_open_procfs(r6, &(0x7f0000000040)='stat\x00') pread64(r8, &(0x7f0000000140)=""/15, 0xf, 0x4) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x3) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 984.313326ms ago: executing program 0 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 965.596636ms ago: executing program 0 (id=1263): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x96, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x51023}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x20000000000c}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) unshare(0x2c020400) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYRES16=r3], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) unshare(0x20000080) sendto$inet6(r7, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) syz_io_uring_setup(0xe43, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x3, 0xfffffffd}, &(0x7f0000000340), &(0x7f0000000280)) creat(&(0x7f0000000040)='./file0\x00', 0x104) 924.377556ms ago: executing program 0 (id=1264): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) (async) getpgrp(0x0) (async) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) (async) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) (async) sendfile(r4, r4, 0x0, 0x1000000201005) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x9, 0xf, 0x1, 0xd5, 0x9, 0x101, 0xd, 0xb05, 0x0, 0x0, 0x100, 0xebfa, 0xc3e9, 0x1, 0x98, 0x7, 0xed, 0x2, 0xffffff7f, 0x6, 0x9, 0x2}}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) (async) sendfile(r6, r5, 0x0, 0x7ffff000) (async, rerun: 64) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) (rerun: 64) close(r8) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) (async, rerun: 32) creat(&(0x7f0000000000)='./bus\x00', 0x8e) (async, rerun: 32) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0], &(0x7f0000000340)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0xffffffffffffffb3) (async) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000280), 0x3, 0x44a, &(0x7f0000000600)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) (async) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) 923.417636ms ago: executing program 1 (id=1265): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 843.400168ms ago: executing program 1 (id=1266): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 818.121438ms ago: executing program 0 (id=1267): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 817.533078ms ago: executing program 1 (id=1268): unshare(0x2c020400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xe43, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x3, 0xfffffffd}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0\x00'}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 783.894519ms ago: executing program 0 (id=1269): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200c0d2, &(0x7f0000000140)={[{@user_xattr}]}, 0x21, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000000a00000008", @ANYRES16=r0], 0x48) r4 = memfd_secret(0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x7, 0x80, 0x112, 0x7, {{0x24, 0x4, 0x0, 0x9, 0x90, 0x68, 0x0, 0x3, 0x2f, 0x0, @multicast2, @loopback, {[@generic={0x7, 0xd, "0112fab79aed912922f519"}, @ra={0x94, 0x4}, @generic={0x83, 0x6, "6d742480"}, @timestamp_prespec={0x44, 0x14, 0x7d, 0x3, 0x0, [{@empty, 0x6}, {@multicast1, 0x9}]}, @timestamp={0x44, 0x20, 0x7d, 0x0, 0x2, [0x7, 0x5, 0xb28, 0x7, 0xae5, 0x10001, 0x9]}, @cipso={0x86, 0x25, 0x1, [{0x7, 0x9, "4d5bc1235ee2bb"}, {0x6, 0x3, "bf"}, {0x7, 0x6, "629f9d78"}, {0x6, 0x3, '.'}, {0x2, 0xa, "73e84d25fb90f27b"}]}, @generic={0x83, 0xb, "85648886a3570f9d55"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xf7}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x3}}}}}}, 0x0) r6 = syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x3, 0x0, {0x3}}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e, 0x4e22}, 0x6e, 0x0}, 0x0) 509.717793ms ago: executing program 1 (id=1270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf4f3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x0, 0x0, 0x3}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4800) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x3, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 468.204353ms ago: executing program 1 (id=1271): r0 = socket$netlink(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRESDEC], &(0x7f00000002c0)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRESDEC], &(0x7f00000002c0)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x400000000001, 0x0) (async) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$hidraw(&(0x7f0000000380), 0x9, 0x14000) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000740)=""/251) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/dev_mcast\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x210) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010029bd70000f0000a8e96a7500"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000005) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010029bd70000f0000a8e96a7500"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000005) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r6}, 0x10) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x2}, &(0x7f0000000080)=0x14) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x2}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={r8, 0x2}, &(0x7f0000000140)=0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 417.776974ms ago: executing program 6 (id=1272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) io_setup(0x3ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 402.179364ms ago: executing program 6 (id=1273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 389.645884ms ago: executing program 3 (id=1274): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)=0x1, 0x12) r1 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480), 0x0) 356.851685ms ago: executing program 3 (id=1275): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0xfffe, 0x1000000, 0x54593, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103010, 0x4fcd, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 355.656775ms ago: executing program 6 (id=1276): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 282.227456ms ago: executing program 6 (id=1277): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 281.599226ms ago: executing program 7 (id=1278): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x677c, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xa0e54044ef4acb5, &(0x7f0000000340)={0x11, 0xd}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 260.029926ms ago: executing program 3 (id=1279): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 182.170628ms ago: executing program 3 (id=1280): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 21.69546ms ago: executing program 3 (id=1281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 0s ago: executing program 3 (id=1282): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xf5}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r4, 0x40095505, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x4) creat(&(0x7f0000000300)='./file0\x00', 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r5, &(0x7f0000001900)=[{&(0x7f0000000100)="8de7ee2c58dad9f5660ffdc988ca", 0xe}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x6, &(0x7f0000000d40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6607fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234512596b696418f163d1a13ed38ae82f87925bfacba831f2743f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc58b14f41132b49e89093fa92509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc26108cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf559c53967d030e0877b4da0c088540bb6dd072a5ef7e9396f65d262c825d2567cda67e155ad7eb64435283c02e219f302f1ac840502a29439cca6d7e9de98ab0ac07f73df8a0fe0ea07a81cccd9524d35ab3b93a1f811d329be0bef1341097f03fdbaec2edc4b09243bbbaf8a8"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fstatfs(r8, &(0x7f0000000500)=""/186) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r9) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000e00000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200000000000000000d0001007564703a73797a3000000000975ece494e857638ddd31d8b58c6f8c5f7e48f6dc0a4f9658c3a0041"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.616126][ T5873] RSP: 002b:00007fd39c197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.616196][ T5873] RAX: ffffffffffffffda RBX: 00007fd39dd55fa0 RCX: 00007fd39db2e969 [ 85.616208][ T5873] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 85.616219][ T5873] RBP: 00007fd39c197090 R08: 0000000000000000 R09: 0000000000000000 [ 85.616233][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.616249][ T5873] R13: 0000000000000000 R14: 00007fd39dd55fa0 R15: 00007fff499834e8 [ 85.616273][ T5873] [ 85.887817][ T5841] bridge_slave_0: entered allmulticast mode [ 85.891715][ T3663] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 85.894441][ T5841] bridge_slave_0: entered promiscuous mode [ 85.919295][ T3675] hsr_slave_0: left promiscuous mode [ 85.925546][ T3675] hsr_slave_1: left promiscuous mode [ 85.931229][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.940529][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.951864][ T5885] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 85.980880][ T5885] SELinux: failed to load policy [ 86.004332][ T3675] team0 (unregistering): Port device team_slave_1 removed [ 86.016042][ T5891] 9pnet_fd: Insufficient options for proto=fd [ 86.031892][ T3675] team0 (unregistering): Port device team_slave_0 removed [ 86.084345][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.091814][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.108820][ T5895] loop3: detected capacity change from 0 to 2048 [ 86.116932][ T5841] bridge_slave_1: entered allmulticast mode [ 86.123667][ T5841] bridge_slave_1: entered promiscuous mode [ 86.143744][ T5895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.158386][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.169816][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.193593][ T5841] team0: Port device team_slave_0 added [ 86.200764][ T5841] team0: Port device team_slave_1 added [ 86.214046][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 86.223613][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 86.234209][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.241280][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.243817][ T5920] FAULT_INJECTION: forcing a failure. [ 86.243817][ T5920] name failslab, interval 1, probability 0, space 0, times 0 [ 86.267405][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.279988][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz.0.752 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 86.280104][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 86.280122][ T5920] Call Trace: [ 86.280132][ T5920] [ 86.280142][ T5920] __dump_stack+0x1d/0x30 [ 86.280172][ T5920] dump_stack_lvl+0xe8/0x140 [ 86.280197][ T5920] dump_stack+0x15/0x1b [ 86.280219][ T5920] should_fail_ex+0x265/0x280 [ 86.280324][ T5920] should_failslab+0x8c/0xb0 [ 86.280363][ T5920] kmem_cache_alloc_noprof+0x50/0x310 [ 86.280388][ T5920] ? io_submit_one+0xba/0x11b0 [ 86.280438][ T5920] io_submit_one+0xba/0x11b0 [ 86.280484][ T5920] __se_sys_io_submit+0xfb/0x280 [ 86.280539][ T5920] __x64_sys_io_submit+0x43/0x50 [ 86.280643][ T5920] x64_sys_call+0xfc4/0x2fb0 [ 86.280670][ T5920] do_syscall_64+0xd0/0x1a0 [ 86.280701][ T5920] ? clear_bhb_loop+0x40/0x90 [ 86.280759][ T5920] ? clear_bhb_loop+0x40/0x90 [ 86.280786][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.280814][ T5920] RIP: 0033:0x7f809722e969 [ 86.280834][ T5920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.280898][ T5920] RSP: 002b:00007f8095897038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 86.280922][ T5920] RAX: ffffffffffffffda RBX: 00007f8097455fa0 RCX: 00007f809722e969 [ 86.280955][ T5920] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 00007f8097f90000 [ 86.280971][ T5920] RBP: 00007f8095897090 R08: 0000000000000000 R09: 0000000000000000 [ 86.280986][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.281002][ T5920] R13: 0000000000000000 R14: 00007f8097455fa0 R15: 00007ffcdcd02a98 [ 86.281028][ T5920] [ 86.467948][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.475062][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.501240][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.531258][ T5841] hsr_slave_0: entered promiscuous mode [ 86.539203][ T5841] hsr_slave_1: entered promiscuous mode [ 86.544671][ T5922] loop5: detected capacity change from 0 to 1024 [ 86.545176][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.551561][ T5922] ext4: Unknown parameter 'dont_hash' [ 86.560373][ T5841] Cannot create hsr debugfs directory [ 86.585745][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.669261][ T5927] FAULT_INJECTION: forcing a failure. [ 86.669261][ T5927] name failslab, interval 1, probability 0, space 0, times 0 [ 86.682144][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: gtp Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 86.682174][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 86.682187][ T5927] Call Trace: [ 86.682193][ T5927] [ 86.682202][ T5927] __dump_stack+0x1d/0x30 [ 86.682293][ T5927] dump_stack_lvl+0xe8/0x140 [ 86.682313][ T5927] dump_stack+0x15/0x1b [ 86.682330][ T5927] should_fail_ex+0x265/0x280 [ 86.682440][ T5927] ? alloc_bprm+0x62/0x660 [ 86.682523][ T5927] should_failslab+0x8c/0xb0 [ 86.682555][ T5927] __kmalloc_cache_noprof+0x4c/0x320 [ 86.682603][ T5927] alloc_bprm+0x62/0x660 [ 86.682629][ T5927] do_execveat_common+0x12e/0x750 [ 86.682658][ T5927] __x64_sys_execve+0x5c/0x70 [ 86.682738][ T5927] x64_sys_call+0x13ab/0x2fb0 [ 86.682796][ T5927] do_syscall_64+0xd0/0x1a0 [ 86.682822][ T5927] ? clear_bhb_loop+0x40/0x90 [ 86.682844][ T5927] ? clear_bhb_loop+0x40/0x90 [ 86.682941][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.682979][ T5927] RIP: 0033:0x7f959a01e969 [ 86.682995][ T5927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.683014][ T5927] RSP: 002b:00007f9598687038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 86.683035][ T5927] RAX: ffffffffffffffda RBX: 00007f959a245fa0 RCX: 00007f959a01e969 [ 86.683126][ T5927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 86.683138][ T5927] RBP: 00007f9598687090 R08: 0000000000000000 R09: 0000000000000000 [ 86.683151][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.683163][ T5927] R13: 0000000000000000 R14: 00007f959a245fa0 R15: 00007ffe332f3d58 [ 86.683247][ T5927] [ 86.947430][ T5841] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 86.958257][ T5841] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 86.974160][ T5841] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 87.002906][ T5938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.024833][ T5938] bond3 (unregistering): Released all slaves [ 87.032001][ T5950] FAULT_INJECTION: forcing a failure. [ 87.032001][ T5950] name failslab, interval 1, probability 0, space 0, times 0 [ 87.044739][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz.0.764 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 87.044899][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 87.044912][ T5950] Call Trace: [ 87.044918][ T5950] [ 87.044925][ T5950] __dump_stack+0x1d/0x30 [ 87.044945][ T5950] dump_stack_lvl+0xe8/0x140 [ 87.044964][ T5950] dump_stack+0x15/0x1b [ 87.044980][ T5950] should_fail_ex+0x265/0x280 [ 87.045082][ T5950] ? tipc_nametbl_lookup_group+0x451/0x630 [ 87.045145][ T5950] should_failslab+0x8c/0xb0 [ 87.045176][ T5950] __kmalloc_cache_noprof+0x4c/0x320 [ 87.045197][ T5950] ? xas_load+0x413/0x430 [ 87.045289][ T5950] tipc_nametbl_lookup_group+0x451/0x630 [ 87.045318][ T5950] __tipc_sendmsg+0x409/0x1b00 [ 87.045354][ T5950] ? avc_has_perm_noaudit+0x1b1/0x200 [ 87.045377][ T5950] ? __rcu_read_unlock+0x4f/0x70 [ 87.045449][ T5950] __tipc_sendstream+0xa23/0xb30 [ 87.045573][ T5950] ? selinux_socket_sendmsg+0x175/0x1b0 [ 87.045599][ T5950] ? _raw_spin_unlock_bh+0x36/0x40 [ 87.045696][ T5950] tipc_send_packet+0x65/0x80 [ 87.045725][ T5950] ? __pfx_tipc_send_packet+0x10/0x10 [ 87.045755][ T5950] __sock_sendmsg+0x145/0x180 [ 87.045783][ T5950] ____sys_sendmsg+0x31e/0x4e0 [ 87.045866][ T5950] ___sys_sendmsg+0x17b/0x1d0 [ 87.045902][ T5950] __x64_sys_sendmsg+0xd4/0x160 [ 87.045928][ T5950] x64_sys_call+0x2999/0x2fb0 [ 87.046005][ T5950] do_syscall_64+0xd0/0x1a0 [ 87.046029][ T5950] ? clear_bhb_loop+0x40/0x90 [ 87.046050][ T5950] ? clear_bhb_loop+0x40/0x90 [ 87.046072][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.046164][ T5950] RIP: 0033:0x7f809722e969 [ 87.046179][ T5950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.046197][ T5950] RSP: 002b:00007f8095897038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.046223][ T5950] RAX: ffffffffffffffda RBX: 00007f8097455fa0 RCX: 00007f809722e969 [ 87.046236][ T5950] RDX: 0000000004008030 RSI: 0000200000000400 RDI: 0000000000000003 [ 87.046284][ T5950] RBP: 00007f8095897090 R08: 0000000000000000 R09: 0000000000000000 [ 87.046297][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.046309][ T5950] R13: 0000000000000000 R14: 00007f8097455fa0 R15: 00007ffcdcd02a98 [ 87.046329][ T5950] [ 87.287916][ T5951] loop1: detected capacity change from 0 to 512 [ 87.294662][ T5841] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 87.328195][ T5951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.342402][ T5951] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.346562][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.373614][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.386894][ T3678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 87.418423][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.439376][ T3663] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.446559][ T3663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.462234][ T3663] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.469358][ T3663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.488828][ T5966] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 87.533981][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.595117][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.682546][ T5987] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 87.787585][ T6007] loop0: detected capacity change from 0 to 1024 [ 87.794435][ T6007] ext4: Unknown parameter 'dont_hash' [ 87.876436][ T6009] FAULT_INJECTION: forcing a failure. [ 87.876436][ T6009] name failslab, interval 1, probability 0, space 0, times 0 [ 87.889397][ T6009] CPU: 0 UID: 0 PID: 6009 Comm: syz.3.778 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 87.889469][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 87.889536][ T6009] Call Trace: [ 87.889541][ T6009] [ 87.889549][ T6009] __dump_stack+0x1d/0x30 [ 87.889573][ T6009] dump_stack_lvl+0xe8/0x140 [ 87.889597][ T6009] dump_stack+0x15/0x1b [ 87.889617][ T6009] should_fail_ex+0x265/0x280 [ 87.889687][ T6009] should_failslab+0x8c/0xb0 [ 87.889720][ T6009] __kmalloc_noprof+0xa5/0x3e0 [ 87.889806][ T6009] ? copy_splice_read+0xc2/0x5f0 [ 87.889829][ T6009] copy_splice_read+0xc2/0x5f0 [ 87.889855][ T6009] ? __pfx_copy_splice_read+0x10/0x10 [ 87.889925][ T6009] splice_direct_to_actor+0x26c/0x680 [ 87.889955][ T6009] ? __pfx_direct_splice_actor+0x10/0x10 [ 87.890043][ T6009] do_splice_direct+0xda/0x150 [ 87.890071][ T6009] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 87.890194][ T6009] do_sendfile+0x380/0x640 [ 87.890309][ T6009] __x64_sys_sendfile64+0x105/0x150 [ 87.890348][ T6009] x64_sys_call+0xb39/0x2fb0 [ 87.890375][ T6009] do_syscall_64+0xd0/0x1a0 [ 87.890497][ T6009] ? clear_bhb_loop+0x40/0x90 [ 87.890524][ T6009] ? clear_bhb_loop+0x40/0x90 [ 87.890551][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.890577][ T6009] RIP: 0033:0x7fd39db2e969 [ 87.890670][ T6009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.890687][ T6009] RSP: 002b:00007fd39c197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 87.890752][ T6009] RAX: ffffffffffffffda RBX: 00007fd39dd55fa0 RCX: 00007fd39db2e969 [ 87.890794][ T6009] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 87.890810][ T6009] RBP: 00007fd39c197090 R08: 0000000000000000 R09: 0000000000000000 [ 87.890824][ T6009] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 87.890835][ T6009] R13: 0000000000000000 R14: 00007fd39dd55fa0 R15: 00007fff499834e8 [ 87.890862][ T6009] [ 88.158210][ T5841] veth0_vlan: entered promiscuous mode [ 88.179627][ T5841] veth1_vlan: entered promiscuous mode [ 88.188409][ T6017] netlink: 'syz.1.780': attribute type 12 has an invalid length. [ 88.197758][ T6017] netlink: 40 bytes leftover after parsing attributes in process `syz.1.780'. [ 88.205967][ T5841] veth0_macvtap: entered promiscuous mode [ 88.268653][ T5841] veth1_macvtap: entered promiscuous mode [ 88.309841][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.320200][ T6038] netlink: 80 bytes leftover after parsing attributes in process `syz.3.784'. [ 88.334431][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 88.344834][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.364674][ T5841] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.373641][ T5841] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.382501][ T5841] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.391422][ T5841] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.489013][ T6044] loop3: detected capacity change from 0 to 1024 [ 88.507781][ T6044] EXT4-fs: Ignoring removed orlov option [ 88.517113][ T6044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.665543][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 88.697200][ T6061] capability: warning: `syz.6.790' uses deprecated v2 capabilities in a way that may be insecure [ 88.723661][ T6058] vhci_hcd: invalid port number 96 [ 88.728941][ T6058] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 88.783530][ T6065] ref_ctr_offset mismatch. inode: 0x2be offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 88.995200][ T6093] loop5: detected capacity change from 0 to 1024 [ 89.002258][ T6093] ext4: Unknown parameter 'dont_hash' [ 89.086487][ T6094] vhci_hcd: invalid port number 96 [ 89.091665][ T6094] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 89.343525][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.366237][ T6101] loop3: detected capacity change from 0 to 164 [ 89.372871][ T6101] iso9660: Unknown parameter '' [ 89.447933][ T6103] loop3: detected capacity change from 0 to 2048 [ 89.488091][ T6105] loop3: detected capacity change from 0 to 1024 [ 89.494787][ T6105] ext4: Unknown parameter 'dont_hash' [ 89.522877][ T6107] loop3: detected capacity change from 0 to 128 [ 89.529742][ T6107] vfat: Bad value for 'gid' [ 89.534298][ T6107] vfat: Bad value for 'gid' [ 89.647146][ T6109] FAULT_INJECTION: forcing a failure. [ 89.647146][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 89.659998][ T6109] CPU: 0 UID: 0 PID: 6109 Comm: syz.0.808 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 89.660033][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 89.660120][ T6109] Call Trace: [ 89.660128][ T6109] [ 89.660137][ T6109] __dump_stack+0x1d/0x30 [ 89.660162][ T6109] dump_stack_lvl+0xe8/0x140 [ 89.660185][ T6109] dump_stack+0x15/0x1b [ 89.660279][ T6109] should_fail_ex+0x265/0x280 [ 89.660311][ T6109] should_failslab+0x8c/0xb0 [ 89.660340][ T6109] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 89.660417][ T6109] ? __d_alloc+0x3d/0x350 [ 89.660434][ T6109] __d_alloc+0x3d/0x350 [ 89.660450][ T6109] ? avc_has_perm_noaudit+0x1b1/0x200 [ 89.660486][ T6109] d_alloc_parallel+0x53/0xc40 [ 89.660510][ T6109] ? selinux_inode_permission+0x32a/0x400 [ 89.660547][ T6109] ? __rcu_read_unlock+0x4f/0x70 [ 89.660572][ T6109] ? __d_lookup+0x316/0x340 [ 89.660594][ T6109] ? inode_permission+0xb5/0x300 [ 89.660688][ T6109] __lookup_slow+0x8c/0x250 [ 89.660715][ T6109] lookup_one_unlocked+0xd6/0x1b0 [ 89.660744][ T6109] lookup_positive_unlocked+0x2b/0x90 [ 89.660831][ T6109] debugfs_lookup+0x9d/0xc0 [ 89.660847][ T6109] debugfs_lookup_and_remove+0x1d/0x90 [ 89.660866][ T6109] kmem_cache_destroy+0xae/0x130 [ 89.660891][ T6109] p9_client_destroy+0x1e6/0x220 [ 89.660909][ T6109] v9fs_session_close+0x35/0x110 [ 89.661012][ T6109] v9fs_kill_super+0x3f/0x70 [ 89.661095][ T6109] deactivate_locked_super+0x75/0x1c0 [ 89.661116][ T6109] deactivate_super+0x97/0xa0 [ 89.661152][ T6109] cleanup_mnt+0x269/0x2e0 [ 89.661221][ T6109] __cleanup_mnt+0x19/0x20 [ 89.661274][ T6109] task_work_run+0x131/0x1a0 [ 89.661331][ T6109] resume_user_mode_work+0x6a/0x70 [ 89.661353][ T6109] syscall_exit_to_user_mode+0x77/0xb0 [ 89.661396][ T6109] do_syscall_64+0xdd/0x1a0 [ 89.661417][ T6109] ? clear_bhb_loop+0x40/0x90 [ 89.661513][ T6109] ? clear_bhb_loop+0x40/0x90 [ 89.661567][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.661585][ T6109] RIP: 0033:0x7f809722e969 [ 89.661624][ T6109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.661640][ T6109] RSP: 002b:00007f8095897038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 89.661697][ T6109] RAX: 0000000000000000 RBX: 00007f8097455fa0 RCX: 00007f809722e969 [ 89.661715][ T6109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 89.661726][ T6109] RBP: 00007f8095897090 R08: 0000000000000000 R09: 0000000000000000 [ 89.661736][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.661747][ T6109] R13: 0000000000000000 R14: 00007f8097455fa0 R15: 00007ffcdcd02a98 [ 89.661769][ T6109] [ 90.000377][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 90.000396][ T29] audit: type=1400 audit(1747514209.841:2821): avc: denied { bind } for pid=6110 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.026063][ T29] audit: type=1400 audit(1747514209.841:2822): avc: denied { name_bind } for pid=6110 comm="syz.0.809" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 90.036633][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 90.046892][ T29] audit: type=1400 audit(1747514209.851:2823): avc: denied { node_bind } for pid=6110 comm="syz.0.809" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 90.067526][ T6121] loop0: detected capacity change from 0 to 1024 [ 90.106820][ T6121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.198999][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.818'. [ 90.212083][ T6143] SELinux: security_context_str_to_sid (sta) failed with errno=-22 [ 90.214926][ T29] audit: type=1326 audit(1747514210.071:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.6.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 90.243500][ T29] audit: type=1326 audit(1747514210.071:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.6.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 90.266902][ T29] audit: type=1326 audit(1747514210.071:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.6.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 90.290349][ T29] audit: type=1326 audit(1747514210.071:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.6.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 90.313945][ T29] audit: type=1326 audit(1747514210.071:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.6.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 90.337653][ T29] audit: type=1326 audit(1747514210.071:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.6.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 90.361264][ T29] audit: type=1326 audit(1747514210.071:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.6.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 90.388507][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.409228][ T6149] loop6: detected capacity change from 0 to 1024 [ 90.420527][ T6149] ext4: Unknown parameter 'dont_hash' [ 90.477776][ T6162] loop0: detected capacity change from 0 to 512 [ 90.509399][ T6162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.522218][ T6162] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.598691][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.629444][ T6172] loop0: detected capacity change from 0 to 2048 [ 90.636436][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.650591][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.659395][ T6173] Driver unsupported XDP return value 0 on prog (id 675) dev N/A, expect packet loss! [ 90.670909][ T6155] tipc: Enabling of bearer rejected, already enabled [ 90.682051][ T6172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.767025][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.843130][ T6186] dvmrp1: entered allmulticast mode [ 90.849519][ T6185] dvmrp1: left allmulticast mode [ 90.975971][ T6192] loop0: detected capacity change from 0 to 2048 [ 90.988159][ T6192] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.001994][ T6192] bond_slave_1: entered promiscuous mode [ 91.003088][ T6196] netlink: 408 bytes leftover after parsing attributes in process `syz.1.836'. [ 91.009008][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 91.027032][ T6192] bond0: (slave bond_slave_1): Releasing backup interface [ 91.035393][ T6192] bond_slave_1 (unregistering): left promiscuous mode [ 91.042485][ T6196] loop1: detected capacity change from 0 to 2048 [ 91.067195][ T6196] EXT4-fs (loop1): failed to initialize system zone (-117) [ 91.074507][ T6196] EXT4-fs (loop1): mount failed [ 91.077724][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 91.097047][ T6196] 9pnet_fd: Insufficient options for proto=fd [ 91.141972][ T6192] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.166082][ T3644] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 91.223568][ T6210] netlink: 40 bytes leftover after parsing attributes in process `syz.1.839'. [ 91.232608][ T6210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.839'. [ 91.247748][ T6210] loop1: detected capacity change from 0 to 512 [ 91.276157][ T6213] pimreg: entered allmulticast mode [ 91.276758][ T6210] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 91.285412][ T6213] pimreg: left allmulticast mode [ 91.291605][ T6210] System zones: 0-2, 18-18, 34-34 [ 91.304596][ T6217] xt_hashlimit: max too large, truncated to 1048576 [ 91.305660][ T6210] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.839: bg 0: block 248: padding at end of block bitmap is not set [ 91.327430][ T6210] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.839: Failed to acquire dquot type 1 [ 91.339714][ T6217] FAULT_INJECTION: forcing a failure. [ 91.339714][ T6217] name failslab, interval 1, probability 0, space 0, times 0 [ 91.352430][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.3.841 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 91.352521][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 91.352534][ T6217] Call Trace: [ 91.352542][ T6217] [ 91.352552][ T6217] __dump_stack+0x1d/0x30 [ 91.352578][ T6217] dump_stack_lvl+0xe8/0x140 [ 91.352603][ T6217] dump_stack+0x15/0x1b [ 91.352648][ T6217] should_fail_ex+0x265/0x280 [ 91.352680][ T6217] should_failslab+0x8c/0xb0 [ 91.352782][ T6217] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 91.352816][ T6217] ? htable_create+0x222/0x450 [ 91.352855][ T6217] kstrdup+0x3e/0xd0 [ 91.352877][ T6217] htable_create+0x222/0x450 [ 91.353047][ T6217] ? __rcu_read_unlock+0x4f/0x70 [ 91.353071][ T6217] hashlimit_mt_check_common+0x5db/0x6c0 [ 91.353112][ T6217] hashlimit_mt_check_v1+0x12d/0x160 [ 91.353165][ T6217] xt_check_match+0x2aa/0x4f0 [ 91.353201][ T6217] ? strnlen+0x28/0x50 [ 91.353232][ T6217] ? strcmp+0x22/0x50 [ 91.353260][ T6217] ? xt_find_match+0x1d1/0x210 [ 91.353333][ T6217] translate_table+0xa9c/0xf90 [ 91.353453][ T6217] ? _copy_from_user+0x89/0xb0 [ 91.353476][ T6217] do_ipt_set_ctl+0x66f/0x820 [ 91.353501][ T6217] ? _raw_spin_unlock_bh+0x36/0x40 [ 91.353533][ T6217] ? lock_sock_nested+0x112/0x140 [ 91.353573][ T6217] ? __rcu_read_unlock+0x4f/0x70 [ 91.353668][ T6217] nf_setsockopt+0x196/0x1b0 [ 91.353688][ T6217] ip_setsockopt+0x102/0x110 [ 91.353715][ T6217] udp_setsockopt+0x99/0xb0 [ 91.353768][ T6217] sock_common_setsockopt+0x66/0x80 [ 91.353842][ T6217] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 91.353934][ T6217] __sys_setsockopt+0x181/0x200 [ 91.353953][ T6217] __x64_sys_setsockopt+0x64/0x80 [ 91.353972][ T6217] x64_sys_call+0x2bd5/0x2fb0 [ 91.354000][ T6217] do_syscall_64+0xd0/0x1a0 [ 91.354061][ T6217] ? clear_bhb_loop+0x40/0x90 [ 91.354089][ T6217] ? clear_bhb_loop+0x40/0x90 [ 91.354117][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.354161][ T6217] RIP: 0033:0x7fd39db2e969 [ 91.354180][ T6217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.354203][ T6217] RSP: 002b:00007fd39c197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.354226][ T6217] RAX: ffffffffffffffda RBX: 00007fd39dd55fa0 RCX: 00007fd39db2e969 [ 91.354241][ T6217] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 91.354317][ T6217] RBP: 00007fd39c197090 R08: 0000000000000580 R09: 0000000000000000 [ 91.354330][ T6217] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 91.354342][ T6217] R13: 0000000000000000 R14: 00007fd39dd55fa0 R15: 00007fff499834e8 [ 91.354363][ T6217] [ 91.354503][ T6210] EXT4-fs (loop1): 1 truncate cleaned up [ 91.630323][ T6210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.642915][ T6210] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.703799][ T6210] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.839: deleted inode referenced: 12 [ 91.764562][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.867131][ T6230] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 91.873702][ T6230] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.881240][ T6230] vhci_hcd vhci_hcd.0: Device attached [ 91.906460][ T6240] vhci_hcd: connection closed [ 91.906765][ T12] vhci_hcd: stop threads [ 91.915825][ T12] vhci_hcd: release socket [ 91.920253][ T12] vhci_hcd: disconnect device [ 91.948206][ T6250] FAULT_INJECTION: forcing a failure. [ 91.948206][ T6250] name failslab, interval 1, probability 0, space 0, times 0 [ 91.960908][ T6250] CPU: 1 UID: 0 PID: 6250 Comm: syz.1.851 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 91.960972][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 91.960984][ T6250] Call Trace: [ 91.960991][ T6250] [ 91.961000][ T6250] __dump_stack+0x1d/0x30 [ 91.961077][ T6250] dump_stack_lvl+0xe8/0x140 [ 91.961102][ T6250] dump_stack+0x15/0x1b [ 91.961119][ T6250] should_fail_ex+0x265/0x280 [ 91.961156][ T6250] should_failslab+0x8c/0xb0 [ 91.961220][ T6250] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 91.961310][ T6250] ? __d_alloc+0x3d/0x350 [ 91.961333][ T6250] __d_alloc+0x3d/0x350 [ 91.961354][ T6250] ? mpol_shared_policy_init+0xbd/0x4c0 [ 91.961384][ T6250] d_alloc_pseudo+0x1e/0x80 [ 91.961515][ T6250] alloc_file_pseudo+0x71/0x160 [ 91.961537][ T6250] __shmem_file_setup+0x1b9/0x1f0 [ 91.961563][ T6250] shmem_file_setup+0x3b/0x50 [ 91.961591][ T6250] __se_sys_memfd_create+0x2c3/0x590 [ 91.961624][ T6250] __x64_sys_memfd_create+0x31/0x40 [ 91.961705][ T6250] x64_sys_call+0x122f/0x2fb0 [ 91.961726][ T6250] do_syscall_64+0xd0/0x1a0 [ 91.961754][ T6250] ? clear_bhb_loop+0x40/0x90 [ 91.961842][ T6250] ? clear_bhb_loop+0x40/0x90 [ 91.961870][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.961897][ T6250] RIP: 0033:0x7f959a01e969 [ 91.961916][ T6250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.961934][ T6250] RSP: 002b:00007f9598686e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 91.962008][ T6250] RAX: ffffffffffffffda RBX: 00000000000004ea RCX: 00007f959a01e969 [ 91.962022][ T6250] RDX: 00007f9598686ef0 RSI: 0000000000000000 RDI: 00007f959a0a1444 [ 91.962034][ T6250] RBP: 0000200000000540 R08: 00007f9598686bb7 R09: 00007f9598686e40 [ 91.962045][ T6250] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000500 [ 91.962130][ T6250] R13: 00007f9598686ef0 R14: 00007f9598686eb0 R15: 0000200000000ec0 [ 91.962149][ T6250] [ 92.195064][ T6256] loop5: detected capacity change from 0 to 1024 [ 92.205239][ T6258] loop1: detected capacity change from 0 to 512 [ 92.208872][ T6256] ext4: Unknown parameter 'dont_hash' [ 92.227367][ T6258] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.270579][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'. [ 92.279541][ T6258] netlink: 108 bytes leftover after parsing attributes in process `syz.1.853'. [ 92.289046][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'. [ 92.298851][ T6258] netlink: 108 bytes leftover after parsing attributes in process `syz.1.853'. [ 92.326371][ T6267] loop0: detected capacity change from 0 to 512 [ 92.333167][ T6267] EXT4-fs: Ignoring removed oldalloc option [ 92.341085][ T6267] EXT4-fs (loop0): 1 truncate cleaned up [ 92.349722][ T6270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6270 comm=syz.1.857 [ 92.356105][ T6267] FAULT_INJECTION: forcing a failure. [ 92.356105][ T6267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.375119][ T6267] CPU: 0 UID: 0 PID: 6267 Comm: syz.0.856 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 92.375217][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 92.375230][ T6267] Call Trace: [ 92.375237][ T6267] [ 92.375244][ T6267] __dump_stack+0x1d/0x30 [ 92.375266][ T6267] dump_stack_lvl+0xe8/0x140 [ 92.375286][ T6267] dump_stack+0x15/0x1b [ 92.375329][ T6267] should_fail_ex+0x265/0x280 [ 92.375360][ T6267] should_fail+0xb/0x20 [ 92.375388][ T6267] should_fail_usercopy+0x1a/0x20 [ 92.375409][ T6267] _copy_from_user+0x1c/0xb0 [ 92.375441][ T6267] autofs_dev_ioctl+0xdd/0x6a0 [ 92.375464][ T6267] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 92.375493][ T6267] __se_sys_ioctl+0xcb/0x140 [ 92.375538][ T6267] __x64_sys_ioctl+0x43/0x50 [ 92.375564][ T6267] x64_sys_call+0x19a8/0x2fb0 [ 92.375622][ T6267] do_syscall_64+0xd0/0x1a0 [ 92.375725][ T6267] ? clear_bhb_loop+0x40/0x90 [ 92.375853][ T6267] ? clear_bhb_loop+0x40/0x90 [ 92.375879][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.375916][ T6267] RIP: 0033:0x7f809722e969 [ 92.375935][ T6267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.375954][ T6267] RSP: 002b:00007f8095897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.376020][ T6267] RAX: ffffffffffffffda RBX: 00007f8097455fa0 RCX: 00007f809722e969 [ 92.376035][ T6267] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000007 [ 92.376050][ T6267] RBP: 00007f8095897090 R08: 0000000000000000 R09: 0000000000000000 [ 92.376079][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.376090][ T6267] R13: 0000000000000000 R14: 00007f8097455fa0 R15: 00007ffcdcd02a98 [ 92.376108][ T6267] [ 92.437255][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 92.636823][ T6273] tipc: Started in network mode [ 92.641847][ T6273] tipc: Node identity aaf410499bfb, cluster identity 4711 [ 92.649066][ T6273] tipc: Enabled bearer , priority 0 [ 92.659235][ T6273] loop6: detected capacity change from 0 to 512 [ 92.666425][ T6273] EXT4-fs: Ignoring removed oldalloc option [ 92.677963][ T6273] EXT4-fs (loop6): 1 truncate cleaned up [ 92.686163][ T6272] tipc: Resetting bearer [ 92.701495][ T6272] tipc: Disabling bearer [ 92.961440][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.969976][ T6305] xt_TPROXY: Can be used only with -p tcp or -p udp [ 93.005862][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.138857][ T6323] pim6reg1: entered promiscuous mode [ 93.144256][ T6323] pim6reg1: entered allmulticast mode [ 93.273954][ T6338] netlink: 'syz.5.881': attribute type 21 has an invalid length. [ 93.281017][ T6340] loop0: detected capacity change from 0 to 1024 [ 93.282061][ T6338] netlink: 'syz.5.881': attribute type 1 has an invalid length. [ 93.290662][ T6340] ext4: Unknown parameter 'dont_hash' [ 93.309424][ T6341] macvlan0: entered allmulticast mode [ 93.542550][ T6360] FAULT_INJECTION: forcing a failure. [ 93.542550][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 93.555442][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz.5.888 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 93.555484][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 93.555500][ T6360] Call Trace: [ 93.555507][ T6360] [ 93.555516][ T6360] __dump_stack+0x1d/0x30 [ 93.555544][ T6360] dump_stack_lvl+0xe8/0x140 [ 93.555642][ T6360] dump_stack+0x15/0x1b [ 93.555664][ T6360] should_fail_ex+0x265/0x280 [ 93.555711][ T6360] should_failslab+0x8c/0xb0 [ 93.555779][ T6360] kmem_cache_alloc_node_noprof+0x57/0x320 [ 93.555842][ T6360] ? __alloc_skb+0x101/0x320 [ 93.555944][ T6360] __alloc_skb+0x101/0x320 [ 93.555984][ T6360] netlink_alloc_large_skb+0xba/0xf0 [ 93.556128][ T6360] netlink_sendmsg+0x3cf/0x6b0 [ 93.556232][ T6360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.556257][ T6360] __sock_sendmsg+0x145/0x180 [ 93.556292][ T6360] ____sys_sendmsg+0x31e/0x4e0 [ 93.556323][ T6360] ___sys_sendmsg+0x17b/0x1d0 [ 93.556367][ T6360] __x64_sys_sendmsg+0xd4/0x160 [ 93.556434][ T6360] x64_sys_call+0x2999/0x2fb0 [ 93.556461][ T6360] do_syscall_64+0xd0/0x1a0 [ 93.556491][ T6360] ? clear_bhb_loop+0x40/0x90 [ 93.556575][ T6360] ? clear_bhb_loop+0x40/0x90 [ 93.556602][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.556629][ T6360] RIP: 0033:0x7fd79c67e969 [ 93.556648][ T6360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.556671][ T6360] RSP: 002b:00007fd79ace7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.556710][ T6360] RAX: ffffffffffffffda RBX: 00007fd79c8a5fa0 RCX: 00007fd79c67e969 [ 93.556726][ T6360] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000005 [ 93.556742][ T6360] RBP: 00007fd79ace7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.556789][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.556805][ T6360] R13: 0000000000000000 R14: 00007fd79c8a5fa0 R15: 00007ffc5102b2e8 [ 93.556830][ T6360] [ 93.830120][ T6371] rdma_op ffff88810db5c580 conn xmit_rdma 0000000000000000 [ 93.865769][ T3691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 93.883674][ T6378] FAULT_INJECTION: forcing a failure. [ 93.883674][ T6378] name failslab, interval 1, probability 0, space 0, times 0 [ 93.896496][ T6378] CPU: 1 UID: 0 PID: 6378 Comm: syz.3.894 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 93.896537][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 93.896552][ T6378] Call Trace: [ 93.896560][ T6378] [ 93.896638][ T6378] __dump_stack+0x1d/0x30 [ 93.896659][ T6378] dump_stack_lvl+0xe8/0x140 [ 93.896683][ T6378] dump_stack+0x15/0x1b [ 93.896703][ T6378] should_fail_ex+0x265/0x280 [ 93.896806][ T6378] should_failslab+0x8c/0xb0 [ 93.896841][ T6378] __kmalloc_noprof+0xa5/0x3e0 [ 93.896862][ T6378] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 93.896892][ T6378] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 93.896993][ T6378] ? selinux_capable+0x1f9/0x270 [ 93.897023][ T6378] genl_family_rcv_msg_doit+0x48/0x1b0 [ 93.897049][ T6378] ? security_capable+0x83/0x90 [ 93.897092][ T6378] ? ns_capable+0x7d/0xb0 [ 93.897119][ T6378] genl_rcv_msg+0x422/0x460 [ 93.897163][ T6378] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 93.897200][ T6378] netlink_rcv_skb+0x123/0x220 [ 93.897229][ T6378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.897342][ T6378] genl_rcv+0x28/0x40 [ 93.897369][ T6378] netlink_unicast+0x5a1/0x670 [ 93.897420][ T6378] netlink_sendmsg+0x58b/0x6b0 [ 93.897447][ T6378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.897504][ T6378] __sock_sendmsg+0x145/0x180 [ 93.897545][ T6378] ____sys_sendmsg+0x31e/0x4e0 [ 93.897611][ T6378] ___sys_sendmsg+0x17b/0x1d0 [ 93.897655][ T6378] __x64_sys_sendmsg+0xd4/0x160 [ 93.897697][ T6378] x64_sys_call+0x2999/0x2fb0 [ 93.897723][ T6378] do_syscall_64+0xd0/0x1a0 [ 93.897802][ T6378] ? clear_bhb_loop+0x40/0x90 [ 93.897830][ T6378] ? clear_bhb_loop+0x40/0x90 [ 93.897857][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.897884][ T6378] RIP: 0033:0x7fd39db2e969 [ 93.897903][ T6378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.897925][ T6378] RSP: 002b:00007fd39c197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.898030][ T6378] RAX: ffffffffffffffda RBX: 00007fd39dd55fa0 RCX: 00007fd39db2e969 [ 93.898043][ T6378] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000003 [ 93.898090][ T6378] RBP: 00007fd39c197090 R08: 0000000000000000 R09: 0000000000000000 [ 93.898129][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.898146][ T6378] R13: 0000000000000000 R14: 00007fd39dd55fa0 R15: 00007fff499834e8 [ 93.898170][ T6378] [ 94.148234][ T6376] loop5: detected capacity change from 0 to 512 [ 94.168811][ T6376] EXT4-fs (loop5): failed to initialize system zone (-117) [ 94.177128][ T6376] EXT4-fs (loop5): mount failed [ 94.227272][ T6387] netlink: 'syz.1.897': attribute type 1 has an invalid length. [ 94.234956][ T6387] netlink: 'syz.1.897': attribute type 2 has an invalid length. [ 94.291790][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 94.299053][ T6393] 9pnet_fd: Insufficient options for proto=fd [ 94.415837][ T6410] 0ªX¹¦D: renamed from gretap0 [ 94.423219][ T6410] 0ªX¹¦D: entered allmulticast mode [ 94.450497][ T6410] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 94.509464][ T6410] loop0: detected capacity change from 0 to 164 [ 94.526839][ T6410] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.536688][ T6415] loop1: detected capacity change from 0 to 8192 [ 94.566493][ T6410] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.606773][ T6410] Symlink component flag not implemented [ 94.612508][ T6410] Symlink component flag not implemented [ 94.655286][ T6410] Symlink component flag not implemented (7) [ 94.661363][ T6410] Symlink component flag not implemented (116) [ 94.727856][ T3317] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 94.735864][ T3317] FAT-fs (loop1): Filesystem has been set read-only [ 94.753352][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.814219][ T6433] loop1: detected capacity change from 0 to 1024 [ 94.841692][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.855597][ T6433] ext4: Unknown parameter 'dont_hash' [ 95.000112][ T6444] FAULT_INJECTION: forcing a failure. [ 95.000112][ T6444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.013384][ T6444] CPU: 1 UID: 0 PID: 6444 Comm: syz.0.915 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 95.013413][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 95.013429][ T6444] Call Trace: [ 95.013437][ T6444] [ 95.013446][ T6444] __dump_stack+0x1d/0x30 [ 95.013532][ T6444] dump_stack_lvl+0xe8/0x140 [ 95.013554][ T6444] dump_stack+0x15/0x1b [ 95.013575][ T6444] should_fail_ex+0x265/0x280 [ 95.013634][ T6444] should_fail+0xb/0x20 [ 95.013662][ T6444] should_fail_usercopy+0x1a/0x20 [ 95.013687][ T6444] _copy_to_user+0x20/0xa0 [ 95.013782][ T6444] simple_read_from_buffer+0xb5/0x130 [ 95.013809][ T6444] proc_fail_nth_read+0x100/0x140 [ 95.013870][ T6444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.013968][ T6444] vfs_read+0x19d/0x6f0 [ 95.013992][ T6444] ? __rcu_read_unlock+0x4f/0x70 [ 95.014013][ T6444] ? __fget_files+0x184/0x1c0 [ 95.014046][ T6444] ksys_read+0xda/0x1a0 [ 95.014080][ T6444] __x64_sys_read+0x40/0x50 [ 95.014183][ T6444] x64_sys_call+0x2d77/0x2fb0 [ 95.014209][ T6444] do_syscall_64+0xd0/0x1a0 [ 95.014237][ T6444] ? clear_bhb_loop+0x40/0x90 [ 95.014261][ T6444] ? clear_bhb_loop+0x40/0x90 [ 95.014296][ T6444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.014387][ T6444] RIP: 0033:0x7f809722d37c [ 95.014401][ T6444] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 95.014446][ T6444] RSP: 002b:00007f8095897030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.014521][ T6444] RAX: ffffffffffffffda RBX: 00007f8097455fa0 RCX: 00007f809722d37c [ 95.014533][ T6444] RDX: 000000000000000f RSI: 00007f80958970a0 RDI: 0000000000000003 [ 95.014544][ T6444] RBP: 00007f8095897090 R08: 0000000000000000 R09: 0000000000000000 [ 95.014556][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.014581][ T6444] R13: 0000000000000001 R14: 00007f8097455fa0 R15: 00007ffcdcd02a98 [ 95.014600][ T6444] [ 95.221252][ T6450] __nla_validate_parse: 5 callbacks suppressed [ 95.221269][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 95.246402][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 95.246490][ T29] audit: type=1400 audit(1747514215.111:2932): avc: denied { ioctl } for pid=6449 comm="syz.0.917" path="socket:[15429]" dev="sockfs" ino=15429 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.321937][ T6455] atomic_op ffff888123dc8928 conn xmit_atomic 0000000000000000 [ 95.326153][ T3678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 95.334615][ T29] audit: type=1400 audit(1747514215.191:2933): avc: denied { write } for pid=6452 comm="syz.3.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.452436][ T29] audit: type=1326 audit(1747514215.311:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 95.524886][ T29] audit: type=1326 audit(1747514215.341:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 95.548619][ T29] audit: type=1326 audit(1747514215.341:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f809722e9a3 code=0x7ffc0000 [ 95.571956][ T29] audit: type=1326 audit(1747514215.341:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f809722d41f code=0x7ffc0000 [ 95.595297][ T29] audit: type=1326 audit(1747514215.341:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f809722e9f7 code=0x7ffc0000 [ 95.618683][ T29] audit: type=1326 audit(1747514215.341:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f809722d2d0 code=0x7ffc0000 [ 95.642133][ T29] audit: type=1326 audit(1747514215.341:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f809722d5ca code=0x7ffc0000 [ 95.665336][ T29] audit: type=1326 audit(1747514215.341:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 95.751294][ T6474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.861680][ T6483] ucma_write: process 492 (syz.1.928) changed security contexts after opening file descriptor, this is not allowed. [ 96.545829][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 96.631699][ T6514] loop5: detected capacity change from 0 to 1024 [ 96.648966][ T6514] ext4: Unknown parameter 'dont_hash' [ 96.877030][ T6522] loop1: detected capacity change from 0 to 1024 [ 96.884797][ T6522] EXT4-fs: Mount option(s) incompatible with ext3 [ 96.902587][ T6522] loop1: detected capacity change from 0 to 512 [ 96.910114][ T6522] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 96.924045][ T6522] loop1: detected capacity change from 0 to 512 [ 96.932104][ T6522] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.938909][ T6522] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.941: bad orphan inode 13 [ 96.949778][ T6522] ext4_test_bit(bit=12, block=18) = 1 [ 96.955280][ T6522] is_bad_inode(inode)=0 [ 96.959542][ T6522] NEXT_ORPHAN(inode)=2130706432 [ 96.964403][ T6522] max_ino=32 [ 96.967648][ T6522] i_nlink=1 [ 97.546055][ T6542] FAULT_INJECTION: forcing a failure. [ 97.546055][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 97.558913][ T6542] CPU: 0 UID: 0 PID: 6542 Comm: syz.5.946 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 97.558949][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 97.558963][ T6542] Call Trace: [ 97.558971][ T6542] [ 97.558981][ T6542] __dump_stack+0x1d/0x30 [ 97.559008][ T6542] dump_stack_lvl+0xe8/0x140 [ 97.559045][ T6542] dump_stack+0x15/0x1b [ 97.559066][ T6542] should_fail_ex+0x265/0x280 [ 97.559106][ T6542] ? serport_ldisc_read+0x8c/0x300 [ 97.559130][ T6542] should_failslab+0x8c/0xb0 [ 97.559217][ T6542] __kmalloc_cache_noprof+0x4c/0x320 [ 97.559321][ T6542] serport_ldisc_read+0x8c/0x300 [ 97.559352][ T6542] tty_read+0x151/0x470 [ 97.559474][ T6542] ? _parse_integer_limit+0x170/0x190 [ 97.559524][ T6542] ? __import_iovec+0x428/0x540 [ 97.559635][ T6542] do_iter_readv_writev+0x421/0x4c0 [ 97.559715][ T6542] vfs_readv+0x1e3/0x670 [ 97.559749][ T6542] do_readv+0xe7/0x210 [ 97.559771][ T6542] __x64_sys_readv+0x45/0x50 [ 97.559803][ T6542] x64_sys_call+0x29af/0x2fb0 [ 97.559857][ T6542] do_syscall_64+0xd0/0x1a0 [ 97.559907][ T6542] ? clear_bhb_loop+0x40/0x90 [ 97.559934][ T6542] ? clear_bhb_loop+0x40/0x90 [ 97.559958][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.560021][ T6542] RIP: 0033:0x7fd79c67e969 [ 97.560039][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.560062][ T6542] RSP: 002b:00007fd79ace7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 97.560085][ T6542] RAX: ffffffffffffffda RBX: 00007fd79c8a5fa0 RCX: 00007fd79c67e969 [ 97.560100][ T6542] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 97.560115][ T6542] RBP: 00007fd79ace7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.560128][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.560143][ T6542] R13: 0000000000000000 R14: 00007fd79c8a5fa0 R15: 00007ffc5102b2e8 [ 97.560244][ T6542] [ 97.979430][ T6564] loop3: detected capacity change from 0 to 1024 [ 97.996906][ T6564] ext4: Unknown parameter 'dont_hash' [ 98.108645][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 98.143589][ T6569] loop6: detected capacity change from 0 to 128 [ 98.363796][ T6578] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 98.374028][ T6578] SELinux: failed to load policy [ 98.508340][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.6.966'. [ 98.608482][ T6605] loop5: detected capacity change from 0 to 2048 [ 98.628123][ T6605] EXT4-fs (loop5): failed to initialize system zone (-117) [ 98.635634][ T6605] EXT4-fs (loop5): mount failed [ 98.671195][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.972'. [ 98.698307][ T6618] netlink: 'syz.5.976': attribute type 10 has an invalid length. [ 98.706878][ T6618] batman_adv: batadv0: Adding interface: team0 [ 98.713074][ T6618] batman_adv: batadv0: The MTU of interface team0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 98.738314][ T6618] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 98.845450][ T6627] netlink: 'syz.5.976': attribute type 10 has an invalid length. [ 98.853509][ T6627] netlink: 2 bytes leftover after parsing attributes in process `syz.5.976'. [ 98.867959][ T6627] team0: entered promiscuous mode [ 98.873102][ T6627] team_slave_0: entered promiscuous mode [ 98.879050][ T6627] team_slave_1: entered promiscuous mode [ 98.897286][ T6627] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.913083][ T6627] batman_adv: batadv0: Interface activated: team0 [ 98.919829][ T6627] batman_adv: batadv0: Interface deactivated: team0 [ 98.926539][ T6627] batman_adv: batadv0: Removing interface: team0 [ 98.936752][ T6629] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 98.948722][ T6627] bridge0: port 3(team0) entered blocking state [ 98.955169][ T6627] bridge0: port 3(team0) entered disabled state [ 98.961945][ T6627] team0: entered allmulticast mode [ 98.967127][ T6627] team_slave_0: entered allmulticast mode [ 98.972900][ T6627] team_slave_1: entered allmulticast mode [ 99.023837][ T6636] FAULT_INJECTION: forcing a failure. [ 99.023837][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 99.036665][ T6636] CPU: 0 UID: 0 PID: 6636 Comm: syz.1.980 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 99.036746][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 99.036762][ T6636] Call Trace: [ 99.036768][ T6636] [ 99.036776][ T6636] __dump_stack+0x1d/0x30 [ 99.036801][ T6636] dump_stack_lvl+0xe8/0x140 [ 99.036876][ T6636] dump_stack+0x15/0x1b [ 99.036897][ T6636] should_fail_ex+0x265/0x280 [ 99.036931][ T6636] should_failslab+0x8c/0xb0 [ 99.036968][ T6636] kmem_cache_alloc_node_noprof+0x57/0x320 [ 99.037009][ T6636] ? __alloc_skb+0x101/0x320 [ 99.037052][ T6636] __alloc_skb+0x101/0x320 [ 99.037124][ T6636] netlink_alloc_large_skb+0xba/0xf0 [ 99.037161][ T6636] netlink_sendmsg+0x3cf/0x6b0 [ 99.037189][ T6636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.037290][ T6636] __sock_sendmsg+0x145/0x180 [ 99.037339][ T6636] ____sys_sendmsg+0x31e/0x4e0 [ 99.037363][ T6636] ___sys_sendmsg+0x17b/0x1d0 [ 99.037406][ T6636] __x64_sys_sendmsg+0xd4/0x160 [ 99.037435][ T6636] x64_sys_call+0x2999/0x2fb0 [ 99.037527][ T6636] do_syscall_64+0xd0/0x1a0 [ 99.037563][ T6636] ? clear_bhb_loop+0x40/0x90 [ 99.037620][ T6636] ? clear_bhb_loop+0x40/0x90 [ 99.037648][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.037674][ T6636] RIP: 0033:0x7f959a01e969 [ 99.037755][ T6636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.037775][ T6636] RSP: 002b:00007f9598687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.037793][ T6636] RAX: ffffffffffffffda RBX: 00007f959a245fa0 RCX: 00007f959a01e969 [ 99.037805][ T6636] RDX: 0000000004000884 RSI: 0000200000000040 RDI: 0000000000000006 [ 99.037817][ T6636] RBP: 00007f9598687090 R08: 0000000000000000 R09: 0000000000000000 [ 99.037832][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.037848][ T6636] R13: 0000000000000000 R14: 00007f959a245fa0 R15: 00007ffe332f3d58 [ 99.037874][ T6636] [ 99.315593][ T6644] netlink: 48 bytes leftover after parsing attributes in process `syz.3.984'. [ 99.447610][ T3691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 99.502908][ T6650] netlink: 'syz.1.986': attribute type 6 has an invalid length. [ 99.643712][ T6670] syz.3.994 (6670): attempted to duplicate a private mapping with mremap. This is not supported. [ 99.705314][ T6671] loop1: detected capacity change from 0 to 1024 [ 99.712235][ T6671] EXT4-fs: Ignoring removed bh option [ 99.717689][ T6671] EXT4-fs: inline encryption not supported [ 99.748276][ T6671] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.785609][ T6671] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 99.796706][ T6671] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm syz.1.993: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.812007][ T6671] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 48: comm syz.1.993: lblock 0 mapped to illegal pblock 48 (length 1) [ 99.826912][ T6671] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.993: Failed to acquire dquot type 0 [ 99.838596][ T6671] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 99.849592][ T6671] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.993: mark_inode_dirty error [ 99.862947][ T6671] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 99.878827][ T6671] EXT4-fs (loop1): 1 orphan inode deleted [ 99.885291][ T6671] EXT4-fs mount: 9 callbacks suppressed [ 99.885304][ T6671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.904768][ T3673] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.925243][ T6671] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #2: block 16: comm syz.1.993: lblock 0 mapped to illegal pblock 16 (length 1) [ 99.926591][ T3673] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:36: Failed to release dquot type 0 [ 99.943357][ T6671] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #2: block 16: comm syz.1.993: lblock 0 mapped to illegal pblock 16 (length 1) [ 99.990859][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.000751][ T6700] vhci_hcd: invalid port number 254 [ 100.013963][ T6700] loop3: detected capacity change from 0 to 128 [ 100.020707][ T3317] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 100.023580][ T6700] FAT-fs (loop3): Directory bread(block 162) failed [ 100.039491][ T3317] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 100.057491][ T3317] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 100.087195][ T6702] erspan1: entered allmulticast mode [ 100.092583][ T6700] FAT-fs (loop3): Directory bread(block 163) failed [ 100.099447][ T6708] loop5: detected capacity change from 0 to 2048 [ 100.100251][ T6700] FAT-fs (loop3): Directory bread(block 164) failed [ 100.113717][ T6700] FAT-fs (loop3): Directory bread(block 165) failed [ 100.121799][ T6700] FAT-fs (loop3): Directory bread(block 166) failed [ 100.128758][ T6700] FAT-fs (loop3): Directory bread(block 167) failed [ 100.139849][ T6700] FAT-fs (loop3): Directory bread(block 168) failed [ 100.146527][ T6700] FAT-fs (loop3): Directory bread(block 169) failed [ 100.159539][ T6700] FAT-fs (loop3): Directory bread(block 162) failed [ 100.166523][ T6700] FAT-fs (loop3): Directory bread(block 163) failed [ 100.173633][ T6700] syz.3.1007: attempt to access beyond end of device [ 100.173633][ T6700] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 100.187946][ T6708] Alternate GPT is invalid, using primary GPT. [ 100.190860][ T6700] syz.3.1007: attempt to access beyond end of device [ 100.190860][ T6700] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 100.194207][ T6708] loop5: p1 p2 p3 [ 100.253718][ T6724] FAULT_INJECTION: forcing a failure. [ 100.253718][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 100.266477][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: syz.5.1015 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 100.266513][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 100.266529][ T6724] Call Trace: [ 100.266537][ T6724] [ 100.266546][ T6724] __dump_stack+0x1d/0x30 [ 100.266641][ T6724] dump_stack_lvl+0xe8/0x140 [ 100.266664][ T6724] dump_stack+0x15/0x1b [ 100.266685][ T6724] should_fail_ex+0x265/0x280 [ 100.266779][ T6724] should_failslab+0x8c/0xb0 [ 100.266816][ T6724] kmem_cache_alloc_node_noprof+0x57/0x320 [ 100.266890][ T6724] ? __alloc_skb+0x101/0x320 [ 100.266944][ T6724] __alloc_skb+0x101/0x320 [ 100.266984][ T6724] netlink_alloc_large_skb+0xba/0xf0 [ 100.267088][ T6724] netlink_sendmsg+0x3cf/0x6b0 [ 100.267114][ T6724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.267138][ T6724] __sock_sendmsg+0x145/0x180 [ 100.267246][ T6724] ____sys_sendmsg+0x31e/0x4e0 [ 100.267273][ T6724] ___sys_sendmsg+0x17b/0x1d0 [ 100.267382][ T6724] __x64_sys_sendmsg+0xd4/0x160 [ 100.267414][ T6724] x64_sys_call+0x2999/0x2fb0 [ 100.267440][ T6724] do_syscall_64+0xd0/0x1a0 [ 100.267469][ T6724] ? clear_bhb_loop+0x40/0x90 [ 100.267564][ T6724] ? clear_bhb_loop+0x40/0x90 [ 100.267591][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.267633][ T6724] RIP: 0033:0x7fd79c67e969 [ 100.267651][ T6724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.267673][ T6724] RSP: 002b:00007fd79ace7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.267693][ T6724] RAX: ffffffffffffffda RBX: 00007fd79c8a5fa0 RCX: 00007fd79c67e969 [ 100.267739][ T6724] RDX: 0000000004000884 RSI: 0000200000000040 RDI: 0000000000000006 [ 100.267751][ T6724] RBP: 00007fd79ace7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.267766][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.267777][ T6724] R13: 0000000000000000 R14: 00007fd79c8a5fa0 R15: 00007ffc5102b2e8 [ 100.267794][ T6724] [ 100.471441][ T29] kauditd_printk_skb: 655 callbacks suppressed [ 100.471457][ T29] audit: type=1326 audit(1747514220.331:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd39db2e969 code=0x7ffc0000 [ 100.501285][ T29] audit: type=1326 audit(1747514220.331:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39db2e969 code=0x7ffc0000 [ 100.524788][ T29] audit: type=1326 audit(1747514220.331:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39db2e969 code=0x7ffc0000 [ 100.566290][ T6727] FAULT_INJECTION: forcing a failure. [ 100.566290][ T6727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 100.579677][ T6727] CPU: 1 UID: 0 PID: 6727 Comm: syz.3.1016 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 100.579711][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 100.579752][ T6727] Call Trace: [ 100.579758][ T6727] [ 100.579767][ T6727] __dump_stack+0x1d/0x30 [ 100.579812][ T6727] dump_stack_lvl+0xe8/0x140 [ 100.579853][ T6727] dump_stack+0x15/0x1b [ 100.579897][ T6727] should_fail_ex+0x265/0x280 [ 100.579993][ T6727] should_fail_alloc_page+0xf2/0x100 [ 100.580165][ T6727] __alloc_frozen_pages_noprof+0xff/0x360 [ 100.580203][ T6727] alloc_pages_mpol+0xb3/0x250 [ 100.580281][ T6727] alloc_pages_noprof+0x90/0x130 [ 100.580324][ T6727] __pud_alloc+0x47/0x450 [ 100.580364][ T6727] handle_mm_fault+0x19c7/0x2ae0 [ 100.580401][ T6727] ? __rcu_read_unlock+0x4f/0x70 [ 100.580494][ T6727] do_user_addr_fault+0x3fe/0x1090 [ 100.580540][ T6727] exc_page_fault+0x54/0xc0 [ 100.580565][ T6727] asm_exc_page_fault+0x26/0x30 [ 100.580648][ T6727] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 100.580713][ T6727] Code: eb 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 100.580736][ T6727] RSP: 0018:ffffc90004dc7c68 EFLAGS: 00050206 [ 100.580756][ T6727] RAX: ffff888104412b98 RBX: 0000000000000100 RCX: 0000000000000100 [ 100.580772][ T6727] RDX: 0000000000000000 RSI: ffffc90004dc7cb0 RDI: 0000200000000a40 [ 100.580795][ T6727] RBP: ffffc90004dc7df0 R08: 0000000000000862 R09: 0000000000000000 [ 100.580848][ T6727] R10: 0001c90004dc7cb0 R11: 0001c90004dc7daf R12: 0000200000000b40 [ 100.580864][ T6727] R13: 00007ffffffff000 R14: 0000200000000a40 R15: ffffc90004dc7cb0 [ 100.581064][ T6727] _copy_to_user+0x7c/0xa0 [ 100.581089][ T6727] con_get_trans_old+0x28d/0x2e0 [ 100.581129][ T6727] vt_ioctl+0xe47/0x1790 [ 100.581156][ T6727] ? tty_jobctrl_ioctl+0x29e/0x810 [ 100.581226][ T6727] tty_ioctl+0x7db/0xb80 [ 100.581256][ T6727] ? __pfx_tty_ioctl+0x10/0x10 [ 100.581287][ T6727] __se_sys_ioctl+0xcb/0x140 [ 100.581391][ T6727] __x64_sys_ioctl+0x43/0x50 [ 100.581419][ T6727] x64_sys_call+0x19a8/0x2fb0 [ 100.581440][ T6727] do_syscall_64+0xd0/0x1a0 [ 100.581519][ T6727] ? clear_bhb_loop+0x40/0x90 [ 100.581541][ T6727] ? clear_bhb_loop+0x40/0x90 [ 100.581624][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.581650][ T6727] RIP: 0033:0x7fd39db2e969 [ 100.581672][ T6727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.581691][ T6727] RSP: 002b:00007fd39c197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.581709][ T6727] RAX: ffffffffffffffda RBX: 00007fd39dd55fa0 RCX: 00007fd39db2e969 [ 100.581721][ T6727] RDX: 0000200000000a40 RSI: 0000000000004b40 RDI: 0000000000000004 [ 100.581733][ T6727] RBP: 00007fd39c197090 R08: 0000000000000000 R09: 0000000000000000 [ 100.581744][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.581778][ T6727] R13: 0000000000000000 R14: 00007fd39dd55fa0 R15: 00007fff499834e8 [ 100.581816][ T6727] [ 100.886292][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 100.896588][ T6732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1017'. [ 100.900680][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1018'. [ 101.004663][ T6740] netlink: 'syz.3.1020': attribute type 21 has an invalid length. [ 101.015295][ T6740] netlink: 'syz.3.1020': attribute type 1 has an invalid length. [ 101.023166][ T6740] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1020'. [ 101.057609][ T29] audit: type=1326 audit(1747514220.911:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 101.081194][ T29] audit: type=1326 audit(1747514220.911:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 101.083030][ T6740] loop3: detected capacity change from 0 to 128 [ 101.104930][ T29] audit: type=1326 audit(1747514220.911:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 101.114499][ T6740] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.134685][ T29] audit: type=1326 audit(1747514220.911:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 101.134797][ T29] audit: type=1326 audit(1747514220.911:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 101.134831][ T29] audit: type=1326 audit(1747514220.911:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 101.217144][ T29] audit: type=1326 audit(1747514220.911:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 101.218289][ T6740] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.282675][ T6759] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1026'. [ 101.292159][ T6759] netlink: 'syz.3.1026': attribute type 5 has an invalid length. [ 101.300125][ T6759] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1026'. [ 101.321902][ T6759] loop3: detected capacity change from 0 to 512 [ 101.328678][ T6759] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 101.339218][ T6761] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 101.353392][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1029'. [ 101.362440][ T6764] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1029'. [ 101.385258][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1029'. [ 101.398144][ T6764] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1029'. [ 101.407454][ T6764] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1029'. [ 101.508117][ T6773] FAULT_INJECTION: forcing a failure. [ 101.508117][ T6773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.521471][ T6773] CPU: 0 UID: 0 PID: 6773 Comm: syz.6.1033 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 101.521515][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 101.521531][ T6773] Call Trace: [ 101.521539][ T6773] [ 101.521548][ T6773] __dump_stack+0x1d/0x30 [ 101.521604][ T6773] dump_stack_lvl+0xe8/0x140 [ 101.521629][ T6773] dump_stack+0x15/0x1b [ 101.521649][ T6773] should_fail_ex+0x265/0x280 [ 101.521691][ T6773] should_fail+0xb/0x20 [ 101.521763][ T6773] should_fail_usercopy+0x1a/0x20 [ 101.521846][ T6773] _copy_to_user+0x20/0xa0 [ 101.521872][ T6773] simple_read_from_buffer+0xb5/0x130 [ 101.521901][ T6773] proc_fail_nth_read+0x100/0x140 [ 101.521943][ T6773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.522004][ T6773] vfs_read+0x19d/0x6f0 [ 101.522034][ T6773] ? __rcu_read_unlock+0x4f/0x70 [ 101.522054][ T6773] ? __rcu_read_unlock+0x4f/0x70 [ 101.522080][ T6773] ? __fget_files+0x184/0x1c0 [ 101.522214][ T6773] ksys_read+0xda/0x1a0 [ 101.522244][ T6773] __x64_sys_read+0x40/0x50 [ 101.522276][ T6773] x64_sys_call+0x2d77/0x2fb0 [ 101.522304][ T6773] do_syscall_64+0xd0/0x1a0 [ 101.522334][ T6773] ? clear_bhb_loop+0x40/0x90 [ 101.522361][ T6773] ? clear_bhb_loop+0x40/0x90 [ 101.522396][ T6773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.522448][ T6773] RIP: 0033:0x7f309094d37c [ 101.522492][ T6773] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.522515][ T6773] RSP: 002b:00007f308efb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.522537][ T6773] RAX: ffffffffffffffda RBX: 00007f3090b75fa0 RCX: 00007f309094d37c [ 101.522569][ T6773] RDX: 000000000000000f RSI: 00007f308efb70a0 RDI: 0000000000000005 [ 101.522585][ T6773] RBP: 00007f308efb7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.522645][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.522660][ T6773] R13: 0000000000000000 R14: 00007f3090b75fa0 R15: 00007ffd58f82ec8 [ 101.522706][ T6773] [ 102.082316][ T6793] bond1: entered promiscuous mode [ 102.087520][ T6793] bond1: entered allmulticast mode [ 102.094080][ T6793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.103217][ T6793] bond1 (unregistering): Released all slaves [ 102.165834][ T3673] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 103.058281][ T6826] sd 0:0:1:0: device reset [ 103.069688][ T6826] erspan1: entered allmulticast mode [ 103.136978][ T6828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6828 comm=syz.1.1052 [ 103.150669][ T6828] sd 0:0:1:0: device reset [ 103.286298][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 103.294871][ T6840] loop3: detected capacity change from 0 to 1024 [ 103.302393][ T6840] ext4: Unknown parameter 'dont_hash' [ 103.625196][ T6857] loop5: detected capacity change from 0 to 512 [ 103.631937][ T6857] EXT4-fs: Ignoring removed oldalloc option [ 103.649867][ T6857] EXT4-fs (loop5): 1 truncate cleaned up [ 103.656138][ T6857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.670005][ T6857] FAULT_INJECTION: forcing a failure. [ 103.670005][ T6857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.683369][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.5.1064 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 103.683420][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 103.683497][ T6857] Call Trace: [ 103.683504][ T6857] [ 103.683512][ T6857] __dump_stack+0x1d/0x30 [ 103.683538][ T6857] dump_stack_lvl+0xe8/0x140 [ 103.683562][ T6857] dump_stack+0x15/0x1b [ 103.683625][ T6857] should_fail_ex+0x265/0x280 [ 103.683668][ T6857] should_fail+0xb/0x20 [ 103.683696][ T6857] should_fail_usercopy+0x1a/0x20 [ 103.683715][ T6857] _copy_from_user+0x1c/0xb0 [ 103.683769][ T6857] autofs_dev_ioctl+0xdd/0x6a0 [ 103.683799][ T6857] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 103.683832][ T6857] __se_sys_ioctl+0xcb/0x140 [ 103.683853][ T6857] __x64_sys_ioctl+0x43/0x50 [ 103.683940][ T6857] x64_sys_call+0x19a8/0x2fb0 [ 103.683961][ T6857] do_syscall_64+0xd0/0x1a0 [ 103.683989][ T6857] ? clear_bhb_loop+0x40/0x90 [ 103.684009][ T6857] ? clear_bhb_loop+0x40/0x90 [ 103.684054][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.684074][ T6857] RIP: 0033:0x7fd79c67e969 [ 103.684090][ T6857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.684113][ T6857] RSP: 002b:00007fd79ace7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.684148][ T6857] RAX: ffffffffffffffda RBX: 00007fd79c8a5fa0 RCX: 00007fd79c67e969 [ 103.684159][ T6857] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000005 [ 103.684170][ T6857] RBP: 00007fd79ace7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.684182][ T6857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.684228][ T6857] R13: 0000000000000000 R14: 00007fd79c8a5fa0 R15: 00007ffc5102b2e8 [ 103.684246][ T6857] [ 103.870238][ T3618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.896704][ T6861] wireguard0: entered promiscuous mode [ 104.065437][ T6873] Invalid ELF header magic: != ELF [ 104.071254][ T6873] Invalid ELF header magic: != ELF [ 104.077433][ T6873] Invalid ELF header magic: != ELF [ 104.082848][ T6873] Invalid ELF header magic: != ELF [ 104.090395][ T6873] Invalid ELF header magic: != ELF [ 104.095726][ T6873] Invalid ELF header magic: != ELF [ 104.101115][ T6873] Invalid ELF header magic: != ELF [ 104.107388][ T6873] Invalid ELF header magic: != ELF [ 104.112783][ T6873] Invalid ELF header magic: != ELF [ 104.162798][ T6873] Invalid ELF header magic: != ELF [ 104.168487][ T6873] Invalid ELF header magic: != ELF [ 104.173881][ T6873] Invalid ELF header magic: != ELF [ 104.179959][ T6873] Invalid ELF header magic: != ELF [ 104.185649][ T6873] Invalid ELF header magic: != ELF [ 104.191133][ T6873] Invalid ELF header magic: != ELF [ 104.201111][ T6873] Invalid ELF header magic: != ELF [ 104.206626][ T6873] Invalid ELF header magic: != ELF [ 104.212044][ T6873] Invalid ELF header magic: != ELF [ 104.217594][ T6873] Invalid ELF header magic: != ELF [ 104.223022][ T6873] Invalid ELF header magic: != ELF [ 104.229250][ T6873] Invalid ELF header magic: != ELF [ 104.234623][ T6873] Invalid ELF header magic: != ELF [ 104.240086][ T6873] Invalid ELF header magic: != ELF [ 104.245396][ T6873] Invalid ELF header magic: != ELF [ 104.250789][ T6873] Invalid ELF header magic: != ELF [ 104.259864][ T6873] Invalid ELF header magic: != ELF [ 104.265565][ T6873] Invalid ELF header magic: != ELF [ 104.271228][ T6873] Invalid ELF header magic: != ELF [ 104.277369][ T6873] Invalid ELF header magic: != ELF [ 104.284757][ T6873] Invalid ELF header magic: != ELF [ 104.291176][ T6873] Invalid ELF header magic: != ELF [ 104.297979][ T6873] Invalid ELF header magic: != ELF [ 104.303883][ T6873] Invalid ELF header magic: != ELF [ 104.321096][ T6873] Invalid ELF header magic: != ELF [ 104.327254][ T6873] Invalid ELF header magic: != ELF [ 104.332856][ T6873] Invalid ELF header magic: != ELF [ 104.338383][ T6873] Invalid ELF header magic: != ELF [ 104.343866][ T6873] Invalid ELF header magic: != ELF [ 104.385952][ T6873] Invalid ELF header magic: != ELF [ 104.401358][ T6873] Invalid ELF header magic: != ELF [ 104.409799][ T6873] Invalid ELF header magic: != ELF [ 104.415309][ T6873] Invalid ELF header magic: != ELF [ 104.441652][ T6885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.442192][ T6873] Invalid ELF header magic: != ELF [ 104.457160][ T6873] Invalid ELF header magic: != ELF [ 104.462728][ T6873] Invalid ELF header magic: != ELF [ 104.468973][ T6873] Invalid ELF header magic: != ELF [ 104.474422][ T6873] Invalid ELF header magic: != ELF [ 104.481642][ T6873] Invalid ELF header magic: != ELF [ 104.490464][ T6873] Invalid ELF header magic: != ELF [ 104.516308][ T6885] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 104.524320][ T6885] netlink: 'syz.3.1073': attribute type 13 has an invalid length. [ 104.605765][ T6873] Invalid ELF header magic: != ELF [ 104.611644][ T6873] Invalid ELF header magic: != ELF [ 104.621004][ T3673] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 104.626871][ T6873] Invalid ELF header magic: != ELF [ 104.634085][ T6885] bridge0: left promiscuous mode [ 104.639673][ T6873] Invalid ELF header magic: != ELF [ 104.661428][ T6873] Invalid ELF header magic: != ELF [ 104.671724][ T6873] Invalid ELF header magic: != ELF [ 104.682798][ T6873] Invalid ELF header magic: != ELF [ 104.688311][ T6873] Invalid ELF header magic: != ELF [ 104.693803][ T6873] Invalid ELF header magic: != ELF [ 104.699416][ T6873] Invalid ELF header magic: != ELF [ 104.705025][ T6873] Invalid ELF header magic: != ELF [ 104.706559][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.713990][ T6873] Invalid ELF header magic: != ELF [ 104.724222][ T6873] Invalid ELF header magic: != ELF [ 104.737988][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.745403][ T6873] Invalid ELF header magic: != ELF [ 104.751921][ T6873] Invalid ELF header magic: != ELF [ 104.757638][ T6873] Invalid ELF header magic: != ELF [ 104.774472][ T6887] tipc: Enabling of bearer rejected, already enabled [ 104.834516][ T6897] loop3: detected capacity change from 0 to 1024 [ 104.843875][ T6897] ext4: Unknown parameter 'dont_hash' [ 104.929457][ T6899] loop5: detected capacity change from 0 to 512 [ 104.936417][ T6899] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.944076][ T6899] EXT4-fs: inline encryption not supported [ 104.957572][ T6899] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.966770][ T6899] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 104.977196][ T6899] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 104.986582][ T6899] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c02c, mo2=0002] [ 104.994781][ T6899] System zones: 0-2, 18-18, 34-34 [ 105.000727][ T6899] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1077: couldn't read orphan inode 15 (err -116) [ 105.013393][ T6899] EXT4-fs (loop5): Remounting filesystem read-only [ 105.020848][ T6899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.052828][ T3618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.204278][ T6907] loop5: detected capacity change from 0 to 512 [ 105.211180][ T6907] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.219959][ T6907] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 105.228919][ T6907] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1081: attempt to clear invalid blocks 2 len 1 [ 105.242762][ T6907] EXT4-fs (loop5): Remounting filesystem read-only [ 105.255736][ T6907] EXT4-fs (loop5): 1 truncate cleaned up [ 105.261694][ T6907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.276862][ T6907] FAULT_INJECTION: forcing a failure. [ 105.276862][ T6907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.290173][ T6907] CPU: 1 UID: 0 PID: 6907 Comm: syz.5.1081 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 105.290209][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.290225][ T6907] Call Trace: [ 105.290233][ T6907] [ 105.290244][ T6907] __dump_stack+0x1d/0x30 [ 105.290270][ T6907] dump_stack_lvl+0xe8/0x140 [ 105.290363][ T6907] dump_stack+0x15/0x1b [ 105.290383][ T6907] should_fail_ex+0x265/0x280 [ 105.290479][ T6907] should_fail+0xb/0x20 [ 105.290515][ T6907] should_fail_usercopy+0x1a/0x20 [ 105.290590][ T6907] strncpy_from_user+0x25/0x230 [ 105.290620][ T6907] ? kmem_cache_alloc_noprof+0x186/0x310 [ 105.290786][ T6907] ? getname_flags+0x80/0x3b0 [ 105.290893][ T6907] getname_flags+0xae/0x3b0 [ 105.290929][ T6907] user_path_at+0x28/0x130 [ 105.290954][ T6907] __se_sys_quotactl+0xb6/0x670 [ 105.291019][ T6907] __x64_sys_quotactl+0x55/0x70 [ 105.291044][ T6907] x64_sys_call+0x2886/0x2fb0 [ 105.291070][ T6907] do_syscall_64+0xd0/0x1a0 [ 105.291119][ T6907] ? clear_bhb_loop+0x40/0x90 [ 105.291192][ T6907] ? clear_bhb_loop+0x40/0x90 [ 105.291213][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.291237][ T6907] RIP: 0033:0x7fd79c67e969 [ 105.291256][ T6907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.291275][ T6907] RSP: 002b:00007fd79ace7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 105.291315][ T6907] RAX: ffffffffffffffda RBX: 00007fd79c8a5fa0 RCX: 00007fd79c67e969 [ 105.291326][ T6907] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000200 [ 105.291421][ T6907] RBP: 00007fd79ace7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.291433][ T6907] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.291445][ T6907] R13: 0000000000000000 R14: 00007fd79c8a5fa0 R15: 00007ffc5102b2e8 [ 105.291464][ T6907] [ 105.515284][ T3618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.592386][ T6921] FAULT_INJECTION: forcing a failure. [ 105.592386][ T6921] name failslab, interval 1, probability 0, space 0, times 0 [ 105.605225][ T6921] CPU: 0 UID: 0 PID: 6921 Comm: syz.1.1085 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 105.605256][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.605269][ T6921] Call Trace: [ 105.605274][ T6921] [ 105.605281][ T6921] __dump_stack+0x1d/0x30 [ 105.605301][ T6921] dump_stack_lvl+0xe8/0x140 [ 105.605322][ T6921] dump_stack+0x15/0x1b [ 105.605343][ T6921] should_fail_ex+0x265/0x280 [ 105.605390][ T6921] should_failslab+0x8c/0xb0 [ 105.605429][ T6921] kmem_cache_alloc_noprof+0x50/0x310 [ 105.605449][ T6921] ? mas_alloc_nodes+0x265/0x520 [ 105.605479][ T6921] mas_alloc_nodes+0x265/0x520 [ 105.605513][ T6921] mas_preallocate+0x456/0x680 [ 105.605548][ T6921] mmap_region+0x966/0x1470 [ 105.605609][ T6921] do_mmap+0x9de/0xc20 [ 105.605642][ T6921] vm_mmap_pgoff+0x17a/0x2e0 [ 105.605672][ T6921] ksys_mmap_pgoff+0xc2/0x310 [ 105.605709][ T6921] ? __x64_sys_mmap+0x49/0x70 [ 105.605736][ T6921] x64_sys_call+0x1602/0x2fb0 [ 105.605762][ T6921] do_syscall_64+0xd0/0x1a0 [ 105.605791][ T6921] ? clear_bhb_loop+0x40/0x90 [ 105.605825][ T6921] ? clear_bhb_loop+0x40/0x90 [ 105.605850][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.605875][ T6921] RIP: 0033:0x7f959a01e9a3 [ 105.605893][ T6921] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 105.605929][ T6921] RSP: 002b:00007f9598686d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 105.605947][ T6921] RAX: ffffffffffffffda RBX: 000000000000104f RCX: 00007f959a01e9a3 [ 105.605958][ T6921] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 105.605969][ T6921] RBP: 00002000000013c2 R08: 00000000ffffffff R09: 0000000000000000 [ 105.605984][ T6921] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008 [ 105.605999][ T6921] R13: 00007f9598686dec R14: 00007f9598686df0 R15: 00007ffe332f3d58 [ 105.606043][ T6921] [ 105.619135][ T6924] netlink: 'syz.5.1084': attribute type 1 has an invalid length. [ 105.892809][ T6929] bridge_slave_1: left allmulticast mode [ 105.898579][ T6929] bridge_slave_1: left promiscuous mode [ 105.904403][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.915601][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 105.931428][ T3678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 105.940444][ T6929] bridge_slave_0: left allmulticast mode [ 105.946364][ T6929] bridge_slave_0: left promiscuous mode [ 105.952167][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.976935][ T6936] loop1: detected capacity change from 0 to 256 [ 106.096480][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 106.096498][ T29] audit: type=1326 audit(1747514225.951:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 106.126293][ T29] audit: type=1326 audit(1747514225.951:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 106.149814][ T29] audit: type=1326 audit(1747514225.951:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 106.173337][ T29] audit: type=1326 audit(1747514225.951:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 106.196799][ T29] audit: type=1326 audit(1747514225.951:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 106.220304][ T29] audit: type=1326 audit(1747514225.951:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 106.243761][ T29] audit: type=1326 audit(1747514225.951:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 106.267171][ T29] audit: type=1326 audit(1747514225.951:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 106.290863][ T29] audit: type=1326 audit(1747514225.951:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 106.314289][ T29] audit: type=1326 audit(1747514225.951:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.6.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f309094e969 code=0x7ffc0000 [ 106.387346][ T6955] loop5: detected capacity change from 0 to 1024 [ 106.394336][ T6957] bond_slave_1: entered promiscuous mode [ 106.400347][ T6957] __nla_validate_parse: 2 callbacks suppressed [ 106.400359][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 106.416208][ T6955] ext4: Unknown parameter 'dont_hash' [ 106.422273][ T6957] bond0: (slave bond_slave_1): Releasing backup interface [ 106.430377][ T6957] bond_slave_1 (unregistering): left promiscuous mode [ 106.557221][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.566986][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.593831][ T6946] tipc: New replicast peer: 10.1.1.2 [ 106.599278][ T6946] tipc: Enabled bearer , priority 10 [ 106.781211][ T6972] macsec0: entered promiscuous mode [ 106.786549][ T6972] bridge0: entered promiscuous mode [ 106.792642][ T6972] bridge0: left promiscuous mode [ 106.929183][ T6985] netlink: 'syz.0.1106': attribute type 4 has an invalid length. [ 106.953455][ T6987] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 106.969186][ T6987] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 107.025574][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 107.059767][ T3678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 107.075100][ T6997] netlink: 'syz.0.1111': attribute type 10 has an invalid length. [ 107.218775][ T7006] loop6: detected capacity change from 0 to 1024 [ 107.226446][ T7006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.233426][ T7010] netlink: 'syz.3.1117': attribute type 4 has an invalid length. [ 107.245442][ T7006] vhci_hcd: invalid port number 96 [ 107.250603][ T7006] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 107.271278][ T7012] loop5: detected capacity change from 0 to 128 [ 107.295865][ T7012] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.309332][ T7012] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.338985][ T3618] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.354804][ T3618] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /197/mnt/lost+found: directory fails checksum at offset 0 [ 107.379275][ T3618] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /197/mnt/lost+found: directory fails checksum at offset 1024 [ 107.399424][ T3618] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /197/mnt/lost+found: directory fails checksum at offset 3072 [ 107.415579][ T3618] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.431289][ T3618] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /197/mnt/lost+found: directory fails checksum at offset 4096 [ 107.446934][ T3618] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /197/mnt/lost+found: directory fails checksum at offset 5120 [ 107.462567][ T3618] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.478273][ T3618] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /197/mnt/lost+found: directory fails checksum at offset 8192 [ 107.493461][ T3618] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /197/mnt/lost+found: directory fails checksum at offset 10240 [ 107.515077][ T3618] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.530683][ T3618] EXT4-fs error (device loop5): ext4_empty_dir:3080: inode #11: comm syz-executor: Directory block failed checksum [ 107.739972][ T3618] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.755768][ T3618] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /197/mnt/lost+found: directory fails checksum at offset 0 [ 107.859920][ T3618] EXT4-fs error (device loop5): ext4_readdir:224: inode #11: comm syz-executor: path /197/mnt/lost+found: directory fails checksum at offset 1024 [ 107.880190][ T9] tipc: Node number set to 823070793 [ 107.888451][ T3618] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.905148][ T3618] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.921268][ T3618] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.939701][ T3618] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 107.956909][ T3618] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 108.165564][ T7032] tipc: Enabling of bearer rejected, already enabled [ 108.167761][ T7046] loop1: detected capacity change from 0 to 1024 [ 108.183040][ T4193] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.185756][ T7046] ext4: Unknown parameter 'dont_hash' [ 108.205190][ T3673] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 108.209820][ T7048] netlink: 'syz.6.1129': attribute type 4 has an invalid length. [ 108.495815][ T7053] chnl_net:caif_netlink_parms(): no params data found [ 108.532921][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.540151][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.547435][ T7053] bridge_slave_0: entered allmulticast mode [ 108.553958][ T7053] bridge_slave_0: entered promiscuous mode [ 108.563226][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.570428][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.577701][ T7053] bridge_slave_1: entered allmulticast mode [ 108.584327][ T7053] bridge_slave_1: entered promiscuous mode [ 108.606376][ T7053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.619431][ T7053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.628775][ T3678] team0: left allmulticast mode [ 108.633693][ T3678] team_slave_0: left allmulticast mode [ 108.639183][ T3678] team_slave_1: left allmulticast mode [ 108.644775][ T3678] bridge0: port 3(team0) entered disabled state [ 108.651649][ T3678] bridge_slave_1: left allmulticast mode [ 108.657377][ T3678] bridge_slave_1: left promiscuous mode [ 108.663198][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.672111][ T3678] bridge_slave_0: left allmulticast mode [ 108.677867][ T3678] bridge_slave_0: left promiscuous mode [ 108.683616][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.693423][ T7077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1136'. [ 108.733739][ T7081] loop3: detected capacity change from 0 to 1024 [ 108.740736][ T7081] EXT4-fs: Ignoring removed orlov option [ 108.747332][ T7081] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 108.764048][ T7081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.792515][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.807553][ T3678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.823154][ T3678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.834779][ T3678] bond0 (unregistering): Released all slaves [ 108.859669][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1137'. [ 108.868849][ T7079] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1137'. [ 108.880538][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1137'. [ 108.889716][ T7079] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1137'. [ 108.899054][ T7079] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1137'. [ 108.909995][ T7053] team0: Port device team_slave_0 added [ 108.918546][ T3678] tipc: Disabling bearer [ 108.924046][ T3678] tipc: Left network mode [ 108.930546][ T7053] team0: Port device team_slave_1 added [ 108.963112][ T7091] netlink: 'syz.3.1141': attribute type 4 has an invalid length. [ 109.002125][ T7053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.009136][ T7053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.035293][ T7053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.069449][ T3678] hsr_slave_0: left promiscuous mode [ 109.079669][ T3678] hsr_slave_1: left promiscuous mode [ 109.085553][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.093543][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.144250][ T3678] team_slave_1 (unregistering): left promiscuous mode [ 109.152416][ T3678] team0 (unregistering): Port device team_slave_1 removed [ 109.162655][ T3678] team_slave_0 (unregistering): left promiscuous mode [ 109.174315][ T3678] team0 (unregistering): Port device team_slave_0 removed [ 109.260399][ T7053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.267508][ T7053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.272998][ T3675] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 109.293545][ T7053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.390974][ T7053] hsr_slave_0: entered promiscuous mode [ 109.398149][ T7105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7105 comm=syz.3.1146 [ 109.406429][ T7053] hsr_slave_1: entered promiscuous mode [ 109.411025][ T7105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7105 comm=syz.3.1146 [ 109.417126][ T7053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.437074][ T7053] Cannot create hsr debugfs directory [ 109.450000][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.464784][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.484614][ T7101] tipc: Enabling of bearer rejected, already enabled [ 109.586177][ T7053] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 109.598629][ T7053] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 109.607550][ T7053] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 109.616763][ T7053] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 109.662120][ T7053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.683814][ T7053] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.699940][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.707100][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.724085][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.731339][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.844710][ T7053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.966523][ T7053] veth0_vlan: entered promiscuous mode [ 109.976795][ T7053] veth1_vlan: entered promiscuous mode [ 109.993763][ T7053] veth0_macvtap: entered promiscuous mode [ 110.001805][ T7053] veth1_macvtap: entered promiscuous mode [ 110.015100][ T7053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.027333][ T7053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.038116][ T7053] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.047130][ T7053] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.056099][ T7053] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.064938][ T7053] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.079442][ T7142] loop6: detected capacity change from 0 to 1024 [ 110.086704][ T7142] ext4: Unknown parameter 'dont_hash' [ 110.226244][ T7152] loop7: detected capacity change from 0 to 512 [ 110.233688][ T7152] EXT4-fs: Ignoring removed i_version option [ 110.239784][ T7152] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.246647][ T7152] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 110.257437][ T7152] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 110.271474][ T7152] netlink: 'syz.7.1154': attribute type 10 has an invalid length. [ 110.292796][ T7152] team0: Device veth1_macvtap failed to register rx_handler [ 110.306572][ T7152] loop7: detected capacity change from 0 to 512 [ 110.313463][ T7152] ext4: Unknown parameter 'hash' [ 110.372585][ T7157] capability: warning: `syz.7.1156' uses 32-bit capabilities (legacy support in use) [ 110.382123][ T3644] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 110.400159][ T7157] loop7: detected capacity change from 0 to 512 [ 110.446581][ T7161] loop3: detected capacity change from 0 to 512 [ 110.454597][ T7163] loop7: detected capacity change from 0 to 512 [ 110.472569][ T7163] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 110.481532][ T7161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.492841][ T7163] System zones: 0-2, 18-18 [ 110.494164][ T7161] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.498625][ T7163] , 34-34 [ 110.528917][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.539536][ T7163] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1159: bg 0: block 248: padding at end of block bitmap is not set [ 110.560292][ T7163] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.1159: Failed to acquire dquot type 1 [ 110.589814][ T7163] EXT4-fs (loop7): 1 truncate cleaned up [ 110.598546][ T7163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.612180][ T7163] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.636322][ T7163] EXT4-fs error (device loop7): ext4_lookup:1793: inode #2: comm syz.7.1159: deleted inode referenced: 12 [ 110.667817][ T7053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.788059][ T7171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.797291][ T7171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.913663][ T7187] FAULT_INJECTION: forcing a failure. [ 110.913663][ T7187] name failslab, interval 1, probability 0, space 0, times 0 [ 110.926449][ T7187] CPU: 0 UID: 0 PID: 7187 Comm: syz.6.1167 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 110.926477][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 110.926493][ T7187] Call Trace: [ 110.926500][ T7187] [ 110.926507][ T7187] __dump_stack+0x1d/0x30 [ 110.926527][ T7187] dump_stack_lvl+0xe8/0x140 [ 110.926545][ T7187] dump_stack+0x15/0x1b [ 110.926560][ T7187] should_fail_ex+0x265/0x280 [ 110.926596][ T7187] should_failslab+0x8c/0xb0 [ 110.926627][ T7187] kmem_cache_alloc_noprof+0x50/0x310 [ 110.926651][ T7187] ? mas_alloc_nodes+0x265/0x520 [ 110.926682][ T7187] mas_alloc_nodes+0x265/0x520 [ 110.926716][ T7187] mas_preallocate+0x456/0x680 [ 110.926752][ T7187] mmap_region+0x966/0x1470 [ 110.926805][ T7187] do_mmap+0x9de/0xc20 [ 110.926832][ T7187] vm_mmap_pgoff+0x17a/0x2e0 [ 110.926862][ T7187] ksys_mmap_pgoff+0xc2/0x310 [ 110.926892][ T7187] ? __x64_sys_mmap+0x49/0x70 [ 110.926912][ T7187] x64_sys_call+0x1602/0x2fb0 [ 110.926931][ T7187] do_syscall_64+0xd0/0x1a0 [ 110.926961][ T7187] ? clear_bhb_loop+0x40/0x90 [ 110.926991][ T7187] ? clear_bhb_loop+0x40/0x90 [ 110.927010][ T7187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.927030][ T7187] RIP: 0033:0x7f309094e9a3 [ 110.927043][ T7187] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 110.927060][ T7187] RSP: 002b:00007f308efb6d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 110.927078][ T7187] RAX: ffffffffffffffda RBX: 000000000000104f RCX: 00007f309094e9a3 [ 110.927094][ T7187] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 110.927106][ T7187] RBP: 00002000000013c2 R08: 00000000ffffffff R09: 0000000000000000 [ 110.927117][ T7187] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008 [ 110.927128][ T7187] R13: 00007f308efb6dec R14: 00007f308efb6df0 R15: 00007ffd58f82ec8 [ 110.927150][ T7187] [ 111.533911][ T3675] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 111.760214][ T7204] loop3: detected capacity change from 0 to 512 [ 111.767913][ T7204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.777161][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 111.777174][ T29] audit: type=1400 audit(1747514999.914:3861): avc: denied { relabelto } for pid=7203 comm="syz.3.1172" name="245" dev="tmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 111.809434][ T29] audit: type=1400 audit(1747514999.914:3862): avc: denied { associate } for pid=7203 comm="syz.3.1172" name="245" dev="tmpfs" ino=1336 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 111.850625][ T7204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.850732][ T7204] ext4 filesystem being mounted at /245 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.890820][ T7204] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.991294][ T7226] loop7: detected capacity change from 0 to 1024 [ 112.020263][ T7226] ext4: Unknown parameter 'dont_hash' [ 112.027463][ T29] audit: type=1326 audit(1747515000.189:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.3.1178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd39db2e969 code=0x0 [ 112.314582][ T7242] __nla_validate_parse: 8 callbacks suppressed [ 112.314601][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 112.365818][ T29] audit: type=1400 audit(1747515000.537:3864): avc: denied { nlmsg_write } for pid=7243 comm="syz.6.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 112.659827][ T3675] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 112.890855][ T7251] loop6: detected capacity change from 0 to 512 [ 112.920124][ T7249] syzkaller0: entered promiscuous mode [ 112.925745][ T7249] syzkaller0: entered allmulticast mode [ 112.933225][ T7251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.959996][ T7251] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.003582][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1185'. [ 113.012780][ T7251] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1185'. [ 113.023689][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1185'. [ 113.033575][ T7251] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1185'. [ 113.042656][ T7251] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1185'. [ 113.073119][ T7265] loop3: detected capacity change from 0 to 1024 [ 113.092565][ T5841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.112593][ T7265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.304150][ T7280] netlink: 5 bytes leftover after parsing attributes in process `gtp'. [ 113.314398][ T7280] 0ªX¹¦D: renamed from gretap0 [ 113.321112][ T7280] 0ªX¹¦D: entered allmulticast mode [ 113.328017][ T7280] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 113.370746][ T7280] loop1: detected capacity change from 0 to 164 [ 113.380365][ T7280] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 113.555028][ T7283] loop6: detected capacity change from 0 to 512 [ 113.568290][ T7283] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 113.578176][ T7283] EXT4-fs (loop6): 1 truncate cleaned up [ 113.585313][ T7283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.613335][ T29] audit: type=1400 audit(1747515001.859:3865): avc: denied { read } for pid=7273 comm="syz.6.1192" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.879481][ T7280] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 113.910651][ T7280] Symlink component flag not implemented [ 113.916340][ T7280] Symlink component flag not implemented [ 113.932728][ T7280] Symlink component flag not implemented (7) [ 113.938822][ T7280] Symlink component flag not implemented (116) [ 113.945290][ T3675] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 114.038425][ T7293] loop1: detected capacity change from 0 to 1024 [ 114.050160][ T5841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.069756][ T7293] ext4: Unknown parameter 'dont_hash' [ 114.117367][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.136020][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.166901][ T7289] tipc: Started in network mode [ 114.171829][ T7289] tipc: Node identity ac14140f, cluster identity 4711 [ 114.193559][ T7289] tipc: New replicast peer: 10.1.1.2 [ 114.199043][ T7289] tipc: Enabled bearer , priority 10 [ 114.505030][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.595206][ T7313] loop3: detected capacity change from 0 to 512 [ 114.619270][ T7313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.632895][ T7313] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.645923][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1202'. [ 114.654978][ T7313] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1202'. [ 114.665509][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1202'. [ 114.689167][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.734700][ T7323] lo speed is unknown, defaulting to 1000 [ 114.740602][ T7323] lo speed is unknown, defaulting to 1000 [ 114.746934][ T7323] lo speed is unknown, defaulting to 1000 [ 114.754079][ T7323] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 114.772020][ T7323] lo speed is unknown, defaulting to 1000 [ 114.778128][ T7323] lo speed is unknown, defaulting to 1000 [ 114.792121][ T7323] lo speed is unknown, defaulting to 1000 [ 114.807844][ T7327] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 114.815827][ T7327] team0: Device macvtap1 is already an upper device of the team interface [ 114.865106][ T7323] lo speed is unknown, defaulting to 1000 [ 114.881606][ T7323] lo speed is unknown, defaulting to 1000 [ 114.896864][ T7323] lo speed is unknown, defaulting to 1000 [ 114.933808][ T7335] loop3: detected capacity change from 0 to 1024 [ 114.942337][ T7335] EXT4-fs: Ignoring removed orlov option [ 114.965146][ T7335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.978985][ T29] audit: type=1400 audit(1747515003.296:3866): avc: denied { getopt } for pid=7318 comm="syz.0.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.034489][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 115.053306][ T7347] loop1: detected capacity change from 0 to 1024 [ 115.060663][ T7347] EXT4-fs: Ignoring removed orlov option [ 115.085774][ T7347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.100594][ T7353] loop7: detected capacity change from 0 to 128 [ 115.109199][ T7353] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.138568][ T7353] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.140883][ T7356] loop6: detected capacity change from 0 to 512 [ 115.160336][ T7356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.173171][ T7356] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.218017][ T5841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.228984][ T7053] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.251813][ T891] tipc: Node number set to 2886997007 [ 115.335731][ T7365] loop6: detected capacity change from 0 to 1024 [ 115.344245][ T7365] ext4: Unknown parameter 'dont_hash' [ 115.458226][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.467159][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.485292][ T7363] tipc: Enabling of bearer rejected, already enabled [ 115.613580][ T7371] siw: device registration error -23 [ 115.743455][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.804504][ T7386] netlink: 'syz.0.1227': attribute type 4 has an invalid length. [ 115.950540][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.962904][ T29] audit: type=1326 audit(1747515004.353:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7393 comm="syz.3.1230" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd39db2e969 code=0x0 [ 116.047104][ T7406] netlink: 'syz.1.1236': attribute type 4 has an invalid length. [ 116.080930][ T29] audit: type=1326 audit(1747515004.469:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959a01e969 code=0x7ffc0000 [ 116.104723][ T29] audit: type=1326 audit(1747515004.469:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959a01e969 code=0x7ffc0000 [ 116.129232][ T3691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 116.149586][ T29] audit: type=1326 audit(1747515004.543:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f959a01e969 code=0x7ffc0000 [ 116.180285][ T7412] loop7: detected capacity change from 0 to 164 [ 116.188073][ T7412] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.723286][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 116.723300][ T29] audit: type=1326 audit(1747515005.156:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 116.762736][ T29] audit: type=1326 audit(1747515005.156:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 116.786274][ T29] audit: type=1326 audit(1747515005.156:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 116.809618][ T29] audit: type=1326 audit(1747515005.156:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 116.833070][ T29] audit: type=1326 audit(1747515005.156:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 116.856646][ T29] audit: type=1326 audit(1747515005.156:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 116.880070][ T29] audit: type=1326 audit(1747515005.156:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 116.903798][ T29] audit: type=1326 audit(1747515005.156:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 116.927632][ T29] audit: type=1326 audit(1747515005.156:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 116.951106][ T29] audit: type=1326 audit(1747515005.156:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809722e969 code=0x7ffc0000 [ 116.977353][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.990596][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.008503][ T7435] tipc: Enabling of bearer rejected, already enabled [ 117.045421][ T7449] loop7: detected capacity change from 0 to 1024 [ 117.053165][ T7449] ext4: Unknown parameter 'dont_hash' [ 117.258928][ T3675] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 117.390982][ T7489] FAULT_INJECTION: forcing a failure. [ 117.390982][ T7489] name failslab, interval 1, probability 0, space 0, times 0 [ 117.403900][ T7489] CPU: 0 UID: 0 PID: 7489 Comm: syz.1.1268 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 117.403936][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 117.403952][ T7489] Call Trace: [ 117.403960][ T7489] [ 117.403970][ T7489] __dump_stack+0x1d/0x30 [ 117.403997][ T7489] dump_stack_lvl+0xe8/0x140 [ 117.404022][ T7489] dump_stack+0x15/0x1b [ 117.404077][ T7489] should_fail_ex+0x265/0x280 [ 117.404122][ T7489] should_failslab+0x8c/0xb0 [ 117.404221][ T7489] kmem_cache_alloc_noprof+0x50/0x310 [ 117.404241][ T7489] ? getname_flags+0x80/0x3b0 [ 117.404272][ T7489] getname_flags+0x80/0x3b0 [ 117.404319][ T7489] io_renameat_prep+0x135/0x1b0 [ 117.404488][ T7489] io_submit_sqes+0x5cb/0x1000 [ 117.404537][ T7489] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 117.404635][ T7489] ? __rcu_read_unlock+0x4f/0x70 [ 117.404689][ T7489] ? get_pid_task+0x96/0xd0 [ 117.404715][ T7489] ? proc_fail_nth_write+0x12d/0x160 [ 117.404749][ T7489] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 117.404781][ T7489] ? vfs_write+0x75e/0x8d0 [ 117.404812][ T7489] ? kmem_cache_free+0xdd/0x2f0 [ 117.404837][ T7489] ? putname+0xda/0x100 [ 117.404877][ T7489] __x64_sys_io_uring_enter+0x78/0x90 [ 117.404978][ T7489] x64_sys_call+0x28c8/0x2fb0 [ 117.405003][ T7489] do_syscall_64+0xd0/0x1a0 [ 117.405110][ T7489] ? clear_bhb_loop+0x40/0x90 [ 117.405211][ T7489] ? clear_bhb_loop+0x40/0x90 [ 117.405237][ T7489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.405261][ T7489] RIP: 0033:0x7f959a01e969 [ 117.405278][ T7489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.405306][ T7489] RSP: 002b:00007f9598687038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 117.405371][ T7489] RAX: ffffffffffffffda RBX: 00007f959a245fa0 RCX: 00007f959a01e969 [ 117.405386][ T7489] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000006 [ 117.405400][ T7489] RBP: 00007f9598687090 R08: 0000000000000000 R09: 0000000000000000 [ 117.405469][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.405482][ T7489] R13: 0000000000000000 R14: 00007f959a245fa0 R15: 00007ffe332f3d58 [ 117.405504][ T7489] [ 117.648489][ T7492] __nla_validate_parse: 10 callbacks suppressed [ 117.648507][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1269'. [ 117.663944][ T7492] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1269'. [ 117.676441][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1269'. [ 117.685701][ T7492] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1269'. [ 117.694911][ T7492] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1269'. [ 117.705178][ T7494] netlink: 'syz.1.1270': attribute type 4 has an invalid length. [ 117.869001][ T7511] loop6: detected capacity change from 0 to 1024 [ 117.877791][ T7511] EXT4-fs: Ignoring removed orlov option [ 117.894496][ T7511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.942143][ T7514] loop7: detected capacity change from 0 to 1024 [ 118.011215][ T7514] EXT4-fs: Ignoring removed orlov option [ 118.036974][ T7514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.237850][ T7525] ================================================================== [ 118.245990][ T7525] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 118.254274][ T7525] [ 118.256621][ T7525] write to 0xffff888106e17c54 of 4 bytes by task 7514 on cpu 1: [ 118.264268][ T7525] xas_set_mark+0x12b/0x140 [ 118.268813][ T7525] __folio_start_writeback+0x1dd/0x430 [ 118.274295][ T7525] ext4_bio_write_folio+0x590/0x9d0 [ 118.279530][ T7525] mpage_process_page_bufs+0x46c/0x5b0 [ 118.285025][ T7525] mpage_prepare_extent_to_map+0x775/0xb80 [ 118.290882][ T7525] ext4_do_writepages+0xa25/0x2270 [ 118.296034][ T7525] ext4_writepages+0x176/0x300 [ 118.300836][ T7525] do_writepages+0x1d5/0x480 [ 118.305460][ T7525] file_write_and_wait_range+0x156/0x2c0 [ 118.311133][ T7525] generic_buffers_fsync_noflush+0x45/0x120 [ 118.317070][ T7525] ext4_sync_file+0x1ab/0x690 [ 118.321800][ T7525] vfs_fsync_range+0x10d/0x130 [ 118.326596][ T7525] ext4_buffered_write_iter+0x34f/0x3c0 [ 118.332173][ T7525] ext4_file_write_iter+0xdbf/0xf00 [ 118.337397][ T7525] iter_file_splice_write+0x5ef/0x970 [ 118.342780][ T7525] direct_splice_actor+0x156/0x2a0 [ 118.347905][ T7525] splice_direct_to_actor+0x312/0x680 [ 118.353295][ T7525] do_splice_direct+0xda/0x150 [ 118.358066][ T7525] do_sendfile+0x380/0x640 [ 118.362487][ T7525] __x64_sys_sendfile64+0x105/0x150 [ 118.367733][ T7525] x64_sys_call+0xb39/0x2fb0 [ 118.372337][ T7525] do_syscall_64+0xd0/0x1a0 [ 118.376851][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.382750][ T7525] [ 118.385080][ T7525] read to 0xffff888106e17c54 of 4 bytes by task 7525 on cpu 0: [ 118.392626][ T7525] filemap_write_and_wait_range+0xfc/0x340 [ 118.398446][ T7525] filemap_invalidate_pages+0xa4/0x1a0 [ 118.403921][ T7525] kiocb_invalidate_pages+0x6e/0x80 [ 118.409139][ T7525] __iomap_dio_rw+0x5d4/0x1250 [ 118.413916][ T7525] iomap_dio_rw+0x40/0x90 [ 118.418261][ T7525] ext4_file_write_iter+0xad9/0xf00 [ 118.423475][ T7525] iter_file_splice_write+0x5ef/0x970 [ 118.428859][ T7525] direct_splice_actor+0x156/0x2a0 [ 118.433984][ T7525] splice_direct_to_actor+0x312/0x680 [ 118.439463][ T7525] do_splice_direct+0xda/0x150 [ 118.444239][ T7525] do_sendfile+0x380/0x640 [ 118.448669][ T7525] __x64_sys_sendfile64+0x105/0x150 [ 118.453887][ T7525] x64_sys_call+0xb39/0x2fb0 [ 118.458488][ T7525] do_syscall_64+0xd0/0x1a0 [ 118.463004][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.468914][ T7525] [ 118.471245][ T7525] value changed: 0x0a000021 -> 0x04000021 [ 118.476986][ T7525] [ 118.479307][ T7525] Reported by Kernel Concurrency Sanitizer on: [ 118.485458][ T7525] CPU: 0 UID: 0 PID: 7525 Comm: syz.7.1278 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 118.497878][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 118.507998][ T7525] ================================================================== [ 118.547047][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.557858][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.577842][ T7524] tipc: Enabling of bearer rejected, already enabled [ 118.630913][ T3691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 118.744026][ T5841] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.785956][ T7053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.720325][ T3673] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 120.780344][ T3691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 121.831756][ T3673] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 122.882576][ T3673] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.924778][ T3691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 124.985304][ T3644] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 126.027810][ T3644] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.069970][ T3691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 128.121212][ T3644] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!