last executing test programs: 29.316544637s ago: executing program 3 (id=2506): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x40, 0x0, 0x3bd}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = dup(0xffffffffffffffff) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r0, r3, 0x0) 29.156364348s ago: executing program 3 (id=2509): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 29.104560408s ago: executing program 3 (id=2510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$eJzs3c9LVFEUAOCjM/5qMxJBEEEDEbQaVGhvRIEkFckQRkhjjiGOCAlCLdRWQas2LVu6M4JatKv/IWjTJtpEy9y1CF/ok3HMMTVyJpzv27zDu+fcd++V956zmDt3T89MT8zOTa6ufo3u7rbIDt5fS5K26I32yERqKQCAo+RHksT3JNXssQAAjeH9DwCtZ6/3f0d6uNHgYQEAh+jvP/8/H333uVQevLCP1KSrGn4aO/gYAYB/a2T09tW19+d6huLNs4iZJ/PF+WJ6TNsvTsZUVKIcfZGLnxFJVRpfGRq+3Jdf1xNRnFncrF+cL2a21/dHLnojbl3bWd+fT22v74hjtfUDkYsT9a8/ULe+M86frakvRC4+3IvZqMTE+r8kNfUL/fn8pevDv9V3beTFcqapfx8AAAAAAAAAAAAAAAAAAAAAAI6mQr6qt97+PYXCbu1p/f73B9ran+fpRn02TmXjcXNnDwAAAAAAAAAAAAAAAAAAAP+HuYePpkuVSvlBNRi/OXV8+5m9grY6TZnN/g/ST8sE6wtziJc4ExGHPYvXK+WPy2N3Rpq/mA0M6q/qq6YPbPwPOe0RsRGcfDFYervw5dvOnFiquZez6X1bqqTHztqHRb7BDycAAAAAAAAAAAAAAAAAAGgxW18D3i0jaeyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAJtn7//8BBZ/XMSk/a2S7JaePLps4TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDW9isAAP//e+Wozg==") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) 28.961042079s ago: executing program 3 (id=2511): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000bc0)={0x4, 0x9, "feed4f", 0xff, 0x6}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='mm_page_free\x00', r3, 0x0, 0x2}, 0x18) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r6 = dup2(r5, r4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000050000005a2f020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000044700000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x1, 0x8001, 0x3a, @remote, @loopback, 0x20, 0x8020, 0x6, 0x1}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={r0, 0x20, &(0x7f0000000b40)={&(0x7f0000000940)=""/248, 0xf8, 0x0, &(0x7f0000000a40)=""/207, 0xcf}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000c00)='f2fs_direct_IO_enter\x00', r10}, 0x18) ioperm(0x8, 0x9, 0x5a) io_submit(0x0, 0x0, &(0x7f0000000d40)) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r13, @ANYBLOB="08000500", @ANYRES32=r13], 0x6c}, 0x1, 0xba01}, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40041) 28.699215421s ago: executing program 3 (id=2513): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 28.038822784s ago: executing program 3 (id=2521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) 28.038366984s ago: executing program 32 (id=2521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) 27.474533047s ago: executing program 0 (id=2531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0x34) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close(r0) 27.433900527s ago: executing program 0 (id=2533): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001410) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0x2000000c) close_range(r0, 0xffffffffffffffff, 0x0) 27.269932308s ago: executing program 0 (id=2536): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = timerfd_create(0x9, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) 27.196095998s ago: executing program 0 (id=2538): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) 27.052749379s ago: executing program 0 (id=2542): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f0000000000)=0x401, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1fffffffffffff89, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$P9_RLERRORu(r7, 0x0, 0x18) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x5, @multicast2}, 0x10, 0x0}, 0x20000040) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_io_uring_setup(0x2856, &(0x7f0000000940)={0x0, 0xffffffff, 0x400, 0x4, 0x169}, &(0x7f00000009c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r10, 0xf, &(0x7f0000001c80)={0x1, 0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000680)=""/128, 0x80}], 0x0}, 0x20) r11 = dup2(r3, r3) ioctl$int_in(r11, 0x73, &(0x7f0000000080)=0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000b, 0x2010, r0, 0x32e4b000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r12 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2000100000001, 0x200) accept4$packet(r12, 0x0, &(0x7f00000000c0), 0x80000) 26.369749853s ago: executing program 0 (id=2551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r4 = gettid() sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000", @ANYRES32=r4], 0x60}, 0x0) 26.334586172s ago: executing program 33 (id=2551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r4 = gettid() sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000", @ANYRES32=r4], 0x60}, 0x0) 2.816711085s ago: executing program 6 (id=2923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket(0x2, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(0x0, 0x14927e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0, r5}, 0x18) 2.434683657s ago: executing program 4 (id=2928): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES16=0xffffffffffffffff, @ANYBLOB="0100000000000000000001"], 0x24}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001d00"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$rxrpc(0x21, 0x2, 0x0) r3 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x8}, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x11, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x5, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x800448d2, 0x0) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000250000010e00fcff6d657464657673696d004c8a544af8e279783f0f0002006e657464657673696d", @ANYBLOB="fca1a1b5b54c1dfef2bdbb89394023d258a4fae3b3ba23985b320288caaef00d7861f27a82d11f001a559668fb2d99342e4445259815793960ac8d96d77c5ee65f5f8208d21f6213838b4c9a1d15201813db0fbe879181bf7c94202ff18222da9820f756820774d4b4778f629181160e72cf8d0396afe74912397e7f6f588739cff0ad62267f98ca50dc72b7854e45378de24fd429f7324e670bc09672adddbff70e9398f7da0c427fa371dc2d0cbe9f20d868caa1", @ANYRESDEC=0x0], 0x3c}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200442, 0x0) 2.310914858s ago: executing program 4 (id=2929): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x26) open(&(0x7f0000000300)='./file2\x00', 0x4000, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r4, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/85, 0x69}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000bb7752f8ea0ed02efa00"/37], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.99517408s ago: executing program 5 (id=2933): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0x34) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001f00)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a26c7670568982b4e020f698393a1587aee89eb5603111ced3a0f3881f9c24561f1b2607995daa56f151905ea23c22624c12533d3984e835a3c61a7a9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0c884625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130bd030000c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2369149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300005d2c4df17c91e5451f1e44467a1ed30480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf607aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8241ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcfffffffffaffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda420d3e53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fd73c294290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd96058e7bf5b51cce33bd30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c9b2c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbd008fc1be8ea216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d253118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de40aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b9314dcdfadafff7ca3243a9c40a67ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b368a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e35fd7834f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c674e6e549227d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb07005dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68ac3c64458943fc59c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872976b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564fdab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfd1016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e7cdd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c6b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4040068ae2676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e9f367f2eb36eed56c037991d4026f8c743c1360a29d8177d1250ff303e207f02c33b6009abb9948d7e787c863998f0a5f1b3761e8006c8095dd0adb892e5f020a1e1032f3b4ad237e9573faa2bece611b2af8de93c3157af2a1797f696493dcda51b9c63f31f85f82689d23c1bb1b2027f6583e5cbbedbfd0dec962ffcf5c348b2f13c9d1418e684183480cb2ce5dae94734a999dd35a6a0f459b941d0c4e344baf15e63f581e9ead164a550d5d78864b0218ac8a33ee3433de56a991c72a046386223ff52c139ed3ebed412c78112524ee6b3385b2954cc89e2635d4d62d51b18b196716032e9fd4d8a5cefcd8c36125bfb92efc658fb0b7d2e933f9957fc78dc15eb3e0fc77cb84177e41db5a65c7dd3a4b3431d2f52c4c3971a83b12e399b3e91281fa1200591430fcd74269f3f14332b175225120432b0babc737be65257fbc833c096fcb8b1d5731e6f95e8259bc1aa73e75132b28aedf5bb34f5c33c319b4e25b951189d5c03815e0259448ed9c51e6e6c371e387ad82734990a37071c6225a2116db67b503f48460430b6fe6c57eca9b4ddd5c699d1883891f047ac9792eeca5f9465bfe4d6e5faf78d81b376415935d145151a47b23af15d61db53a5afcf0a792afa5e43e2f742449c1a4cbdad69dc5c1013aa36fba2013ffb4b65216618222469ab0a63d141cd11b31caadeea6e9ee58854684350bffc86f09fc563b1a68c03b828ab51fe2e36594ab83cb5a9d4417231b0988bc38b073a88054e8a066b89e24e5d651d891acfd13518f3538c9c6c91bba247ff3a5fd41934a932c7b23bfb7ac9f1a9bf72243e56508ab8e31d99287ad5bb0795e48598b4b752cf801e29d3919ae547b51392bd9bd74b8e2dd5f384b5d721d7a877227797807119746ba65f42c291e3510d80b6c0bcfad2e8bdc51f07c9916f2f9364381b633518d0fc14834aaa5c2302b6040cdc0e09626f3f86cd2eba4736d4c6e0fe8f778851f5484a179fc4c430258f06bf2c08c11a36ff4dd4bd8ff174feaff7c29154d751fbb7c122d515541a9c8421536e032f8fe5170925c83c91600b7e3d9827bf984d30a3193e1b2c3bda2494c67686a7b308ab19d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='page_pool_state_release\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close(r0) 1.667035092s ago: executing program 6 (id=2937): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000002440)={@val={0x0, 0x86dd}, @val={0x2, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@tipc_packet={0xe, 0x6, "af8c49", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x4, 0x0, 0x8, 0x1, 0x0, 0x2, 0x66}, @dstopts={0x33, 0x1ea, '\x00', [@pad1, @ra={0x5, 0x2, 0x6a03}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0x3, [0xfffffffffffffff5, 0x8, 0x6]}}, @generic={0xc2, 0xf0e, "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"}, @pad1, @pad1]}, @routing={0x84}], @payload_named={{{{{0x28, 0x0, 0x1, 0x0, 0x1, 0xa, 0x2, 0x2, 0x5, 0x0, 0x2, 0x3, 0x5, 0x2, 0x4, 0x1, 0x2, 0x4e24, 0x4e22}, 0x0, 0x1ff}, 0x0, 0x4}}}}}}}, 0xfce) 1.616212362s ago: executing program 1 (id=2938): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000f00000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = timerfd_create(0x9, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) 1.574324062s ago: executing program 5 (id=2939): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 1.573556692s ago: executing program 1 (id=2940): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40c2c0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000008001e0000010000000000e33820d216ab2734e116b3dd34f26511028ac12b68e0a0eb3cf9b501ae69a7660a75978e9b3cd862381dc81143e15d863c4f66e19bf87e", @ANYRES32=r1, @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0xed7ddb3934ee7db6}, 0x4080) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf256800000008000300", @ANYRES32=r1, @ANYBLOB="0ca8909bda143db7f5000000"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x20000090) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x27, 0x4b6, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="b1e298031e03bac8fbffb14005000000000000000007c933313d44cb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="270e0000000000000200"], 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYRES8=r1, @ANYRES32=r0], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42102, 0x55) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f00000005c0)='./file0\x00', 0x800, 0x200, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r9, 0x0, r10, r11, 0x100) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)={0x6c, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x9004, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}]}]}, 0x37}, 0x1, 0x0, 0x0, 0x851}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.551197072s ago: executing program 5 (id=2941): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f0000000000)=0x401, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1fffffffffffff89, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$P9_RLERRORu(r7, 0x0, 0x18) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x5, @multicast2}, 0x10, 0x0}, 0x20000040) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_io_uring_setup(0x2856, &(0x7f0000000940)={0x0, 0xffffffff, 0x400, 0x4, 0x169}, &(0x7f00000009c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r10, 0xf, &(0x7f0000001c80)={0x1, 0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000680)=""/128, 0x80}], 0x0}, 0x20) r11 = dup2(r3, r3) ioctl$int_in(r11, 0x73, &(0x7f0000000080)=0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000b, 0x2010, r0, 0x32e4b000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r12 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2000100000001, 0x200) accept4$packet(r12, 0x0, &(0x7f00000000c0), 0x80000) 1.469480823s ago: executing program 1 (id=2942): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0b00000005000000022000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f00000002c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0xa, 0x40000000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3d8, 0x0, r4}, &(0x7f0000ff0000), &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 1.468873783s ago: executing program 6 (id=2943): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRES8, @ANYBLOB="9c50d4489dccefa4c722124155842b4723a31b02c4d91dc845bf6021bd1cb83e806dc38ad068104076f6ab1beeb510353732062a85d68438c2888b900d33026902270e8a189ee8047dc216c567e8ba980fefa876ce90e250f9e4b71272fcad13e1fa481d079c6bc69e3a0e45aa14a3e56346495e4c0bc937e28370819e09ec2fe87ee00745bd528add8e50e2f45bf0", @ANYRES64, @ANYBLOB="22b3cc1c69fe22e637e74a4ea4f2b2290c1f3d03ff657d3bdf234ce56a507b042c722230ac4cfd8b311126a051a11b0a38c42a7f32f3057c90ea84f24e1d9af362fda839a0d7b776a59f1e3dae6460faf2059a3e735a13d79e968048674416a81c28700ea71fa50a9c622a7d1328fa011c5f821e723e1c3529453876ff202138038d0caf70011482dae5bd"], 0xfd, 0x1277, &(0x7f0000002880)="$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") socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x36e3, &(0x7f00000001c0)={0x0, 0xbceb, 0x0, 0x0, 0x13d}, 0x0, &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) getpid() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000500), 0x4) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) 1.467602443s ago: executing program 4 (id=2944): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb", 0xd}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x2bd7, &(0x7f0000000580)={0x0, 0x6a93, 0x0, 0x0, 0x2b5}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000047c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) timer_create(0x7, &(0x7f0000000680)={0x0, 0x5, 0x1, @thr={0x0, 0x0}}, &(0x7f00000006c0)=0x0) timer_settime(r5, 0x1, &(0x7f0000000700)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000740)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000001000000000000c2a00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000950420628e296defc36881772cbeac2d6df3ed4b4a51bfa61f550f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='afs_send_data\x00'}, 0x18) io_uring_enter(r2, 0x1849, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000440)='mm_page_alloc\x00', r7, 0x0, 0x7}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r9 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf3, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 1.194934834s ago: executing program 6 (id=2946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0xfffff399, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0xea}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c010000100001000000000000000000fe880000000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000001100000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window={0x3, 0x0, 0xfffe}, @window={0x3, 0x0, 0x4}], 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x34) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "9d0bd79eb31fc879", "0d07080d004fcfabd5e8ffff1a8600", "aba200fe", "865703b7e43b34e4"}, 0x28) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1.194221444s ago: executing program 5 (id=2947): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r3) accept4(r0, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000e27204cb01131a8e0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000005480f867e5b4593bd2f1f9009a818f5be8293236bc5afb3e4862c764f822c09e924867908520dd94ed1f012698ae471e7b39207a0ab79643b1e5ad7bbf5e185c0c2b0f778bc0f90250e43979c05c5a5d83be7e98da3948fe64788cbfb15ae411eff991b32f09ae9c8d5a5f3a2df4e0dbd8c08f3c48", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdde, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x2, 0x53, &(0x7f0000000300)=""/83}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000080)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r8 = syz_open_pts(r4, 0x0) r9 = dup3(r8, r4, 0x0) read$watch_queue(r9, &(0x7f0000000e00)=""/4096, 0x1000) readv(r9, &(0x7f0000000740)=[{&(0x7f0000000100)=""/156, 0x9c}], 0x1) 1.163300994s ago: executing program 2 (id=2949): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x11dc0, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "57b519f9c9a5a3a1c53ac8dcaa456fc53a9351ab07d33c58b244f306dd61e53cf4a3f358968cc44f455ec4b9d42e49ab58ef1eba67d61b8c7167b978fdde608c"}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x85c}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 639.403497ms ago: executing program 1 (id=2950): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 620.377357ms ago: executing program 1 (id=2951): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0xec0}, {0x0}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="7dd3dae4"], 0x60}, 0x0) 599.707667ms ago: executing program 1 (id=2952): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r3) accept4(r0, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000e27204cb01131a8e0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdde, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x2, 0x53, &(0x7f0000000300)=""/83}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000080)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r8 = syz_open_pts(r4, 0x0) r9 = dup3(r8, r4, 0x0) read$watch_queue(r9, &(0x7f0000000e00)=""/4096, 0x1000) readv(r9, &(0x7f0000000740)=[{&(0x7f0000000100)=""/156, 0x9c}], 0x1) 581.474547ms ago: executing program 4 (id=2953): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="7dd3dae4"], 0x60}, 0x0) 554.970487ms ago: executing program 4 (id=2954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000040a0300000000000000000000000008090001"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\n\x00\x00\x00B\x00\x00\x00@', @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r2}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) connect$unix(r3, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_alloc\x00'}, 0x54) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 500.773757ms ago: executing program 4 (id=2955): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xfffffbff}}, './bus\x00'}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x8, 0x6}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000000000080000000000"], 0x50) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r9, @ANYBLOB="10002abd7000fddbdf2516000000100007800c00040009000000000000001c00028008000200daf8000008000100faffffff080001000400000064000680550003002b25222c3bf760388c9e21d6fda5dc2c2cbc5d4214b0352ec92bf1300035416f081c30dc8895feeb3c6f9f993ac6a6eb050a43108e779cc58d3e80cce5627e649ea664435fae1069000000080001000008000049135c1ea1f4b6c36347cfdc0ee03aad"], 0xa4}, 0x1, 0x0, 0x0, 0x11}, 0xc040) fcntl$setstatus(r5, 0x4, 0x6000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000700ac1e00010e0001004e4c424c5f4d474d5400000008000200000000001400050000000000000000000000000000000001"], 0x48}}, 0x0) recvmmsg(r6, &(0x7f0000002280)=[{{&(0x7f0000000440)=@isdn, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/24, 0x18}, {&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/124, 0x7c}, {&(0x7f0000000680)=""/159, 0x9f}, {&(0x7f0000000740)=""/243, 0xf3}], 0x5, &(0x7f00000008c0)=""/101, 0x65}, 0x1}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/51, 0x33}, {&(0x7f0000000a40)=""/230, 0xe6}, {&(0x7f0000000980)=""/13, 0xd}], 0x3, &(0x7f0000000b80)=""/212, 0xd4}, 0x7}, {{&(0x7f0000000c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000d00)=""/159, 0x9f}, {&(0x7f0000000dc0)=""/103, 0x67}, {&(0x7f0000000e40)=""/237, 0xed}, {&(0x7f0000000f40)=""/235, 0xeb}, {&(0x7f0000001040)=""/239, 0xef}, {&(0x7f0000001140)=""/186, 0xba}], 0x6, &(0x7f0000001280)=""/4096, 0x1000}, 0x7}], 0x3, 0x7f1958f7e5b98b29, &(0x7f0000002340)) unshare(0x8000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet_sctp(0x2, 0x0, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 467.617908ms ago: executing program 6 (id=2956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000040a0300000000000000000000000008090001"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\n\x00\x00\x00B\x00\x00\x00@', @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r2}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$unix(0x1, 0x1, 0x0) 386.936928ms ago: executing program 6 (id=2957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000540)=0x1, 0x4) r6 = fsmount(r3, 0x0, 0x8) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r6, &(0x7f00000003c0)='./file0\x00') readlinkat(r6, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync') 381.345338ms ago: executing program 5 (id=2958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000540)=0x1, 0x4) r6 = fsmount(r3, 0x0, 0x8) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r6, &(0x7f00000003c0)='./file0\x00') readlinkat(r6, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync') 310.103989ms ago: executing program 2 (id=2959): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001410) ioctl$TUNSETOFFLOAD(r3, 0x40047451, 0x2000000c) close_range(r0, 0xffffffffffffffff, 0x0) 228.972109ms ago: executing program 2 (id=2960): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x2000140d) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x421c50cf285e658a) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x200, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$eJzs3M9rHFUcAPDvzCb93SbWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKBqEVk+R2Z1JN9vdZNNsdmv384Fp39t5M/O+O+/tvJm3mwD61kj2TxKxKyJ+i4ihWnZlgZHafzcXL5X/WbxUTmJp6a0/k2q5G4uXykXRYrudeWY0jUg/SfKDxNb63c5duHhmqlKZOZ/nx+fPvjc+d+His6fPTp2aOTVzbvLYsaNHJl54fvK5tuJI1lifxXXjwIezB/e/9s7V18snrr7707fZNrvy9fVxdMpIFvhfS1WN657o9MF6bHddOhnoYUVYl1JEZKdrsNr/h6IUt07eULz6cU8rB2yq7Nq0tfXqhSXgHpbE2mX+7kZFgC4rLvTZ/W+xdGnocVe4/lLtBiiL+2a+1NYMRJqXGWy4v+2kkYg4sfDvV9kSm/QcAgCg3mflL4/HM83Gf2k8WFduTz6HMhwR90XE3oi4PyL2RcQDEVnZxiFlW0Ya8rePf9JrdxhaW7Lx34v53NbK8V8x+ovhUp7bXY1/MDl5ujJzOH9PRmNwa5afWOUY37/y6+et1tWP/7IlO34xFszrcW2g4QHd9NT8VHVQ2gHXP4o4MNAs/mR5JiCJiP0RcWB9u95TJE4/9c3B7QebF1o7/lV0YJ5p6euIJ2vnfyEa4i8kq89Pjm+Lyszh8aJV3O7nX6682er4LeLfsvHI2pOd/x0r239jkeGkfr52bv3HuPL7py3vae60/W9J3q6el+KN+mBqfv78RMSW5Hg1v+L1yVvbFvmifBb/6KHm/X9vvk12nIciImvCD0fEIxHxaF73xyLi8Yg4tEr8P76cJ5q01w21/w7I4p9u+vm33P4bzv/6E6UzP3xX7GzbuuPPzv/Ramo0f6X6+beGdiu40fcPAAAA/g/S6nfgk3RsOZ2mY2O17/Dvix1pZXZu/umTs++fm659V344BtPiSddQ3fPQiWQh32MtP5k/Ky7WH8mfG39R2l7Nj5VnK9M9jh363c4W/T/zR6nXtQM2XbN5tMmuTUEBvdTY/9OV2ctvdLMyQFf5vTb0rzX6f9qtegDd5/oP/atZ/7/ckDcXAPcm13/oX/o/9C/9H/qX/g99aSO/65fo50Sklcr0tojVCxd/EOjuqLNE+4lefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD///xQ9VA=") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x40}, {0x6}]}) write$ppp(r2, &(0x7f00000010c0)="1e00", 0x2) syz_io_uring_setup(0x6acb, &(0x7f0000000000)={0x0, 0x0, 0x80, 0xfffffffe, 0x1d3}, &(0x7f00000009c0), &(0x7f00000003c0)) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 40.33311ms ago: executing program 2 (id=2961): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 17.95699ms ago: executing program 2 (id=2962): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = timerfd_create(0x9, 0x0) timerfd_gettime(r1, 0x0) 0s ago: executing program 2 (id=2963): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Unable to read rock-ridge attributes [ 148.237276][T10234] ebtables: ebtables: counters copy to user failed while replacing table [ 148.388623][T10244] loop1: detected capacity change from 0 to 164 [ 148.400152][T10244] Unable to read rock-ridge attributes [ 148.437249][T10242] Unable to read rock-ridge attributes [ 148.638765][T10252] loop4: detected capacity change from 0 to 8192 [ 148.645613][T10252] vfat: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615PH"AU+G#E`!>mÊh@v572*ք8ˆ3i'}g躘vΐPrHkƞ:EcFI^L 7p /~ERݎP["' [ 148.708191][T10254] FAULT_INJECTION: forcing a failure. [ 148.708191][T10254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.721406][T10254] CPU: 1 UID: 0 PID: 10254 Comm: syz.4.2430 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 148.731842][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 148.741898][T10254] Call Trace: [ 148.745255][T10254] [ 148.748204][T10254] dump_stack_lvl+0xf2/0x150 [ 148.752913][T10254] dump_stack+0x15/0x20 [ 148.757102][T10254] should_fail_ex+0x223/0x230 [ 148.761879][T10254] should_fail+0xb/0x10 [ 148.766234][T10254] should_fail_usercopy+0x1a/0x20 [ 148.771278][T10254] _copy_from_user+0x1e/0xb0 [ 148.775902][T10254] copy_msghdr_from_user+0x54/0x2a0 [ 148.781137][T10254] ? __fget_files+0x17c/0x1c0 [ 148.785859][T10254] __sys_sendmsg+0x13e/0x230 [ 148.790474][T10254] __x64_sys_sendmsg+0x46/0x50 [ 148.795330][T10254] x64_sys_call+0x2734/0x2dc0 [ 148.800016][T10254] do_syscall_64+0xc9/0x1c0 [ 148.804537][T10254] ? clear_bhb_loop+0x55/0xb0 [ 148.809261][T10254] ? clear_bhb_loop+0x55/0xb0 [ 148.813964][T10254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.819888][T10254] RIP: 0033:0x7f5bfd09e819 [ 148.824392][T10254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.844064][T10254] RSP: 002b:00007f5bfb717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.852492][T10254] RAX: ffffffffffffffda RBX: 00007f5bfd255fa0 RCX: 00007f5bfd09e819 [ 148.860470][T10254] RDX: 000000002400c080 RSI: 0000000020000280 RDI: 0000000000000003 [ 148.868453][T10254] RBP: 00007f5bfb717090 R08: 0000000000000000 R09: 0000000000000000 [ 148.876502][T10254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.884474][T10254] R13: 0000000000000000 R14: 00007f5bfd255fa0 R15: 00007fffa5d34118 [ 148.892646][T10254] [ 148.975771][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2434'. [ 149.057369][T10275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2440'. [ 149.107637][T10279] loop0: detected capacity change from 0 to 256 [ 149.122644][T10279] FAT-fs (loop0): Directory bread(block 64) failed [ 149.129402][T10279] FAT-fs (loop0): Directory bread(block 65) failed [ 149.131193][T10281] FAULT_INJECTION: forcing a failure. [ 149.131193][T10281] name failslab, interval 1, probability 0, space 0, times 0 [ 149.136206][T10279] FAT-fs (loop0): Directory bread(block 66) failed [ 149.148609][T10281] CPU: 1 UID: 0 PID: 10281 Comm: syz.2.2442 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 149.148642][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 149.148657][T10281] Call Trace: [ 149.158547][T10283] SELinux: policydb version 0 does not match my version range 15-33 [ 149.165554][T10281] [ 149.165568][T10281] dump_stack_lvl+0xf2/0x150 [ 149.165606][T10281] dump_stack+0x15/0x20 [ 149.175795][T10279] FAT-fs (loop0): Directory bread(block 67) failed [ 149.178934][T10281] should_fail_ex+0x223/0x230 [ 149.187864][T10283] SELinux: failed to load policy [ 149.189965][T10281] ? shmem_alloc_inode+0x34/0x50 [ 149.194845][T10279] FAT-fs (loop0): Directory bread(block 68) failed [ 149.198746][T10281] should_failslab+0x8f/0xb0 [ 149.214168][T10279] FAT-fs (loop0): Directory bread(block 69) failed [ 149.214992][T10281] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 149.226678][T10279] FAT-fs (loop0): Directory bread(block 70) failed [ 149.231051][T10281] shmem_alloc_inode+0x34/0x50 [ 149.254864][T10281] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 149.260350][T10281] alloc_inode+0x3c/0x160 [ 149.264708][T10281] new_inode+0x1e/0x100 [ 149.268960][T10281] shmem_get_inode+0x24e/0x730 [ 149.273808][T10281] __shmem_file_setup+0x127/0x1f0 [ 149.278950][T10281] shmem_file_setup+0x3b/0x50 [ 149.283654][T10281] __se_sys_memfd_create+0x31d/0x5c0 [ 149.288983][T10281] __x64_sys_memfd_create+0x31/0x40 [ 149.294219][T10281] x64_sys_call+0x2d4c/0x2dc0 [ 149.298946][T10281] do_syscall_64+0xc9/0x1c0 [ 149.303523][T10281] ? clear_bhb_loop+0x55/0xb0 [ 149.308338][T10281] ? clear_bhb_loop+0x55/0xb0 [ 149.313034][T10281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.318942][T10281] RIP: 0033:0x7f903cfee819 [ 149.323368][T10281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.342986][T10281] RSP: 002b:00007f903b660e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 149.351408][T10281] RAX: ffffffffffffffda RBX: 0000000000000769 RCX: 00007f903cfee819 [ 149.359395][T10281] RDX: 00007f903b660ef0 RSI: 0000000000000000 RDI: 00007f903d061fca [ 149.367481][T10281] RBP: 0000000020000fc0 R08: 00007f903b660bb7 R09: 00007f903b660e40 [ 149.375494][T10281] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000240 [ 149.383510][T10281] R13: 00007f903b660ef0 R14: 00007f903b660eb0 R15: 0000000020000080 [ 149.391502][T10281] [ 149.396969][T10279] FAT-fs (loop0): Directory bread(block 71) failed [ 149.414231][T10279] FAT-fs (loop0): Directory bread(block 72) failed [ 149.439774][T10279] FAT-fs (loop0): Directory bread(block 73) failed [ 149.443347][T10289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2446'. [ 149.466614][T10289] loop2: detected capacity change from 0 to 1024 [ 149.479340][T10279] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.497801][T10289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.516596][T10289] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 149.539656][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2449'. [ 149.579737][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2450'. [ 149.583689][T10289] ext4: Unknown parameter '0xffffffffffffffff' [ 149.606295][T10289] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 149.621916][T10289] syz.2.2446: attempt to access beyond end of device [ 149.621916][T10289] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 149.704295][T10314] loop0: detected capacity change from 0 to 512 [ 149.718145][T10314] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.732566][T10318] loop2: detected capacity change from 0 to 512 [ 149.739493][T10319] loop1: detected capacity change from 0 to 164 [ 149.756023][T10318] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.755991][T10319] Unable to read rock-ridge attributes [ 149.772943][T10319] Unable to read rock-ridge attributes [ 149.778001][T10318] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.801410][T10323] loop0: detected capacity change from 0 to 512 [ 149.817166][T10323] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 149.830894][T10323] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2457: corrupted in-inode xattr: e_value size too large [ 149.855217][T10323] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2457: couldn't read orphan inode 15 (err -117) [ 149.914087][T10332] loop2: detected capacity change from 0 to 256 [ 149.942548][T10332] FAT-fs (loop2): Directory bread(block 64) failed [ 149.949514][T10332] FAT-fs (loop2): Directory bread(block 65) failed [ 149.961617][T10332] FAT-fs (loop2): Directory bread(block 66) failed [ 149.969788][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2463'. [ 149.975957][T10332] FAT-fs (loop2): Directory bread(block 67) failed [ 149.986412][T10332] FAT-fs (loop2): Directory bread(block 68) failed [ 149.992987][T10332] FAT-fs (loop2): Directory bread(block 69) failed [ 149.999587][T10332] FAT-fs (loop2): Directory bread(block 70) failed [ 150.004463][T10340] FAULT_INJECTION: forcing a failure. [ 150.004463][T10340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.007896][T10332] FAT-fs (loop2): Directory bread(block 71) failed [ 150.019212][T10340] CPU: 0 UID: 0 PID: 10340 Comm: syz.0.2464 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 150.019239][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 150.025816][T10332] FAT-fs (loop2): Directory bread(block 72) failed [ 150.036111][T10340] Call Trace: [ 150.036162][T10340] [ 150.036170][T10340] dump_stack_lvl+0xf2/0x150 [ 150.036202][T10340] dump_stack+0x15/0x20 [ 150.046336][T10332] FAT-fs (loop2): Directory bread(block 73) failed [ 150.052737][T10340] should_fail_ex+0x223/0x230 [ 150.068835][T10332] xt_TPROXY: Can be used only with -p tcp or -p udp [ 150.074185][T10340] should_fail+0xb/0x10 [ 150.089752][T10340] should_fail_usercopy+0x1a/0x20 [ 150.094808][T10340] _copy_from_user+0x1e/0xb0 [ 150.099422][T10340] copy_msghdr_from_user+0x54/0x2a0 [ 150.104635][T10340] ? __fget_files+0x17c/0x1c0 [ 150.109335][T10340] __sys_sendmsg+0x13e/0x230 [ 150.114033][T10340] __x64_sys_sendmsg+0x46/0x50 [ 150.118950][T10340] x64_sys_call+0x2734/0x2dc0 [ 150.123652][T10340] do_syscall_64+0xc9/0x1c0 [ 150.128211][T10340] ? clear_bhb_loop+0x55/0xb0 [ 150.132934][T10340] ? clear_bhb_loop+0x55/0xb0 [ 150.137821][T10340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.143887][T10340] RIP: 0033:0x7f1751fae819 [ 150.148360][T10340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.168101][T10340] RSP: 002b:00007f1750627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.176779][T10340] RAX: ffffffffffffffda RBX: 00007f1752165fa0 RCX: 00007f1751fae819 [ 150.184781][T10340] RDX: 0000000000000000 RSI: 0000000020001600 RDI: 0000000000000006 [ 150.192770][T10340] RBP: 00007f1750627090 R08: 0000000000000000 R09: 0000000000000000 [ 150.200742][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.208771][T10340] R13: 0000000000000000 R14: 00007f1752165fa0 R15: 00007fff21e72878 [ 150.216770][T10340] [ 150.249651][T10342] loop2: detected capacity change from 0 to 512 [ 150.268567][T10342] ext4 filesystem being mounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.311261][T10350] loop3: detected capacity change from 0 to 2048 [ 150.338781][T10352] loop2: detected capacity change from 0 to 512 [ 150.346027][T10352] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.355487][T10350] EXT4-fs (loop3): failed to initialize system zone (-117) [ 150.362795][T10350] EXT4-fs (loop3): mount failed [ 150.376699][T10352] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.415892][T10360] FAULT_INJECTION: forcing a failure. [ 150.415892][T10360] name failslab, interval 1, probability 0, space 0, times 0 [ 150.420499][T10358] lo speed is unknown, defaulting to 1000 [ 150.428942][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.3.2472 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 150.445128][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 150.455220][T10360] Call Trace: [ 150.458566][T10360] [ 150.461546][T10360] dump_stack_lvl+0xf2/0x150 [ 150.466167][T10360] dump_stack+0x15/0x20 [ 150.470404][T10360] should_fail_ex+0x223/0x230 [ 150.475220][T10360] ? audit_log_d_path+0x96/0x250 [ 150.480195][T10360] should_failslab+0x8f/0xb0 [ 150.484842][T10360] __kmalloc_cache_noprof+0x4b/0x2a0 [ 150.490162][T10360] audit_log_d_path+0x96/0x250 [ 150.495076][T10360] ? __rcu_read_unlock+0x4e/0x70 [ 150.500041][T10360] audit_log_d_path_exe+0x42/0x70 [ 150.505102][T10360] audit_log_task+0x155/0x180 [ 150.509879][T10360] audit_seccomp+0x68/0x130 [ 150.511067][T10364] loop4: detected capacity change from 0 to 512 [ 150.514467][T10360] __seccomp_filter+0x6fa/0x1180 [ 150.525646][T10360] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 150.531298][T10360] ? vfs_write+0x596/0x920 [ 150.535797][T10360] __secure_computing+0x9f/0x1c0 [ 150.540744][T10360] syscall_trace_enter+0xd1/0x1f0 [ 150.545777][T10360] ? fpregs_assert_state_consistent+0x83/0xa0 [ 150.551868][T10360] do_syscall_64+0xaa/0x1c0 [ 150.556445][T10360] ? clear_bhb_loop+0x55/0xb0 [ 150.561133][T10360] ? clear_bhb_loop+0x55/0xb0 [ 150.565894][T10360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.571799][T10360] RIP: 0033:0x7f70836ae819 [ 150.576283][T10360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.595900][T10360] RSP: 002b:00007f7081d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000063 [ 150.604358][T10360] RAX: ffffffffffffffda RBX: 00007f7083865fa0 RCX: 00007f70836ae819 [ 150.612335][T10360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 150.620311][T10360] RBP: 00007f7081d27090 R08: 0000000000000000 R09: 0000000000000000 [ 150.628339][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.636313][T10360] R13: 0000000000000000 R14: 00007f7083865fa0 R15: 00007ffc15eeb168 [ 150.644298][T10360] [ 150.660429][T10364] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.2473: casefold flag without casefold feature [ 150.680642][T10364] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2473: couldn't read orphan inode 15 (err -117) [ 150.704416][T10371] loop2: detected capacity change from 0 to 512 [ 150.714345][T10371] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.742200][T10371] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2471: corrupted in-inode xattr: bad e_name length [ 150.757155][T10371] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2471: couldn't read orphan inode 15 (err -117) [ 150.832815][T10376] ebtables: ebtables: counters copy to user failed while replacing table [ 150.840111][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2478'. [ 150.866580][T10388] netlink: 'syz.1.2480': attribute type 1 has an invalid length. [ 150.894198][T10393] loop2: detected capacity change from 0 to 512 [ 150.905808][T10393] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.905930][T10388] loop1: detected capacity change from 0 to 764 [ 150.930893][T10388] bond18 (unregistering): Released all slaves [ 150.949568][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2483'. [ 150.986520][T10393] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.078612][T10404] loop0: detected capacity change from 0 to 8192 [ 151.087538][T10404] vfat: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615PH"AU+G#E`!>mÊh@v572*ք8ˆ3i'}g躘vΐPrHkƞ:EcFI^L 7p /~ERݎP["' [ 151.115400][T10410] FAULT_INJECTION: forcing a failure. [ 151.115400][T10410] name failslab, interval 1, probability 0, space 0, times 0 [ 151.122067][T10411] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 151.128088][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.4.2488 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 151.145839][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 151.155933][T10410] Call Trace: [ 151.159231][T10410] [ 151.162174][T10410] dump_stack_lvl+0xf2/0x150 [ 151.166993][T10410] dump_stack+0x15/0x20 [ 151.171223][T10410] should_fail_ex+0x223/0x230 [ 151.175963][T10410] ? __alloc_skb+0x10b/0x310 [ 151.180604][T10410] should_failslab+0x8f/0xb0 [ 151.185218][T10410] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 151.191148][T10410] __alloc_skb+0x10b/0x310 [ 151.195611][T10410] tipc_msg_create+0x45/0x220 [ 151.200302][T10410] ? __rcu_read_unlock+0x4e/0x70 [ 151.205251][T10410] tipc_group_proto_xmit+0xbd/0x320 [ 151.210485][T10410] tipc_group_delete+0x9e/0x290 [ 151.215352][T10410] tipc_sk_leave+0xac/0x270 [ 151.219866][T10410] tipc_release+0x83/0xa70 [ 151.224381][T10410] sock_close+0x68/0x150 [ 151.228640][T10410] ? __pfx_sock_close+0x10/0x10 [ 151.233496][T10410] __fput+0x17a/0x6d0 [ 151.237544][T10410] ____fput+0x1c/0x30 [ 151.241607][T10410] task_work_run+0x13a/0x1a0 [ 151.246264][T10410] syscall_exit_to_user_mode+0xa8/0x120 [ 151.251845][T10410] do_syscall_64+0xd6/0x1c0 [ 151.256379][T10410] ? clear_bhb_loop+0x55/0xb0 [ 151.261143][T10410] ? clear_bhb_loop+0x55/0xb0 [ 151.265835][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.271758][T10410] RIP: 0033:0x7f5bfd09e819 [ 151.276218][T10410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.295953][T10410] RSP: 002b:00007f5bfb717038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 151.304452][T10410] RAX: 0000000000000000 RBX: 00007f5bfd255fa0 RCX: 00007f5bfd09e819 [ 151.312504][T10410] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 151.320489][T10410] RBP: 00007f5bfb717090 R08: 0000000000000000 R09: 0000000000000000 [ 151.328478][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.336533][T10410] R13: 0000000000000000 R14: 00007f5bfd255fa0 R15: 00007fffa5d34118 [ 151.344692][T10410] [ 151.461177][T10425] lo speed is unknown, defaulting to 1000 [ 151.584684][T10440] loop0: detected capacity change from 0 to 512 [ 151.602604][T10440] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.618745][T10440] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.745312][T10450] loop0: detected capacity change from 0 to 8192 [ 151.752676][T10450] vfat: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615PH"AU+G#E`!>mÊh@v572*ք8ˆ3i'}g躘vΐPrHkƞ:EcFI^L 7p /~ERݎP["' [ 151.845178][T10462] loop0: detected capacity change from 0 to 2048 [ 151.971738][T10456] loop2: detected capacity change from 0 to 164 [ 151.986060][T10456] Unable to read rock-ridge attributes [ 151.992297][T10456] Unable to read rock-ridge attributes [ 151.992552][T10474] loop3: detected capacity change from 0 to 256 [ 152.015174][T10474] FAT-fs (loop3): Directory bread(block 64) failed [ 152.021786][T10474] FAT-fs (loop3): Directory bread(block 65) failed [ 152.028527][T10474] FAT-fs (loop3): Directory bread(block 66) failed [ 152.035182][T10474] FAT-fs (loop3): Directory bread(block 67) failed [ 152.041845][T10474] FAT-fs (loop3): Directory bread(block 68) failed [ 152.048523][T10474] FAT-fs (loop3): Directory bread(block 69) failed [ 152.055225][T10474] FAT-fs (loop3): Directory bread(block 70) failed [ 152.061856][T10474] FAT-fs (loop3): Directory bread(block 71) failed [ 152.068604][T10474] FAT-fs (loop3): Directory bread(block 72) failed [ 152.075189][T10474] FAT-fs (loop3): Directory bread(block 73) failed [ 152.089498][T10474] xt_TPROXY: Can be used only with -p tcp or -p udp [ 152.121628][T10476] loop3: detected capacity change from 0 to 512 [ 152.164586][T10476] loop3: detected capacity change from 512 to 64 [ 152.189490][T10476] bridge0: port 1(vlan2) entered blocking state [ 152.195862][T10476] bridge0: port 1(vlan2) entered disabled state [ 152.202362][T10476] vlan2: entered allmulticast mode [ 152.208376][T10476] vlan2: left allmulticast mode [ 152.239250][T10478] syz.3.2511: attempt to access beyond end of device [ 152.239250][T10478] loop3: rw=2049, sector=112, nr_sectors = 96 limit=64 [ 152.252841][T10478] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 14) [ 152.264077][T10478] Buffer I/O error on device loop3, logical block 14 [ 152.270835][T10478] Buffer I/O error on device loop3, logical block 15 [ 152.277631][T10478] Buffer I/O error on device loop3, logical block 16 [ 152.284331][T10478] Buffer I/O error on device loop3, logical block 17 [ 152.291081][T10478] Buffer I/O error on device loop3, logical block 18 [ 152.297849][T10478] Buffer I/O error on device loop3, logical block 19 [ 152.304653][T10478] Buffer I/O error on device loop3, logical block 20 [ 152.311408][T10478] Buffer I/O error on device loop3, logical block 21 [ 152.318164][T10478] Buffer I/O error on device loop3, logical block 22 [ 152.325064][T10478] Buffer I/O error on device loop3, logical block 23 [ 152.368976][ T29] kauditd_printk_skb: 948 callbacks suppressed [ 152.369003][ T29] audit: type=1400 audit(1732337347.046:15278): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 152.397357][ T29] audit: type=1400 audit(1732337347.076:15279): avc: denied { unlink } for pid=3324 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 152.419706][ T3324] EXT4-fs warning (device loop3): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 152.433483][ T29] audit: type=1400 audit(1732337347.106:15280): avc: denied { rmdir } for pid=3324 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.434234][ T3324] EXT4-fs warning (device loop3): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 152.471091][ T3324] EXT4-fs warning (device loop3): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 152.485936][ T3324] EXT4-fs warning (device loop3): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 152.499871][ T3324] EXT4-fs warning (device loop3): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 152.513871][ T3324] EXT4-fs warning (device loop3): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 152.514572][ T29] audit: type=1326 audit(1732337347.186:15281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10479 comm="syz.4.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfd09e819 code=0x7ffc0000 [ 152.529400][ T3324] EXT4-fs warning (device loop3): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 152.550801][ T29] audit: type=1326 audit(1732337347.186:15282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10479 comm="syz.4.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfd09e819 code=0x7ffc0000 [ 152.579479][T10483] loop4: detected capacity change from 0 to 512 [ 152.593477][ T3324] EXT4-fs warning (device loop3): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 152.605447][T10483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.617147][ T3324] EXT4-fs warning (device loop3): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 152.637117][T10483] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.722340][T10487] lo speed is unknown, defaulting to 1000 [ 152.832524][ T29] audit: type=1326 audit(1732337347.506:15283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.1.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3714cee819 code=0x7ffc0000 [ 152.856785][ T29] audit: type=1326 audit(1732337347.536:15284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.1.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3714cee819 code=0x7ffc0000 [ 152.894617][ T29] audit: type=1326 audit(1732337347.566:15285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.1.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3714cee819 code=0x7ffc0000 [ 152.918387][ T29] audit: type=1326 audit(1732337347.566:15286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.1.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3714cee819 code=0x7ffc0000 [ 152.942032][ T29] audit: type=1326 audit(1732337347.566:15287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.1.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3714cee819 code=0x7ffc0000 [ 152.972736][ T3341] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.987011][T10497] loop0: detected capacity change from 0 to 8192 [ 153.003403][T10497] vfat: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615PH"AU+G#E`!>mÊh@v572*ք8ˆ3i'}g躘vΐPrHkƞ:EcFI^L 7p /~ERݎP["' [ 153.076638][ T3341] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.101918][T10507] loop0: detected capacity change from 0 to 512 [ 153.112196][T10507] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2523: corrupted in-inode xattr: invalid ea_ino [ 153.127128][T10507] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2523: couldn't read orphan inode 15 (err -117) [ 153.159328][ T3341] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.195727][ T3341] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.233568][T10504] lo speed is unknown, defaulting to 1000 [ 153.373579][T10525] SELinux: policydb version 0 does not match my version range 15-33 [ 153.382914][T10525] SELinux: failed to load policy [ 153.397671][ T3341] bond0 (unregistering): Released all slaves [ 153.407128][ T3341] bond1 (unregistering): Released all slaves [ 153.413049][T10526] loop2: detected capacity change from 0 to 164 [ 153.417442][ T3341] bond2 (unregistering): Released all slaves [ 153.430568][ T3341] bond3 (unregistering): Released all slaves [ 153.441877][ T3341] bond4 (unregistering): Released all slaves [ 153.451758][T10526] Unable to read rock-ridge attributes [ 153.459900][ T3341] bond5 (unregistering): Released all slaves [ 153.471661][T10526] Unable to read rock-ridge attributes [ 153.476947][ T3341] bond6 (unregistering): Released all slaves [ 153.492142][ T3341] bond7 (unregistering): Released all slaves [ 153.503400][T10530] __nla_validate_parse: 5 callbacks suppressed [ 153.503418][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2529'. [ 153.505938][ T3341] bond8 (unregistering): Released all slaves [ 153.527751][ T3341] bond9 (unregistering): Released all slaves [ 153.536843][ T3341] bond10 (unregistering): Released all slaves [ 153.546738][ T3341] bond11 (unregistering): Released all slaves [ 153.567548][ T3341] bond12 (unregistering): Released all slaves [ 153.578304][ T3341] bond13 (unregistering): Released all slaves [ 153.587536][ T3341] bond14 (unregistering): Released all slaves [ 153.720690][ T3341] hsr_slave_0: left promiscuous mode [ 153.736070][ T3341] hsr_slave_1: left promiscuous mode [ 153.743302][T10537] loop4: detected capacity change from 0 to 8192 [ 153.751328][T10537] vfat: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615PH"AU+G#E`!>mÊh@v572*ք8ˆ3i'}g躘vΐPrHkƞ:EcFI^L 7p /~ERݎP["' [ 153.804677][ T3341] veth1_vlan: left promiscuous mode [ 153.809942][ T3341] veth0_vlan: left promiscuous mode [ 153.900002][T10565] loop0: detected capacity change from 0 to 512 [ 153.965471][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2541'. [ 153.996166][T10565] loop0: detected capacity change from 512 to 64 [ 154.004295][T10573] loop1: detected capacity change from 0 to 164 [ 154.016548][ T3320] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 154.035315][T10573] Unable to read rock-ridge attributes [ 154.052441][T10573] Unable to read rock-ridge attributes [ 154.054802][T10504] chnl_net:caif_netlink_parms(): no params data found [ 154.065153][ T3320] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 154.094600][ T3320] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 154.114987][ T3320] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 154.135211][ T3320] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 154.153453][ T3320] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 154.169209][ T3320] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 154.173082][T10581] loop4: detected capacity change from 0 to 8192 [ 154.187831][ T3320] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 154.189576][T10581] vfat: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615PH"AU+G#E`!>mÊh@v572*ք8ˆ3i'}g躘vΐPrHkƞ:EcFI^L 7p /~ERݎP["' [ 154.203290][ T3320] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 154.254881][ T3320] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 154.303380][T10591] raw_sendmsg: syz.2.2545 forgot to set AF_INET. Fix it! [ 154.340098][T10504] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.347353][T10504] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.354786][T10504] bridge_slave_0: entered allmulticast mode [ 154.361526][T10504] bridge_slave_0: entered promiscuous mode [ 154.368413][T10504] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.375601][T10504] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.382862][T10504] bridge_slave_1: entered allmulticast mode [ 154.389500][T10504] bridge_slave_1: entered promiscuous mode [ 154.453009][T10504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.465932][T10504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.506593][T10608] ebtables: ebtables: counters copy to user failed while replacing table [ 154.518171][T10504] team0: Port device team_slave_0 added [ 154.524874][T10504] team0: Port device team_slave_1 added [ 154.531989][ T3341] IPVS: stop unused estimator thread 0... [ 154.552987][T10504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.560030][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.586066][T10504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.606511][T10504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.613514][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.616175][T10611] ebtables: ebtables: counters copy to user failed while replacing table [ 154.639567][T10504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.669685][T10504] hsr_slave_0: entered promiscuous mode [ 154.676771][T10504] hsr_slave_1: entered promiscuous mode [ 154.682837][T10504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.691626][T10504] Cannot create hsr debugfs directory [ 154.889284][T10504] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.923637][T10504] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.956726][T10504] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.970958][T10504] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.989153][ T3341] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.006107][T10641] lo speed is unknown, defaulting to 1000 [ 155.015381][T10504] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.022528][T10504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.029890][T10504] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.036965][T10504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.073422][ T3341] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.092787][T10671] loop1: detected capacity change from 0 to 164 [ 155.126333][ T3341] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.137848][T10671] Unable to read rock-ridge attributes [ 155.150767][T10671] Unable to read rock-ridge attributes [ 155.176146][ T3341] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.242141][T10641] chnl_net:caif_netlink_parms(): no params data found [ 155.363545][T10684] loop2: detected capacity change from 0 to 8192 [ 155.370411][T10684] vfat: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615PH"AU+G#E`!>mÊh@v572*ք8ˆ3i'}g躘vΐPrHkƞ:EcFI^L 7p /~ERݎP["' [ 155.499587][T10708] loop2: detected capacity change from 0 to 164 [ 155.509288][T10708] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 155.510247][ T3341] bond0 (unregistering): Released all slaves [ 155.527412][ T3341] bond1 (unregistering): Released all slaves [ 155.536368][ T3341] bond2 (unregistering): Released all slaves [ 155.546743][ T3341] bond3 (unregistering): Released all slaves [ 155.555420][ T3341] bond4 (unregistering): Released all slaves [ 155.563836][ T3341] bond5 (unregistering): Released all slaves [ 155.573603][ T3341] bond6 (unregistering): Released all slaves [ 155.582077][ T3341] bond7 (unregistering): Released all slaves [ 155.590872][ T3341] bond8 (unregistering): Released all slaves [ 155.599436][ T3341] bond9 (unregistering): Released all slaves [ 155.608001][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.616234][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.636642][T10708] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.646652][T10712] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 155.662690][T10504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.694145][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.701495][T10641] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.709065][T10641] bridge_slave_0: entered allmulticast mode [ 155.715899][T10641] bridge_slave_0: entered promiscuous mode [ 155.732005][T10641] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.739129][T10641] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.746912][T10641] bridge_slave_1: entered allmulticast mode [ 155.753507][T10641] bridge_slave_1: entered promiscuous mode [ 155.769380][T10504] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.778416][ T3341] hsr_slave_0: left promiscuous mode [ 155.784149][ T3341] hsr_slave_1: left promiscuous mode [ 155.791715][ T3341] veth1_vlan: left promiscuous mode [ 155.797236][ T3341] veth0_vlan: left promiscuous mode [ 155.914469][T10723] loop1: detected capacity change from 0 to 8192 [ 155.922025][T10723] vfat: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615PH"AU+G#E`!>mÊh@v572*ք8ˆ3i'}g躘vΐPrHkƞ:EcFI^L 7p /~ERݎP["' [ 155.952040][T10718] veth3: entered promiscuous mode [ 155.957183][T10718] veth3: entered allmulticast mode [ 155.980944][T10727] ebtables: ebtables: counters copy to user failed while replacing table [ 156.003534][T10641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.015886][T10641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.027198][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.034287][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.050741][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.057838][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.093069][T10504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.109020][T10641] team0: Port device team_slave_0 added [ 156.125431][T10641] team0: Port device team_slave_1 added [ 156.161400][T10641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.168463][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.194452][T10641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.207432][T10641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.214462][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.240520][T10641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.242097][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 156.292555][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.300090][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.307512][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.314979][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.322381][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.329925][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.337786][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.345247][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.352639][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.360074][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.367508][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.375060][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.382469][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.389987][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.397559][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.404984][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.412437][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.419969][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.427496][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.435059][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.442454][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.449887][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.457308][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.464778][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.472166][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.479604][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.487009][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.494405][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.501859][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.509284][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.516795][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.524183][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.531667][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.539098][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.546604][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.553998][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.561490][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.568887][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.576353][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.583751][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.591159][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.598589][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.606002][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.613415][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.620833][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.628260][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.635708][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.643104][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.650546][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.657980][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.665382][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.672766][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.680199][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.687701][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.695099][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.702483][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.709894][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.717372][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.724775][ T8] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 156.733284][ T8] hid-generic 0000:0008:0000.0001: hidraw0: HID v100.04 Device [syz0] on syz0 [ 156.735402][T10641] hsr_slave_0: entered promiscuous mode [ 156.760274][T10641] hsr_slave_1: entered promiscuous mode [ 156.810829][T10504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.868996][ T3341] IPVS: stop unused estimator thread 0... [ 156.907372][T10782] loop2: detected capacity change from 0 to 164 [ 156.943261][T10782] Unable to read rock-ridge attributes [ 156.965220][T10778] loop1: detected capacity change from 0 to 8192 [ 156.971872][T10778] vfat: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615PH"AU+G#E`!>mÊh@v572*ք8ˆ3i'}g躘vΐPrHkƞ:EcFI^L 7p /~ERݎP["' [ 156.979135][T10641] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 157.013211][T10782] Unable to read rock-ridge attributes [ 157.039558][T10641] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.060772][T10641] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.108554][T10641] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.171059][T10504] veth0_vlan: entered promiscuous mode [ 157.194264][T10504] veth1_vlan: entered promiscuous mode [ 157.238114][T10641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.252564][T10504] veth0_macvtap: entered promiscuous mode [ 157.266592][T10641] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.275585][T10504] veth1_macvtap: entered promiscuous mode [ 157.285031][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.292203][T10365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.299518][T10808] loop1: detected capacity change from 0 to 8192 [ 157.309616][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.320096][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.329951][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.340414][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.366855][T10504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.379234][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.386427][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.403276][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.413766][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.423678][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.434241][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.446444][T10504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.465488][T10504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.474232][T10504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.483076][T10504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.491964][T10504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.503445][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 157.503461][ T29] audit: type=1400 audit(1732337352.176:15863): avc: denied { write } for pid=10807 comm="syz.1.2578" path="socket:[31180]" dev="sockfs" ino=31180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 157.538721][T10822] bond0: entered promiscuous mode [ 157.543875][T10822] bond_slave_0: entered promiscuous mode [ 157.549951][T10822] bond_slave_1: entered promiscuous mode [ 157.562326][T10822] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.570546][T10822] bond0: left promiscuous mode [ 157.575405][T10822] bond_slave_0: left promiscuous mode [ 157.580860][T10822] bond_slave_1: left promiscuous mode [ 157.701845][ T29] audit: type=1400 audit(1732337352.376:15864): avc: denied { mounton } for pid=10504 comm="syz-executor" path="/root/syzkaller.W9cbmw/syz-tmp" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 157.750647][T10641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.776615][ T29] audit: type=1400 audit(1732337352.416:15865): avc: denied { mount } for pid=10504 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 157.799141][ T29] audit: type=1400 audit(1732337352.416:15866): avc: denied { mount } for pid=10504 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 157.821330][ T29] audit: type=1400 audit(1732337352.416:15867): avc: denied { mounton } for pid=10504 comm="syz-executor" path="/root/syzkaller.W9cbmw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 157.848334][ T29] audit: type=1400 audit(1732337352.416:15868): avc: denied { mounton } for pid=10504 comm="syz-executor" path="/root/syzkaller.W9cbmw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=31787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 157.876251][ T29] audit: type=1400 audit(1732337352.426:15869): avc: denied { mounton } for pid=10504 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 157.947892][ T29] audit: type=1326 audit(1732337352.626:15870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10855 comm="syz.5.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 157.985293][T10848] veth3: entered promiscuous mode [ 157.990391][T10848] veth3: entered allmulticast mode [ 157.991029][ T29] audit: type=1326 audit(1732337352.656:15871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10855 comm="syz.5.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 158.019238][ T29] audit: type=1326 audit(1732337352.656:15872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10855 comm="syz.5.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 158.093586][T10862] ebtables: ebtables: counters copy to user failed while replacing table [ 158.165757][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2585'. [ 158.189528][T10869] ebtables: ebtables: counters copy to user failed while replacing table [ 158.208383][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 158.238330][T10889] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 158.285864][T10641] veth0_vlan: entered promiscuous mode [ 158.294204][T10641] veth1_vlan: entered promiscuous mode [ 158.343740][T10641] veth0_macvtap: entered promiscuous mode [ 158.351787][T10641] veth1_macvtap: entered promiscuous mode [ 158.364280][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.374820][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.384685][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.395304][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.405234][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.415761][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.429962][T10641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.441051][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.451664][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.461641][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.472177][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.482076][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.492543][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.503868][T10641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.516226][T10641] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.525024][T10641] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.533867][T10641] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.542675][T10641] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.913973][T10932] loop6: detected capacity change from 0 to 164 [ 158.950230][T10934] loop4: detected capacity change from 0 to 512 [ 158.959497][T10932] Unable to read rock-ridge attributes [ 158.984333][T10932] Unable to read rock-ridge attributes [ 158.985934][T10934] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2589: corrupted in-inode xattr: invalid ea_ino [ 159.027256][T10934] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2589: couldn't read orphan inode 15 (err -117) [ 159.045841][T10934] EXT4-fs mount: 32 callbacks suppressed [ 159.045856][T10934] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.045926][T10939] loop5: detected capacity change from 0 to 512 [ 159.089037][T10939] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2590: corrupted in-inode xattr: invalid ea_ino [ 159.141368][T10939] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2590: couldn't read orphan inode 15 (err -117) [ 159.168971][T10939] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.180649][T10948] loop2: detected capacity change from 0 to 512 [ 159.239531][T10951] loop1: detected capacity change from 0 to 164 [ 159.247149][T10948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.251845][ T3322] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 159.271183][T10951] Unable to read rock-ridge attributes [ 159.280931][T10951] Unable to read rock-ridge attributes [ 159.289846][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.326221][T10957] loop2: detected capacity change from 0 to 512 [ 159.356507][T10960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2595'. [ 159.365644][T10960] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2595'. [ 159.379356][T10504] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 159.391699][T10957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.437605][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.469496][T10973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2597'. [ 159.526751][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2599'. [ 159.546750][T10979] loop5: detected capacity change from 0 to 512 [ 159.563052][T10979] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2598: corrupted in-inode xattr: invalid ea_ino [ 159.577809][T10979] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2598: couldn't read orphan inode 15 (err -117) [ 159.640574][T10979] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.803709][T11013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.906986][T10504] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 160.036754][T11037] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 160.046103][T11042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.101080][T11049] lo speed is unknown, defaulting to 1000 [ 160.165773][T11058] loop1: detected capacity change from 0 to 2048 [ 160.197193][T11058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.248029][T11064] loop6: detected capacity change from 0 to 164 [ 160.257832][T11064] Unable to read rock-ridge attributes [ 160.295122][T11064] Unable to read rock-ridge attributes [ 160.430552][T11081] loop5: detected capacity change from 0 to 512 [ 160.448823][T11079] loop4: detected capacity change from 0 to 512 [ 160.458181][T11081] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2619: corrupted in-inode xattr: invalid ea_ino [ 160.472066][T11081] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2619: couldn't read orphan inode 15 (err -117) [ 160.479830][T11079] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2620: corrupted in-inode xattr: invalid ea_ino [ 160.486390][T11081] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.498519][T11079] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2620: couldn't read orphan inode 15 (err -117) [ 160.525557][T11079] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.596889][T10504] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 160.678582][ T3322] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 160.721369][T11097] loop4: detected capacity change from 0 to 1024 [ 160.728951][T11097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.746781][T11093] loop5: detected capacity change from 0 to 8192 [ 160.757106][T11097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.773415][T11098] ebtables: ebtables: counters copy to user failed while replacing table [ 160.798636][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.852620][T11108] lo speed is unknown, defaulting to 1000 [ 160.878002][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.954936][T11115] ebtables: ebtables: counters copy to user failed while replacing table [ 160.989681][T11119] ebtables: ebtables: counters copy to user failed while replacing table [ 161.099225][T11128] loop4: detected capacity change from 0 to 512 [ 161.122136][T11128] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2632: corrupted in-inode xattr: invalid ea_ino [ 161.136964][T11128] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2632: couldn't read orphan inode 15 (err -117) [ 161.171547][T11128] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.241627][T11146] loop6: detected capacity change from 0 to 512 [ 161.267409][T11146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.291371][T10641] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.313233][T11149] loop6: detected capacity change from 0 to 512 [ 161.320596][T11149] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 161.334120][ T3322] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 161.346219][T11149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.359198][T11149] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.403005][T10641] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.418345][T11156] loop4: detected capacity change from 0 to 512 [ 161.432442][T11156] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2643: corrupted in-inode xattr: invalid ea_ino [ 161.447688][T11156] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2643: couldn't read orphan inode 15 (err -117) [ 161.460182][T11156] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.584424][ T3322] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 161.626823][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 161.634301][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 161.641761][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 161.649205][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 161.656635][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 161.664051][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 161.671482][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 161.678977][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 161.686391][ T35] hid-generic 0000:0000:0000.0002: item fetching failed at offset 8/43 [ 161.725616][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 161.756858][ T35] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 161.792075][T11182] loop6: detected capacity change from 0 to 512 [ 161.926445][T11198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.931673][T11182] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2654: corrupted in-inode xattr: invalid ea_ino [ 161.952265][T11182] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2654: couldn't read orphan inode 15 (err -117) [ 161.972139][T11182] EXT4-fs (loop6): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.080682][T11206] ebtables: ebtables: counters copy to user failed while replacing table [ 162.118001][T10641] EXT4-fs (loop6): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 162.237622][T11220] loop6: detected capacity change from 0 to 512 [ 162.256133][T11220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.276371][T11220] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.347673][T10641] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.383384][T11236] loop6: detected capacity change from 0 to 1024 [ 162.394158][T11234] syzkaller0: entered promiscuous mode [ 162.394352][T11236] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.399681][T11234] syzkaller0: entered allmulticast mode [ 162.419187][T11236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.450072][T10641] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.478532][T11239] lo speed is unknown, defaulting to 1000 [ 162.615062][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 162.615091][ T29] audit: type=1326 audit(1732337357.296:16463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 162.647431][ T29] audit: type=1326 audit(1732337357.296:16464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 162.671134][ T29] audit: type=1326 audit(1732337357.296:16465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 162.695011][ T29] audit: type=1326 audit(1732337357.296:16466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 162.701035][T11256] loop5: detected capacity change from 0 to 8192 [ 162.718645][ T29] audit: type=1326 audit(1732337357.296:16467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 162.718678][ T29] audit: type=1326 audit(1732337357.296:16468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 162.718705][ T29] audit: type=1326 audit(1732337357.296:16469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 162.718810][ T29] audit: type=1326 audit(1732337357.296:16470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 162.718840][ T29] audit: type=1326 audit(1732337357.296:16471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 162.843448][ T29] audit: type=1326 audit(1732337357.296:16472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.5.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6273cfe819 code=0x7ffc0000 [ 162.909859][T11258] loop4: detected capacity change from 0 to 8192 [ 162.914444][T11263] loop2: detected capacity change from 0 to 128 [ 162.923236][T11263] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.935828][T11263] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.950646][T11265] FAULT_INJECTION: forcing a failure. [ 162.950646][T11265] name failslab, interval 1, probability 0, space 0, times 0 [ 162.963390][T11265] CPU: 1 UID: 0 PID: 11265 Comm: syz.6.2684 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 162.973838][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 162.983943][T11265] Call Trace: [ 162.987237][T11265] [ 162.990182][T11265] dump_stack_lvl+0xf2/0x150 [ 162.994806][T11265] dump_stack+0x15/0x20 [ 162.998979][T11265] should_fail_ex+0x223/0x230 [ 163.003673][T11265] ? audit_log_d_path+0x96/0x250 [ 163.008798][T11265] should_failslab+0x8f/0xb0 [ 163.013455][T11265] __kmalloc_cache_noprof+0x4b/0x2a0 [ 163.018777][T11265] audit_log_d_path+0x96/0x250 [ 163.023559][T11265] ? __rcu_read_unlock+0x4e/0x70 [ 163.028535][T11265] audit_log_d_path_exe+0x42/0x70 [ 163.033651][T11265] audit_log_task+0x155/0x180 [ 163.038383][T11265] audit_seccomp+0x68/0x130 [ 163.042983][T11265] __seccomp_filter+0x6fa/0x1180 [ 163.047968][T11265] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 163.053655][T11265] ? vfs_write+0x596/0x920 [ 163.058176][T11265] ? putname+0xcf/0xf0 [ 163.062301][T11265] __secure_computing+0x9f/0x1c0 [ 163.067249][T11265] syscall_trace_enter+0xd1/0x1f0 [ 163.072343][T11265] ? fpregs_assert_state_consistent+0x83/0xa0 [ 163.078439][T11265] do_syscall_64+0xaa/0x1c0 [ 163.082961][T11265] ? clear_bhb_loop+0x55/0xb0 [ 163.087652][T11265] ? clear_bhb_loop+0x55/0xb0 [ 163.092366][T11265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.098277][T11265] RIP: 0033:0x7ff6397fe819 [ 163.102703][T11265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.122483][T11265] RSP: 002b:00007ff637e77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 163.130902][T11265] RAX: ffffffffffffffda RBX: 00007ff6399b5fa0 RCX: 00007ff6397fe819 [ 163.139015][T11265] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000065 [ 163.146990][T11265] RBP: 00007ff637e77090 R08: 0000000000000000 R09: 0000000000000000 [ 163.154967][T11265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.162982][T11265] R13: 0000000000000000 R14: 00007ff6399b5fa0 R15: 00007ffdf862ac28 [ 163.170996][T11265] [ 163.220681][T11269] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 163.233401][T11268] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2685'. [ 163.329230][ T1086] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.340511][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2690'. [ 163.389315][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 163.407117][T11285] loop1: detected capacity change from 0 to 512 [ 163.487141][T11285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.500516][T11285] ext4 filesystem being mounted at /560/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.536225][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.634221][T11303] loop4: detected capacity change from 0 to 512 [ 163.647481][T11303] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.651271][T11268] IPVS: stopping master sync thread 11269 ... [ 163.738221][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2703'. [ 163.740612][T11303] EXT4-fs (loop4): 1 truncate cleaned up [ 163.757908][T11303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.837799][T11318] loop1: detected capacity change from 0 to 512 [ 163.869812][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.873572][T11321] lo speed is unknown, defaulting to 1000 [ 163.900627][T11318] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2705: corrupted in-inode xattr: invalid ea_ino [ 163.934974][T11318] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2705: couldn't read orphan inode 15 (err -117) [ 163.979663][T11318] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.982529][T11326] loop4: detected capacity change from 0 to 8192 [ 164.165523][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.172979][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.180518][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.188137][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.195720][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.203119][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.210629][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.218074][ T1034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.225668][ T1034] hid-generic 0000:0000:0000.0003: item fetching failed at offset 8/43 [ 164.256617][ T3316] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 164.282207][ T1034] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 164.310390][T11334] loop6: detected capacity change from 0 to 512 [ 164.334087][T11338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.355620][T11336] SELinux: syz.1.2710 (11336) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 164.378936][T11334] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2711: corrupted in-inode xattr: invalid ea_ino [ 164.400971][T11334] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2711: couldn't read orphan inode 15 (err -117) [ 164.414420][T11334] EXT4-fs (loop6): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.471999][T11347] loop2: detected capacity change from 0 to 2048 [ 164.475664][T11349] lo speed is unknown, defaulting to 1000 [ 164.523882][T11347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.573241][T11356] loop1: detected capacity change from 0 to 1024 [ 164.595658][ T3395] IPVS: starting estimator thread 0... [ 164.596840][T10641] EXT4-fs (loop6): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 164.606706][T11356] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.622011][T11356] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 164.630386][T11356] EXT4-fs (loop1): orphan cleanup on readonly fs [ 164.641097][T11356] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 164.653542][T11356] EXT4-fs (loop1): Remounting filesystem read-only [ 164.656759][T11364] loop6: detected capacity change from 0 to 512 [ 164.661027][T11356] EXT4-fs (loop1): 1 orphan inode deleted [ 164.675228][T11356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 164.683318][T11364] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2721: corrupted in-inode xattr: invalid ea_ino [ 164.687714][T11356] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 164.704331][T11361] IPVS: using max 2112 ests per chain, 105600 per kthread [ 164.707601][T11356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.726451][T11364] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2721: couldn't read orphan inode 15 (err -117) [ 164.739319][T11364] EXT4-fs (loop6): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.781715][T11371] loop1: detected capacity change from 0 to 128 [ 164.795055][T11371] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.817463][T11371] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.893390][T10641] EXT4-fs (loop6): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 164.938301][T11375] loop4: detected capacity change from 0 to 8192 [ 164.951522][T11375] vfat: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615PH"AU+G#E`!>mÊh@v572*ք8ˆ3i'}g躘vΐPrHkƞ:EcFI^L 7p /~ERݎP["' [ 164.998948][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2727'. [ 165.092639][T11393] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.143481][T11398] loop4: detected capacity change from 0 to 512 [ 165.145896][T11401] loop6: detected capacity change from 0 to 512 [ 165.160657][T11398] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2735: corrupted in-inode xattr: invalid ea_ino [ 165.174530][T11401] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.188679][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.193736][T11398] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2735: couldn't read orphan inode 15 (err -117) [ 165.211733][T11394] vxcan1: MTU too low for tipc bearer [ 165.217180][T11394] tipc: Enabling of bearer rejected, failed to enable media [ 165.227058][T11398] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.242501][T11401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.255575][T11401] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.284058][T10641] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.346979][ T3322] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 165.464247][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2740'. [ 165.541901][T11425] FAULT_INJECTION: forcing a failure. [ 165.541901][T11425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.555139][T11425] CPU: 0 UID: 0 PID: 11425 Comm: syz.5.2742 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 165.565564][T11425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 165.575643][T11425] Call Trace: [ 165.578939][T11425] [ 165.581892][T11425] dump_stack_lvl+0xf2/0x150 [ 165.586536][T11425] dump_stack+0x15/0x20 [ 165.590811][T11425] should_fail_ex+0x223/0x230 [ 165.595590][T11425] should_fail+0xb/0x10 [ 165.599752][T11425] should_fail_usercopy+0x1a/0x20 [ 165.604843][T11425] _copy_from_user+0x1e/0xb0 [ 165.609545][T11425] xsk_setsockopt+0x288/0x520 [ 165.614251][T11425] ? __pfx_xsk_setsockopt+0x10/0x10 [ 165.619496][T11425] __sys_setsockopt+0x187/0x200 [ 165.624420][T11425] __x64_sys_setsockopt+0x66/0x80 [ 165.629500][T11425] x64_sys_call+0x282e/0x2dc0 [ 165.634196][T11425] do_syscall_64+0xc9/0x1c0 [ 165.638702][T11425] ? clear_bhb_loop+0x55/0xb0 [ 165.643546][T11425] ? clear_bhb_loop+0x55/0xb0 [ 165.648326][T11425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.654262][T11425] RIP: 0033:0x7f6273cfe819 [ 165.658771][T11425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.678699][T11425] RSP: 002b:00007f6272377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 165.687240][T11425] RAX: ffffffffffffffda RBX: 00007f6273eb5fa0 RCX: 00007f6273cfe819 [ 165.695234][T11425] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 165.703205][T11425] RBP: 00007f6272377090 R08: 0000000000000020 R09: 0000000000000000 [ 165.711212][T11425] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 165.719198][T11425] R13: 0000000000000000 R14: 00007f6273eb5fa0 R15: 00007ffe28b01648 [ 165.727184][T11425] [ 165.759243][T11430] lo speed is unknown, defaulting to 1000 [ 166.008633][T11442] loop2: detected capacity change from 0 to 512 [ 166.019162][T11442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 166.032732][T11441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 166.066141][T11442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.078870][T11442] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.109497][T11448] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.118334][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.172828][T11451] loop1: detected capacity change from 0 to 2048 [ 166.176456][T11453] lo speed is unknown, defaulting to 1000 [ 166.229315][T11451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.245245][T11463] loop4: detected capacity change from 0 to 512 [ 166.252587][T11463] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 166.274147][T11464] loop6: detected capacity change from 0 to 512 [ 166.290400][T11464] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2753: corrupted in-inode xattr: invalid ea_ino [ 166.292846][T11463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.316875][T11463] ext4 filesystem being mounted at /549/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.344578][T11464] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2753: couldn't read orphan inode 15 (err -117) [ 166.358054][T11464] EXT4-fs (loop6): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.376918][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.478021][T10641] EXT4-fs (loop6): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 166.559218][T11485] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2760'. [ 166.603340][T11489] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.616236][T11490] loop4: detected capacity change from 0 to 164 [ 166.637602][T11490] Unable to read rock-ridge attributes [ 166.663633][T11490] Unable to read rock-ridge attributes [ 166.765559][T11497] loop6: detected capacity change from 0 to 8192 [ 166.849504][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.922684][T11516] loop1: detected capacity change from 0 to 512 [ 166.933613][T11516] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 166.947418][T11516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.960257][T11516] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.988878][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.082025][T11520] loop1: detected capacity change from 0 to 8192 [ 167.128932][T11528] lo speed is unknown, defaulting to 1000 [ 167.317263][T11534] loop5: detected capacity change from 0 to 512 [ 167.378833][T11534] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2772: corrupted in-inode xattr: invalid ea_ino [ 167.392638][T11534] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2772: couldn't read orphan inode 15 (err -117) [ 167.429667][T11534] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.538822][T11537] loop4: detected capacity change from 0 to 8192 [ 167.575863][T10504] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 167.670829][T11543] loop5: detected capacity change from 0 to 512 [ 167.686340][T11543] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2775: corrupted in-inode xattr: invalid ea_ino [ 167.705969][T11543] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2775: couldn't read orphan inode 15 (err -117) [ 167.719827][T11543] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.736138][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 167.736152][ T29] audit: type=1326 audit(1732337362.416:16957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.2.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903cfee819 code=0x7ffc0000 [ 167.779949][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.792578][ T29] audit: type=1326 audit(1732337362.446:16958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.2.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903cfee819 code=0x7ffc0000 [ 167.816319][ T29] audit: type=1326 audit(1732337362.446:16959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.2.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f903cfee819 code=0x7ffc0000 [ 167.839866][ T29] audit: type=1326 audit(1732337362.446:16960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.2.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903cfee819 code=0x7ffc0000 [ 167.863578][ T29] audit: type=1326 audit(1732337362.446:16961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.2.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903cfee819 code=0x7ffc0000 [ 167.887333][ T29] audit: type=1326 audit(1732337362.456:16962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.2.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f903cfee819 code=0x7ffc0000 [ 167.910965][ T29] audit: type=1326 audit(1732337362.456:16963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.2.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903cfee819 code=0x7ffc0000 [ 167.935034][ T29] audit: type=1326 audit(1732337362.456:16964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.2.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f903cfee819 code=0x7ffc0000 [ 167.958622][ T29] audit: type=1326 audit(1732337362.456:16965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.2.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903cfee819 code=0x7ffc0000 [ 167.982213][ T29] audit: type=1326 audit(1732337362.456:16966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.2.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f903cfee819 code=0x7ffc0000 [ 168.102668][T11556] lo speed is unknown, defaulting to 1000 [ 168.120145][T10504] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 168.258507][T11562] Invalid ELF header magic: != ELF [ 168.275096][T11563] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.314590][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2783'. [ 168.708951][T11576] loop6: detected capacity change from 0 to 8192 [ 168.766912][T11586] loop2: detected capacity change from 0 to 512 [ 168.775984][T11588] loop1: detected capacity change from 0 to 512 [ 168.794090][T11588] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2793: corrupted in-inode xattr: invalid ea_ino [ 168.808417][T11586] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2792: corrupted in-inode xattr: invalid ea_ino [ 168.811053][T11588] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2793: couldn't read orphan inode 15 (err -117) [ 168.822762][T11586] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2792: couldn't read orphan inode 15 (err -117) [ 168.964950][T11599] loop2: detected capacity change from 0 to 512 [ 169.097799][T11614] lo speed is unknown, defaulting to 1000 [ 169.189367][T11619] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 169.316545][T11623] lo speed is unknown, defaulting to 1000 [ 169.515385][T11632] loop5: detected capacity change from 0 to 512 [ 169.693883][T11644] loop4: detected capacity change from 0 to 512 [ 169.715450][T11642] loop5: detected capacity change from 0 to 512 [ 169.733549][T11642] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2806: corrupted in-inode xattr: invalid ea_ino [ 169.783699][T11642] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2806: couldn't read orphan inode 15 (err -117) [ 169.951063][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 169.958640][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 169.966064][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 169.973462][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 169.980919][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 169.988419][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 169.995951][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.003355][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.010788][ T35] hid-generic 0000:0000:0000.0004: item fetching failed at offset 8/43 [ 170.019813][ T35] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 170.155810][T11663] loop6: detected capacity change from 0 to 128 [ 170.175804][T11663] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.204748][T11663] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.312898][T11681] loop6: detected capacity change from 0 to 512 [ 171.000248][T11759] lo speed is unknown, defaulting to 1000 [ 171.062443][T11764] loop6: detected capacity change from 0 to 8192 [ 171.263892][T11797] loop5: detected capacity change from 0 to 512 [ 171.423107][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.430660][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.438094][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.445584][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.452991][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.460439][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.467926][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.475383][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.482860][ T24] hid-generic 0000:0000:0000.0005: item fetching failed at offset 8/43 [ 171.576989][ T24] hid-generic 0000:0000:0000.0005: probe with driver hid-generic failed with error -22 [ 171.591296][T11825] loop4: detected capacity change from 0 to 512 [ 171.666804][T11825] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2823: corrupted in-inode xattr: invalid ea_ino [ 171.763480][T11825] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2823: couldn't read orphan inode 15 (err -117) [ 171.765863][T11835] loop5: detected capacity change from 0 to 128 [ 171.782481][T11835] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.814637][T11835] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.163204][ T9] IPVS: starting estimator thread 0... [ 172.237363][T11869] loop1: detected capacity change from 0 to 512 [ 172.274665][T11861] IPVS: using max 2400 ests per chain, 120000 per kthread [ 172.326422][T11880] lo speed is unknown, defaulting to 1000 [ 172.378241][T11896] loop1: detected capacity change from 0 to 128 [ 172.392637][T11896] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.441486][T11896] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.523445][T11900] loop2: detected capacity change from 0 to 8192 [ 172.619451][T11920] loop4: detected capacity change from 0 to 512 [ 172.660384][T11920] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2840: corrupted in-inode xattr: invalid ea_ino [ 172.673805][T11928] bond0: entered promiscuous mode [ 172.673827][T11928] bond_slave_0: entered promiscuous mode [ 172.673915][T11928] bond_slave_1: entered promiscuous mode [ 172.677675][T11928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 172.680848][T11920] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2840: couldn't read orphan inode 15 (err -117) [ 172.710108][T11928] bond0: left promiscuous mode [ 172.714971][T11928] bond_slave_0: left promiscuous mode [ 172.720513][T11928] bond_slave_1: left promiscuous mode [ 172.917735][T11948] FAULT_INJECTION: forcing a failure. [ 172.917735][T11948] name failslab, interval 1, probability 0, space 0, times 0 [ 172.930519][T11948] CPU: 0 UID: 0 PID: 11948 Comm: syz.5.2843 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 172.940950][T11948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 172.951010][T11948] Call Trace: [ 172.954287][T11948] [ 172.957279][T11948] dump_stack_lvl+0xf2/0x150 [ 172.961880][T11948] dump_stack+0x15/0x20 [ 172.966042][T11948] should_fail_ex+0x223/0x230 [ 172.970737][T11948] ? __alloc_skb+0x10b/0x310 [ 172.975347][T11948] should_failslab+0x8f/0xb0 [ 172.979982][T11948] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 172.985883][T11948] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 172.991774][T11948] __alloc_skb+0x10b/0x310 [ 172.996272][T11948] tipc_buf_acquire+0x2c/0xb0 [ 173.001013][T11948] tipc_named_withdraw+0x144/0x360 [ 173.006157][T11948] tipc_nametbl_withdraw+0x105/0x1f0 [ 173.011461][T11948] tipc_sk_leave+0x255/0x270 [ 173.016117][T11948] tipc_release+0x83/0xa70 [ 173.020592][T11948] sock_close+0x68/0x150 [ 173.024925][T11948] ? __pfx_sock_close+0x10/0x10 [ 173.029850][T11948] __fput+0x17a/0x6d0 [ 173.033872][T11948] ____fput+0x1c/0x30 [ 173.037861][T11948] task_work_run+0x13a/0x1a0 [ 173.042464][T11948] syscall_exit_to_user_mode+0xa8/0x120 [ 173.048017][T11948] do_syscall_64+0xd6/0x1c0 [ 173.052607][T11948] ? clear_bhb_loop+0x55/0xb0 [ 173.057447][T11948] ? clear_bhb_loop+0x55/0xb0 [ 173.062132][T11948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.068034][T11948] RIP: 0033:0x7f6273cfe819 [ 173.072456][T11948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.092073][T11948] RSP: 002b:00007f6272377038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 173.100493][T11948] RAX: 0000000000000000 RBX: 00007f6273eb5fa0 RCX: 00007f6273cfe819 [ 173.108552][T11948] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 173.116594][T11948] RBP: 00007f6272377090 R08: 0000000000000000 R09: 0000000000000000 [ 173.124672][T11948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.132642][T11948] R13: 0000000000000000 R14: 00007f6273eb5fa0 R15: 00007ffe28b01648 [ 173.140625][T11948] [ 173.143720][T11948] tipc: Withdrawal distribution failure [ 173.214244][T11954] loop5: detected capacity change from 0 to 764 [ 173.222431][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 173.222448][ T29] audit: type=1326 audit(1732337367.896:17350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 173.231261][T11956] loop4: detected capacity change from 0 to 512 [ 173.285934][T11954] syz.5.2845[11954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.286066][T11954] syz.5.2845[11954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.297707][ T29] audit: type=1326 audit(1732337367.896:17351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 173.332880][ T29] audit: type=1326 audit(1732337367.936:17352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 173.333811][T11954] syz.5.2845[11954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.356511][ T29] audit: type=1326 audit(1732337367.936:17353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 173.391681][ T29] audit: type=1326 audit(1732337367.936:17354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 173.415394][ T29] audit: type=1326 audit(1732337367.936:17355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 173.439116][ T29] audit: type=1326 audit(1732337367.936:17356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 173.462837][ T29] audit: type=1326 audit(1732337367.936:17357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 173.486553][ T29] audit: type=1326 audit(1732337367.936:17358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 173.510187][ T29] audit: type=1326 audit(1732337367.936:17359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 173.538994][T11954] Symlink component flag not implemented [ 173.545796][T11954] Symlink component flag not implemented (129) [ 173.546741][T11966] lo speed is unknown, defaulting to 1000 [ 173.563201][T11954] rock: directory entry would overflow storage [ 173.569398][T11954] rock: sig=0x4f50, size=4, remaining=3 [ 173.574972][T11954] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 173.601895][T11970] loop4: detected capacity change from 0 to 128 [ 173.608686][T11970] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.634748][T11970] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.646172][T11954] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2845'. [ 173.755377][T11986] loop5: detected capacity change from 0 to 512 [ 173.764789][T11986] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2854: corrupted in-inode xattr: invalid ea_ino [ 173.782750][T11986] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2854: couldn't read orphan inode 15 (err -117) [ 173.851808][T11993] loop6: detected capacity change from 0 to 8192 [ 173.967127][T11997] loop5: detected capacity change from 0 to 512 [ 173.989093][T11999] bond0: entered promiscuous mode [ 173.994185][T11999] bond_slave_0: entered promiscuous mode [ 173.999990][T11999] bond_slave_1: entered promiscuous mode [ 174.006214][T11999] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.014341][T11999] bond0: left promiscuous mode [ 174.019192][T11999] bond_slave_0: left promiscuous mode [ 174.024804][T11999] bond_slave_1: left promiscuous mode [ 174.056973][T12001] loop5: detected capacity change from 0 to 2048 [ 174.144174][T12011] FAULT_INJECTION: forcing a failure. [ 174.144174][T12011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.157374][T12011] CPU: 0 UID: 0 PID: 12011 Comm: syz.5.2865 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 174.167904][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 174.178010][T12011] Call Trace: [ 174.181312][T12011] [ 174.184258][T12011] dump_stack_lvl+0xf2/0x150 [ 174.188967][T12011] dump_stack+0x15/0x20 [ 174.193239][T12011] should_fail_ex+0x223/0x230 [ 174.197949][T12011] should_fail+0xb/0x10 [ 174.202158][T12011] should_fail_usercopy+0x1a/0x20 [ 174.207226][T12011] _copy_from_user+0x1e/0xb0 [ 174.212024][T12011] io_register_pbuf_ring+0x4b/0x3c0 [ 174.217334][T12011] __se_sys_io_uring_register+0x6ab/0x22e0 [ 174.223175][T12011] ? get_pid_task+0x8e/0xc0 [ 174.227730][T12011] ? proc_fail_nth_write+0x12a/0x150 [ 174.233097][T12011] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 174.238817][T12011] ? vfs_write+0x596/0x920 [ 174.243310][T12011] ? __fget_files+0x17c/0x1c0 [ 174.248061][T12011] ? fput+0x1c4/0x200 [ 174.252231][T12011] ? ksys_write+0x176/0x1b0 [ 174.256798][T12011] __x64_sys_io_uring_register+0x55/0x70 [ 174.262535][T12011] x64_sys_call+0x2c52/0x2dc0 [ 174.267286][T12011] do_syscall_64+0xc9/0x1c0 [ 174.271830][T12011] ? clear_bhb_loop+0x55/0xb0 [ 174.276585][T12011] ? clear_bhb_loop+0x55/0xb0 [ 174.281324][T12011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.287333][T12011] RIP: 0033:0x7f6273cfe819 [ 174.291778][T12011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.311410][T12011] RSP: 002b:00007f6272377038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 174.319855][T12011] RAX: ffffffffffffffda RBX: 00007f6273eb5fa0 RCX: 00007f6273cfe819 [ 174.327900][T12011] RDX: 0000000020000002 RSI: 0000000000000016 RDI: 0000000000000003 [ 174.335895][T12011] RBP: 00007f6272377090 R08: 0000000000000000 R09: 0000000000000000 [ 174.344133][T12011] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 174.352130][T12011] R13: 0000000000000000 R14: 00007f6273eb5fa0 R15: 00007ffe28b01648 [ 174.360244][T12011] [ 174.389210][T12015] loop1: detected capacity change from 0 to 128 [ 174.396087][T12015] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.408599][T12015] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.453258][T12019] loop5: detected capacity change from 0 to 1024 [ 174.464909][T12019] EXT4-fs: Ignoring removed nobh option [ 174.470503][T12019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.482686][T12019] ext4: Unknown parameter 'subj_user' [ 174.521482][T12021] lo speed is unknown, defaulting to 1000 [ 174.530055][T12019] Cannot find add_set index 0 as target [ 174.586093][T12025] loop5: detected capacity change from 0 to 512 [ 174.640913][T12026] loop2: detected capacity change from 0 to 512 [ 174.655071][T12030] ucma_write: process 1381 (syz.4.2873) changed security contexts after opening file descriptor, this is not allowed. [ 174.684608][T12026] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2872: corrupted in-inode xattr: invalid ea_ino [ 174.699137][T12026] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2872: couldn't read orphan inode 15 (err -117) [ 174.703239][T12030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.756040][T12030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.915869][T12046] loop2: detected capacity change from 0 to 128 [ 174.933581][T12046] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.946428][T12046] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 175.018308][T12047] lo speed is unknown, defaulting to 1000 [ 175.110708][ T11] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.138083][T12047] chnl_net:caif_netlink_parms(): no params data found [ 175.147853][ T11] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.193586][T12047] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.200716][T12047] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.208239][T12047] bridge_slave_0: entered allmulticast mode [ 175.214902][T12047] bridge_slave_0: entered promiscuous mode [ 175.222307][ T11] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.233060][T12047] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.240220][T12047] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.247496][T12047] bridge_slave_1: entered allmulticast mode [ 175.253834][T12047] bridge_slave_1: entered promiscuous mode [ 175.273021][T12047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.283267][ T11] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.295839][T12047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.317073][T12071] loop4: detected capacity change from 0 to 512 [ 175.328055][T12047] team0: Port device team_slave_0 added [ 175.336781][T12047] team0: Port device team_slave_1 added [ 175.363280][T12047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.370458][T12047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.396568][T12047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.408108][T12047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.415154][T12047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.441271][T12047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.452102][T12074] FAULT_INJECTION: forcing a failure. [ 175.452102][T12074] name failslab, interval 1, probability 0, space 0, times 0 [ 175.464934][T12074] CPU: 1 UID: 0 PID: 12074 Comm: +}[@ Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 175.471313][T12076] lo speed is unknown, defaulting to 1000 [ 175.474837][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 175.474856][T12074] Call Trace: [ 175.474863][T12074] [ 175.474872][T12074] dump_stack_lvl+0xf2/0x150 [ 175.474907][T12074] dump_stack+0x15/0x20 [ 175.474936][T12074] should_fail_ex+0x223/0x230 [ 175.510452][T12074] ? shmem_alloc_inode+0x34/0x50 [ 175.515495][T12074] should_failslab+0x8f/0xb0 [ 175.520190][T12074] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 175.525985][T12074] shmem_alloc_inode+0x34/0x50 [ 175.530770][T12074] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 175.536365][T12074] alloc_inode+0x3c/0x160 [ 175.540713][T12074] new_inode+0x1e/0x100 [ 175.544869][T12074] shmem_get_inode+0x24e/0x730 [ 175.549646][T12074] __shmem_file_setup+0x127/0x1f0 [ 175.554690][T12074] shmem_file_setup+0x3b/0x50 [ 175.559397][T12074] __se_sys_memfd_create+0x31d/0x5c0 [ 175.564704][T12074] __x64_sys_memfd_create+0x31/0x40 [ 175.570466][T12074] x64_sys_call+0x2d4c/0x2dc0 [ 175.575247][T12074] do_syscall_64+0xc9/0x1c0 [ 175.579881][T12074] ? clear_bhb_loop+0x55/0xb0 [ 175.584687][T12074] ? clear_bhb_loop+0x55/0xb0 [ 175.589450][T12074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.595472][T12074] RIP: 0033:0x7ff6397fe819 [ 175.599898][T12074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.619551][T12074] RSP: 002b:00007ff637e76e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 175.628091][T12074] RAX: ffffffffffffffda RBX: 0000000000000769 RCX: 00007ff6397fe819 [ 175.636132][T12074] RDX: 00007ff637e76ef0 RSI: 0000000000000000 RDI: 00007ff639871fca [ 175.644112][T12074] RBP: 0000000020000fc0 R08: 00007ff637e76bb7 R09: 00007ff637e76e40 [ 175.652156][T12074] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000240 [ 175.660242][T12074] R13: 00007ff637e76ef0 R14: 00007ff637e76eb0 R15: 0000000020000080 [ 175.668232][T12074] [ 175.697961][T12047] hsr_slave_0: entered promiscuous mode [ 175.704083][T12047] hsr_slave_1: entered promiscuous mode [ 175.711049][T12047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.718830][T12047] Cannot create hsr debugfs directory [ 175.785583][ T11] bridge_slave_1: left allmulticast mode [ 175.791688][ T11] bridge_slave_1: left promiscuous mode [ 175.797618][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.806599][ T11] bridge_slave_0: left allmulticast mode [ 175.807220][T12086] loop6: detected capacity change from 0 to 8192 [ 175.812446][ T11] bridge_slave_0: left promiscuous mode [ 175.824617][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.915494][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.930750][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.943803][ T11] bond0 (unregistering): Released all slaves [ 175.965981][ T11] bond1 (unregistering): Released all slaves [ 175.974418][ T11] bond2 (unregistering): Released all slaves [ 175.984219][ T11] bond3 (unregistering): Released all slaves [ 175.993393][ T11] bond4 (unregistering): Released all slaves [ 176.002364][ T11] bond5 (unregistering): Released all slaves [ 176.011476][ T11] bond6 (unregistering): Released all slaves [ 176.024612][T12099] loop2: detected capacity change from 0 to 128 [ 176.031331][T12099] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.047693][T12099] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.063408][T12100] loop5: detected capacity change from 0 to 512 [ 176.069802][ T11] bond7 (unregistering): Released all slaves [ 176.072158][ T11] bond8 (unregistering): Released all slaves [ 176.087006][T12100] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2892: corrupted in-inode xattr: invalid ea_ino [ 176.089394][ T11] bond9 (unregistering): Released all slaves [ 176.108028][T12100] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2892: couldn't read orphan inode 15 (err -117) [ 176.112351][ T11] bond10 (unregistering): Released all slaves [ 176.129299][ T11] bond11 (unregistering): Released all slaves [ 176.137844][ T11] bond12 (unregistering): Released all slaves [ 176.146307][ T11] bond13 (unregistering): Released all slaves [ 176.154969][ T11] bond14 (unregistering): Released all slaves [ 176.163731][ T11] bond15 (unregistering): Released all slaves [ 176.172382][ T11] bond16 (unregistering): Released all slaves [ 176.181084][ T11] bond17 (unregistering): Released all slaves [ 176.222986][T12096] bond0: entered promiscuous mode [ 176.228119][T12096] bond_slave_0: entered promiscuous mode [ 176.233881][T12096] bond_slave_1: entered promiscuous mode [ 176.241739][T12096] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 176.253366][T12096] bond0: left promiscuous mode [ 176.258224][T12096] bond_slave_0: left promiscuous mode [ 176.263724][T12096] bond_slave_1: left promiscuous mode [ 176.341999][T12109] syz.4.2895[12109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.342123][T12109] syz.4.2895[12109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.372984][T12109] syz.4.2895[12109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.386613][ T11] hsr_slave_0: left promiscuous mode [ 176.405676][ T11] hsr_slave_1: left promiscuous mode [ 176.412387][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.419934][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.443437][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.451075][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.491320][ T11] veth1_vlan: left promiscuous mode [ 176.496719][ T11] veth0_vlan: left promiscuous mode [ 176.584182][ T11] team0 (unregistering): Port device team_slave_1 removed [ 176.598105][ T11] team0 (unregistering): Port device team_slave_0 removed [ 176.869351][T12154] lo speed is unknown, defaulting to 1000 [ 176.921672][ T11] IPVS: stop unused estimator thread 0... [ 177.005514][T12047] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.015671][T12047] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.031875][T12047] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.057177][T12047] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.070662][T12175] loop6: detected capacity change from 0 to 128 [ 177.077640][T12175] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.097828][T12175] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.113822][T12177] loop2: detected capacity change from 0 to 256 [ 177.131494][T12177] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.181349][T12047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.221770][T12047] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.251804][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.258943][T10365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.282142][T10365] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.289331][T10365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.308569][T12183] loop2: detected capacity change from 0 to 8192 [ 177.347725][T12188] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 177.347725][T12188] program syz.6.2909 not setting count and/or reply_len properly [ 177.348178][T12047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.497107][T12211] loop6: detected capacity change from 0 to 512 [ 177.519427][T12211] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2911: corrupted in-inode xattr: invalid ea_ino [ 177.536060][T12211] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2911: couldn't read orphan inode 15 (err -117) [ 177.567395][T12047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.722456][T12047] veth0_vlan: entered promiscuous mode [ 177.737574][T12240] program syz.5.2914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.749259][T12047] veth1_vlan: entered promiscuous mode [ 177.779906][T12047] veth0_macvtap: entered promiscuous mode [ 177.825655][T12047] veth1_macvtap: entered promiscuous mode [ 177.856857][T12249] lo speed is unknown, defaulting to 1000 [ 177.870155][T12047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.884078][T12047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.884095][T12047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.905479][T12047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.905495][T12047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.905513][T12047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.933651][T12047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.943901][T12047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.943948][T12047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.943961][T12047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.943989][T12047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.944003][T12047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.944020][T12047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.945437][T12047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.993529][T12047] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.047889][T12047] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.047952][T12047] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.047992][T12047] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.180209][T12278] loop2: detected capacity change from 0 to 128 [ 178.195461][T12278] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.214764][T12277] program syz.6.2920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.217862][T12278] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.242371][T12274] loop1: detected capacity change from 0 to 128 [ 178.263882][T12274] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.278000][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 178.278015][ T29] audit: type=1326 audit(1732337373.957:17814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 178.280919][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 178.284273][ T29] audit: type=1326 audit(1732337373.957:17815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 178.341604][ T29] audit: type=1326 audit(1732337373.957:17816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 178.365287][ T29] audit: type=1326 audit(1732337373.957:17817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 178.388882][ T29] audit: type=1326 audit(1732337373.957:17818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 178.412506][ T29] audit: type=1326 audit(1732337373.957:17819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 178.436055][ T29] audit: type=1326 audit(1732337373.957:17820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 178.459753][ T29] audit: type=1326 audit(1732337373.957:17821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 178.483262][ T29] audit: type=1326 audit(1732337373.957:17822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 178.506942][ T29] audit: type=1326 audit(1732337373.957:17823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6397fe819 code=0x7ffc0000 [ 178.607145][T12296] loop2: detected capacity change from 0 to 512 [ 178.635738][T12296] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2926: corrupted in-inode xattr: invalid ea_ino [ 178.653677][T12296] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2926: couldn't read orphan inode 15 (err -117) [ 178.774027][T12306] loop4: detected capacity change from 0 to 8192 [ 178.832783][T12320] lo speed is unknown, defaulting to 1000 [ 179.053058][T12340] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2931'. [ 179.098740][T12343] FAULT_INJECTION: forcing a failure. [ 179.098740][T12343] name failslab, interval 1, probability 0, space 0, times 0 [ 179.111485][T12343] CPU: 0 UID: 0 PID: 12343 Comm: syz.1.2934 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 179.121974][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 179.132035][T12343] Call Trace: [ 179.135316][T12343] [ 179.138248][T12343] dump_stack_lvl+0xf2/0x150 [ 179.142994][T12343] dump_stack+0x15/0x20 [ 179.147160][T12343] should_fail_ex+0x223/0x230 [ 179.151877][T12343] ? audit_log_d_path+0x96/0x250 [ 179.156873][T12343] should_failslab+0x8f/0xb0 [ 179.161558][T12343] __kmalloc_cache_noprof+0x4b/0x2a0 [ 179.166868][T12343] audit_log_d_path+0x96/0x250 [ 179.171689][T12343] ? __rcu_read_unlock+0x4e/0x70 [ 179.176679][T12343] audit_log_d_path_exe+0x42/0x70 [ 179.181817][T12343] audit_log_task+0x155/0x180 [ 179.186584][T12343] audit_seccomp+0x68/0x130 [ 179.191153][T12343] __seccomp_filter+0x6fa/0x1180 [ 179.196244][T12343] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 179.201972][T12343] ? vfs_write+0x596/0x920 [ 179.206430][T12343] ? __rcu_read_unlock+0x4e/0x70 [ 179.211376][T12343] ? __fget_files+0x17c/0x1c0 [ 179.216090][T12343] __secure_computing+0x9f/0x1c0 [ 179.221112][T12343] syscall_trace_enter+0xd1/0x1f0 [ 179.226268][T12343] ? fpregs_assert_state_consistent+0x83/0xa0 [ 179.232360][T12343] do_syscall_64+0xaa/0x1c0 [ 179.236932][T12343] ? clear_bhb_loop+0x55/0xb0 [ 179.241672][T12343] ? clear_bhb_loop+0x55/0xb0 [ 179.246361][T12343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.252331][T12343] RIP: 0033:0x7f3b77d6d25c [ 179.256773][T12343] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 179.276546][T12343] RSP: 002b:00007f3b763e1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.284974][T12343] RAX: ffffffffffffffda RBX: 00007f3b77f25fa0 RCX: 00007f3b77d6d25c [ 179.292979][T12343] RDX: 000000000000000f RSI: 00007f3b763e10a0 RDI: 0000000000000006 [ 179.300952][T12343] RBP: 00007f3b763e1090 R08: 0000000000000000 R09: 0000000000000000 [ 179.308959][T12343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.316979][T12343] R13: 0000000000000000 R14: 00007f3b77f25fa0 R15: 00007ffd40977658 [ 179.324962][T12343] [ 179.408545][T12351] loop6: detected capacity change from 0 to 128 [ 179.416213][T12351] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.434303][T12351] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.527493][T12357] loop1: detected capacity change from 0 to 512 [ 179.535286][T12357] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 179.658415][T12363] loop6: detected capacity change from 0 to 8192 [ 179.667307][T12363] vfat: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615PH"AU+G#E`!>mÊh@v572*ք8ˆ3i'}g躘vΐPrHkƞ:EcFI^L 7p /~ERݎP["' [ 179.702878][T12365] ebtables: ebtables: counters copy to user failed while replacing table [ 179.733135][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 179.740608][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 179.748197][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 179.754441][T12373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.755628][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 179.755659][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 179.780934][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 179.788381][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 179.795922][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 179.803316][ T9] hid-generic 0000:0000:0000.0006: item fetching failed at offset 8/43 [ 179.811919][ T9] hid-generic 0000:0000:0000.0006: probe with driver hid-generic failed with error -22 [ 179.915130][T12384] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.025615][T12386] loop2: detected capacity change from 0 to 2048 [ 180.519651][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2954'. [ 180.577197][T12401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.589333][T12401] tipc: Started in network mode [ 180.594314][T12401] tipc: Node identity ac1414aa, cluster identity 4711 [ 180.601866][T12401] tipc: New replicast peer: 100.1.1.1 [ 180.607373][T12401] tipc: Enabled bearer , priority 10 [ 180.615239][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2956'. [ 180.697677][T12408] loop6: detected capacity change from 0 to 164 [ 180.705432][T12408] Unable to read rock-ridge attributes [ 180.711583][T12408] Unable to read rock-ridge attributes [ 180.812440][T12413] loop5: detected capacity change from 0 to 164 [ 180.820723][T12413] Unable to read rock-ridge attributes [ 180.827982][T12413] Unable to read rock-ridge attributes [ 180.857329][T12415] loop2: detected capacity change from 0 to 512 [ 180.869833][T12415] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2960: corrupted in-inode xattr: invalid ea_ino [ 180.883854][T12415] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2960: couldn't read orphan inode 15 (err -117) [ 181.103096][T12422] loop2: detected capacity change from 0 to 8192 [ 181.284467][T12422] ================================================================== [ 181.292578][T12422] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 181.300503][T12422] [ 181.302833][T12422] write to 0xffff888118887a28 of 4 bytes by task 12423 on cpu 0: [ 181.310563][T12422] __mark_inode_dirty+0x24e/0x7e0 [ 181.315599][T12422] mark_buffer_dirty+0x165/0x250 [ 181.320551][T12422] block_write_end+0x123/0x210 [ 181.325331][T12422] generic_write_end+0x5c/0x160 [ 181.330194][T12422] fat_write_end+0x4e/0x160 [ 181.334708][T12422] generic_perform_write+0x33c/0x4a0 [ 181.340024][T12422] __generic_file_write_iter+0xa1/0x120 [ 181.345613][T12422] generic_file_write_iter+0x77/0x1c0 [ 181.351006][T12422] iter_file_splice_write+0x5f1/0x980 [ 181.356392][T12422] direct_splice_actor+0x160/0x2c0 [ 181.361513][T12422] splice_direct_to_actor+0x302/0x670 [ 181.366903][T12422] do_splice_direct+0xd7/0x150 [ 181.371692][T12422] do_sendfile+0x398/0x660 [ 181.376127][T12422] __x64_sys_sendfile64+0x110/0x150 [ 181.381342][T12422] x64_sys_call+0xfbd/0x2dc0 [ 181.385950][T12422] do_syscall_64+0xc9/0x1c0 [ 181.390495][T12422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.396400][T12422] [ 181.398724][T12422] read to 0xffff888118887a28 of 4 bytes by task 12422 on cpu 1: [ 181.406355][T12422] __mark_inode_dirty+0x58/0x7e0 [ 181.411298][T12422] fat_update_time+0x1e8/0x200 [ 181.416071][T12422] touch_atime+0x14f/0x350 [ 181.420498][T12422] filemap_splice_read+0x8a5/0x910 [ 181.425627][T12422] splice_direct_to_actor+0x269/0x670 [ 181.431016][T12422] do_splice_direct+0xd7/0x150 [ 181.435789][T12422] do_sendfile+0x398/0x660 [ 181.440214][T12422] __x64_sys_sendfile64+0x110/0x150 [ 181.445416][T12422] x64_sys_call+0xfbd/0x2dc0 [ 181.450026][T12422] do_syscall_64+0xc9/0x1c0 [ 181.454542][T12422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.460445][T12422] [ 181.462766][T12422] value changed: 0x00000008 -> 0x00000038 [ 181.468482][T12422] [ 181.470802][T12422] Reported by Kernel Concurrency Sanitizer on: [ 181.476948][T12422] CPU: 1 UID: 0 PID: 12422 Comm: syz.2.2963 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 181.487377][T12422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 181.497704][T12422] ================================================================== [ 181.654523][ T3395] tipc: Node number set to 2886997162