last executing test programs: 51.22756104s ago: executing program 0 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x1000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb535275b725e104757e7dc00c6519a85ef828f711330ff2b0800", "dc5db43f"}, 0x38) 50.767997199s ago: executing program 0 (id=140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x1300) 50.712717658s ago: executing program 0 (id=141): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001cc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x180, 0x180, 0x340, 0x250, 0x250, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, &(0x7f0000000380), {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffff00, 'pimreg\x00', 'gre0\x00', {}, {}, 0x62, 0x2, 0x2b}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x20, 0x3}}}, {{@ip={@multicast1, @broadcast, 0x0, 0xff000000, 'wg2\x00', 'macvtap0\x00', {}, {0x4f626836f170a857}, 0x62, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x8}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x21, 0x1, 0x22}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0x0, 0xff, 0xffffffff, 0xff], 0x4e20, 0x4e22, 0x4e20, 0x4e22, 0xfafa, 0x523d, 0x2, 0x4, 0x81}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x7, 0x401], 0x1}}, @common=@ttl={{0x28}, {0x3, 0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xcf, 0x2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400200) write$sndseq(r3, &(0x7f0000000240)=[{0x4, 0x1d, 0x6, 0x9, @tick=0x6, {0x1}, {0x1, 0x9}, @queue={0xf9, {0x4, 0xfffffc01}}}, {0x44, 0x2e, 0xf, 0x8d, @tick=0xfffffffd, {0x5, 0x6}, {0x9}, @queue={0x5, {0x6, 0xb}}}, {0x2, 0x45, 0x3, 0xf, @tick=0x1, {0x3, 0x4}, {0x16, 0x3}, @control={0x1, 0x4, 0x6}}, {0x6, 0x2, 0x2, 0x0, @tick, {0x5, 0x81}, {0x29}, @result={0x3, 0x5}}, {0x9, 0x6d, 0x4, 0x2, @time={0x464c, 0x4}, {0x2, 0xa8}, {0x2, 0xf}, @queue={0x4, {0xfffffffb, 0x5}}}, {0xca, 0x5, 0x2, 0x77, @tick=0x7, {0x4, 0xf0}, {0x8, 0x3}, @result={0x101, 0x2372}}, {0x0, 0x7f, 0xa1, 0xff, @tick=0x6, {0x6, 0x3}, {0xf7, 0x9}, @control={0x66, 0x0, 0xdf4}}, {0x1, 0xc2, 0x4, 0x71, @tick=0xe, {0x4, 0x9c}, {0x7, 0x3}, @addr={0x9, 0x1}}], 0xe0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007665"], 0xfc}}, 0x0) 50.652715248s ago: executing program 0 (id=142): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) syz_io_uring_setup(0x4172, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r3 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000240)="1e", 0x1}], 0x1}}], 0x1, 0x60cd894) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept4$unix(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r7 = epoll_create1(0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000140)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x821c10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 50.519969068s ago: executing program 0 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8800", @ANYRES16=r2, @ANYBLOB="010000000000fdffffff03000000740001801c00028008000300080000e4080004000000000008000300090000000d0001007564703a73797a3100000000080003"], 0x88}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x40}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r4, &(0x7f00000003c0), 0x8) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000c80)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {}, {}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f", "1f00"}, 0x38) 50.015986886s ago: executing program 0 (id=145): open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x17d) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x1300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 50.015685246s ago: executing program 32 (id=145): open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x17d) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x1300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 4.125556743s ago: executing program 1 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) syz_open_dev$loop(&(0x7f0000001000), 0x5, 0x381880) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) setgroups(0x40000000000001a8, &(0x7f00000003c0)) truncate(&(0x7f0000000200)='./file2\x00', 0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x4}, 0x18) mq_unlink(&(0x7f0000000000)='eth0\x00') 4.051598422s ago: executing program 1 (id=742): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3.15907883s ago: executing program 5 (id=754): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sync() futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 2.966338769s ago: executing program 5 (id=755): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010000800d00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000240)={'team0\x00', {0x2, 0x0, @empty}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f00000000c0), 0x10) 2.907808519s ago: executing program 5 (id=757): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$TCFLSH(r4, 0x540b, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100"], 0x2c}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r8, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x48800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9, 0x0, 0x1bda}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000000540)=ANY=[@ANYRESDEC=r3, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r10, 0x0, 0x4) syz_io_uring_setup(0x6, &(0x7f00000002c0)={0x0, 0x40d2, 0x100, 0x0, 0xed, 0x0, r10}, &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r10, 0x1e, &(0x7f0000000200)={r7}, 0x1) write$binfmt_script(r10, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) fdatasync(r10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) 2.085762256s ago: executing program 5 (id=780): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGBITSW(r0, 0x40095505, 0x0) 942.788473ms ago: executing program 5 (id=791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000000)=""/113, 0x71}], 0x1, 0x0, 0x0) lseek(r2, 0xc1e, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) fcntl$setstatus(r3, 0x407, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) flock(r5, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000140000", @ANYRES32, @ANYBLOB="0001010000fdd40000000000000000000000001bbe8f267023332d14c078498a8011b3d34c7bd03780f9e6060dfc70d9c4e08006c3c38bc2cbcbcc7503a889e1c9c970ad1b53", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000540000002000000070000000000006e00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(r8) 882.629173ms ago: executing program 4 (id=793): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010000800d00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000240)={'team0\x00', {0x2, 0x0, @empty}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f00000000c0), 0x10) 846.520012ms ago: executing program 4 (id=794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0xff7) 846.204582ms ago: executing program 4 (id=795): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x326b, 0x6c05c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd7, 0x3, 0x4, 0x100000001, 0x20000008, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x806, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="30010000120001000000000000000000100000000c0000000000000000000000100102"], 0x130}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) r4 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r4, 0x0, 0x0) unshare(0x68040200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000300)=@ieee802154, 0x80, &(0x7f0000004c80)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/204, 0xcc}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000000900)=""/243, 0xf3}, {&(0x7f0000004b00)=""/178, 0xb2}, {&(0x7f0000004bc0)=""/160, 0xa0}], 0xa, &(0x7f0000000500)=""/88, 0x58}, 0x0) listen(r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000600)=""/161, 0xa1}], 0x1, 0x91, 0x2) socket$packet(0x11, 0x0, 0x300) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) 837.693473ms ago: executing program 3 (id=796): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8ec0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = creat(0x0, 0x0) close(r3) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$tipc(0x1e, 0x5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 803.362612ms ago: executing program 3 (id=797): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x12, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x826, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) link(0x0, 0x0) 748.152692ms ago: executing program 4 (id=798): socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x467d, &(0x7f0000000080)={0x0, 0x2132, 0x40, 0x0, 0x3c9}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000440)=[@ioring_restriction_register_op={0x0, 0x37}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10) 747.482352ms ago: executing program 5 (id=799): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000280)='./file2\x00', 0xb4056, &(0x7f0000000240)={[{@dioread_nolock}, {@orlov}, {@data_ordered}]}, 0xfc, 0x466, &(0x7f00000002c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6, 0x7f, 0x7, 0x9022, 0xffffffffffffffff, 0x3cf, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0xf, @value, @void, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000006000000000000000100040018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) setpriority(0x1, 0x0, 0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file2\x00', 0x81c0, 0x0) unshare(0x28020480) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) 731.878642ms ago: executing program 3 (id=800): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) 655.924912ms ago: executing program 3 (id=801): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r2 = dup2(r1, r1) statx(r1, &(0x7f0000000400)='./file0\x00', 0x2000, 0x800, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), 0x100000, &(0x7f0000000b00)={'trans=xen,', {[{@directio}, {@cachetag={'cachetag', 0x3d, 'kfree\x00'}}, {@cache_none}, {@nodevmap}, {@access_uid={'access', 0x3d, r3}}, {@dfltuid}, {@cache_readahead}, {@msize={'msize', 0x3d, 0x3}}, {@cache_mmap}], [{@flag='mand'}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7ffb, 0x9, 0x1, 0x9, 0x36}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800ebffffff00000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) close_range(r3, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="021200000200000000000000000000004068cf74e4e6d49319df66a162"], 0x10}}, 0x0) 569.267091ms ago: executing program 4 (id=803): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGBITSW(r0, 0x40095505, 0x0) 555.261282ms ago: executing program 1 (id=804): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 464.086551ms ago: executing program 2 (id=808): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) membarrier(0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800ebffffff00000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) close_range(r3, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="021200000200000000000000000000004068cf74e4e6d49319df66a162"], 0x10}}, 0x0) 387.833221ms ago: executing program 1 (id=809): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x326b, 0x6c05c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd7, 0x3, 0x4, 0x100000001, 0x20000008, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x806, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="30010000120001000000000000000000100000000c0000000000000000000000100102"], 0x130}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) r4 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r4, 0x0, 0x0) unshare(0x68040200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000300)=@ieee802154, 0x80, &(0x7f0000004c80)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/204, 0xcc}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000000900)=""/243, 0xf3}, {&(0x7f0000004b00)=""/178, 0xb2}, {&(0x7f0000004bc0)=""/160, 0xa0}], 0xa, &(0x7f0000000500)=""/88, 0x58}, 0x0) listen(r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000600)=""/161, 0xa1}], 0x1, 0x91, 0x2) socket$packet(0x11, 0x0, 0x300) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) 376.004251ms ago: executing program 2 (id=810): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x80, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) close(r1) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, 0x80010, r0, 0x80000000) 319.986971ms ago: executing program 2 (id=811): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000000000000000000100000000760028040e00000001000004030000000a000000040000000500000007000000000000070000000000002e00395bc141b4fcc075c2f0ccac2fd15d1e276d27792a5a29be384f432dc9c1aa1f6557c865a4672ec66f9386e9dee9"], &(0x7f0000000300)=""/241, 0x50, 0xf1, 0x1, 0x6, 0x10000, @value}, 0x28) r1 = syz_io_uring_complete(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x1e00, 0x99dde2aa200028a, '\x00', 0x0, @sk_msg, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r3}, 0x10) ioperm(0x3, 0x4, 0x100000a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000580)="2e990fb4cd0cc3b17514d19c5ba42bb32d0a3482b1cf56d229856f5c8f568851b0d3b0e501a9e0cd301b8cda22501c17ef9489a20752069a4ddce4e07681995768d990c92dbee9af6c5bf31580303b1106bc98740127b0369c5e21ffd4d0cc4742a931") bpf$MAP_CREATE(0x0, 0x0, 0x48) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) 311.082701ms ago: executing program 2 (id=812): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) 278.036271ms ago: executing program 2 (id=813): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="28000000120097023dbd7000fedbdf2507"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xb83c20e0c9244c7) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000f0000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200828500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x62, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00']) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xe4, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x94, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0xb112, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x4}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0xe4}}, 0x0) 194.92893ms ago: executing program 1 (id=814): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) membarrier(0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800ebffffff00000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) close_range(r3, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="021200000200000000000000000000004068cf74e4e6d49319df66a162"], 0x10}}, 0x0) 94.82327ms ago: executing program 1 (id=815): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000000f00)="$eJzs3U1sHOUZAOB3HJsEI6WIVimKQpgEKgUJzHoNpi4HWNZje2C9a+2uq0RVRSNwkBUHKBS15AJRJWirVlVPPVKu3HqjqtRKPbQ9VSqHXnpD4lRRqX+iqpBczew6/v9JcEIgz2PF3+zsO9/3zmY978za+20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJHUJyuV0SQa+bfnT6fbq0+2W7M73L/S32/XNes8vm7ciKT4F4cOxUf/6q370urdR4pvJ+NY79axOFQ0h+LibUduf/SLgwMr2++Q0NU6sce4JOL1IqnzZ5eWFl66BolcRz/69RVv8t/l4vt01sw7rXy2Np2leaeVToyPVx6cmeqkU3kj65zpdLPZtN7Oat1WOz1Vvy8dnZgYS7ORM6355vRkrZGtrHzkgWqlMp4+OTKX1dqdVvPBJ6NTn8kbjbw5XcZUK9+NIuaR4on4VN5Nu1ltNk3PLS4tjK3JKtkq1SJodKs7DvSeP8fuvf2DV97/5+JC8YTcbn+T/hOzOjparY6OPzzx8COVymC1Ul2/orJBXI6IgYgi4po8afkM2d8DOHwCA/36H43IoxnzcTrSDV9DETEU9ZiMdrRitlj3l6FNUX0r9f8rD/79TzuNu7b+r1T5O1fvPhpl/T/eu3V8u/q/KYsdv4auKHpPXy/Hq3ExzsfZWIqlWIiX9rf/g/ue8cAn7SFZd2s6smhGHp1oRR6zUSvXpP01aUzEeIxHJZ6OmZiKTqQxFXk0IotOnIlOdCMrn1H1aEcWtehGK9qRxqmox32RxmhMxESMRRpZjMSZaMV8NGM6Hoha2cu5WCwf97ENWR65NX713J8/eKtYvhw0utNuFSdzRdA/dgjaVO53rP/Ly8X5wsYI9f9mdw2O4nB1llfqPwAAAPC5lZSvviflS/x3lUtTeSP7xh627A5eh/QAAACAfVD+5v9Y0QwVS3dFUlz/V7aIfO+65wYAAADsj6R8j10SEcNxd2/pXCzG67EQW70IAAAAAHwGlb//P140wxGvlStWpktx/Q8AAACfEz/Ybo7991fm2O3MHUx+U84BnFyaO31vcqFWxNUuHOht12++frnH7tTR5HC/k7IZH7x4WxIRg/XsWLIy++XHB3vth+X3o6tzCWw313/Sbu+YQOycQHkrfhwnejEnnu21z/bvSXqjDE/ljWyk3mo8Wk6JWPzrvvL84vciitF/2Jw9nMS5xaWFkWdeWHq2zOVS0culC/0JFNfNo7j8hR1zWe4/AnHX1ns8VL4Roz/ucG/cytr9Hyi3/t9yOc/stvufrB3zjTjZizk53GuHV+7pjXmoGHN05NHRqNUOD3Sz091XltfsfT+L0d32fJf/hTfinl7MPafu6TVbZFFdl8Xzm7Oors2i91jEwD5l8daJ107/5/etJBvbLYuxK8hi+UDExiwAPi3nyll/VqvQrWUVKopKoaj/G+rurStb7uFY++/VUXpnGR/3u42INbVuMDZW99W+91bdl6N3RD/ViznVO58YPLpFXalscUR/cfHFP/SP6A+98/NffPP4H39ZjntV1e2duK8X02/ijt9tU2OLff7Jhqr6drHF21uOW5yDdRrVJC5FHPjOhRfjyMuvXnxg8cLZ5xaeW3i+Wh0brzxUqTxcjaHyVKHf7JApADev3T9jZ9uIW/pdJA9td1Xdr3h3XP6TgpF4Jl6IpSjOAO7uxd69edx3iyvxNX+GcP8uV63Daz7h5f5dri1XY6ubY5PYJnZszSP25Z+VzUfX5L8DAK6LkzvU4V3q/+VX5u/f5bp7fS3fcHUc29fyrXz1mj4aAHBzyNofJsPdN5N2O597enRiYrTWncnSdqv+VNrOJ6ezNG92s3Z9ptacztK5dqvbqq+8cDyZddLO/Nxcq91Np1rtNAY6+enyk9/T/ke/d7LZWrOb1ztzjazWydJ6q9mt1bvpZN6pp3PzTzTyzkzWLjfuzGX1fCqv17p5q5l2WvPtejaSpp0sWxOYT2bNbj6VF4vNdK6dz9balyKiMT+bpZNZp97O57qtXocrY+XNqVZ7tux2ZPPu/+16P94AcCN4+dWL588uLS28dHULf91L8Ke9jwDAeqo0AAAAAAAAAAAAAADc+Da/Xa9Y+wneEXhlCwfjmg9xEy18rT8lY29NsXSDJPbpLXzrscfObxfzxGt3zuytn61/UrZ6q+ubhyNuefenvTWPbx/8/f7P3/7s6XsRcRWbLyc7xKw7TNxynQ9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCl/wcAAP//ez9qPw==") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) 65.33549ms ago: executing program 2 (id=816): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x1}, 0x18) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, @void, @value}, 0x94) 43.17334ms ago: executing program 3 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) syz_open_dev$loop(&(0x7f0000001000), 0x5, 0x381880) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) setgroups(0x40000000000001a8, &(0x7f00000003c0)) truncate(&(0x7f0000000200)='./file2\x00', 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x4}, 0x18) mq_unlink(&(0x7f0000000000)='eth0\x00') 0s ago: executing program 3 (id=818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) kernel console output (not intermixed with test programs): '. [ 54.772594][ T4319] loop3: detected capacity change from 0 to 512 [ 54.810925][ T4319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.834284][ T4319] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.846717][ T4314] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 54.854076][ T4314] vhci_hcd: invalid port number 23 [ 54.944313][ T4322] loop4: detected capacity change from 0 to 764 [ 55.057535][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.102469][ T4340] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.109919][ T4340] vhci_hcd: invalid port number 23 [ 55.133338][ T4342] loop3: detected capacity change from 0 to 256 [ 55.142648][ T4342] futex_wake_op: syz.3.251 tries to shift op by -1; fix this program [ 55.151223][ T4342] netlink: 'syz.3.251': attribute type 13 has an invalid length. [ 55.159102][ T4342] netlink: 152 bytes leftover after parsing attributes in process `syz.3.251'. [ 55.170016][ T4342] syz_tun: refused to change device tx_queue_len [ 55.176462][ T4342] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 55.192161][ T4344] netlink: 272 bytes leftover after parsing attributes in process `syz.5.252'. [ 55.248626][ T4349] FAULT_INJECTION: forcing a failure. [ 55.248626][ T4349] name failslab, interval 1, probability 0, space 0, times 0 [ 55.261384][ T4349] CPU: 0 UID: 0 PID: 4349 Comm: syz.3.254 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 55.261408][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 55.261420][ T4349] Call Trace: [ 55.261426][ T4349] [ 55.261432][ T4349] dump_stack_lvl+0xf2/0x150 [ 55.261465][ T4349] dump_stack+0x15/0x1a [ 55.261481][ T4349] should_fail_ex+0x223/0x230 [ 55.261529][ T4349] ? fsnotify_alloc_group+0x5b/0x170 [ 55.261558][ T4349] should_failslab+0x8f/0xb0 [ 55.261650][ T4349] __kmalloc_cache_noprof+0x4e/0x320 [ 55.261682][ T4349] fsnotify_alloc_group+0x5b/0x170 [ 55.261711][ T4349] do_inotify_init+0x5a/0x270 [ 55.261733][ T4349] __do_sys_inotify_init+0x10/0x20 [ 55.261756][ T4349] x64_sys_call+0x2c2a/0x2dc0 [ 55.261779][ T4349] do_syscall_64+0xc9/0x1c0 [ 55.261798][ T4349] ? clear_bhb_loop+0x55/0xb0 [ 55.261837][ T4349] ? clear_bhb_loop+0x55/0xb0 [ 55.261858][ T4349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.261894][ T4349] RIP: 0033:0x7fc38272cd29 [ 55.261907][ T4349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.261937][ T4349] RSP: 002b:00007fc380d97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 55.261953][ T4349] RAX: ffffffffffffffda RBX: 00007fc382945fa0 RCX: 00007fc38272cd29 [ 55.261963][ T4349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.261972][ T4349] RBP: 00007fc380d97090 R08: 0000000000000000 R09: 0000000000000000 [ 55.262026][ T4349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.262078][ T4349] R13: 0000000000000000 R14: 00007fc382945fa0 R15: 00007ffe4d324c58 [ 55.262092][ T4349] [ 55.286892][ T4345] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.468464][ T4345] vhci_hcd: invalid port number 23 [ 55.496902][ T4351] loop1: detected capacity change from 0 to 512 [ 55.527104][ T4351] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.547564][ T4351] __quota_error: 226 callbacks suppressed [ 55.547577][ T4351] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 55.563845][ T4351] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 55.573286][ T4351] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.255: Failed to acquire dquot type 0 [ 55.711626][ T4351] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 55.774409][ T4359] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.781906][ T4359] vhci_hcd: invalid port number 23 [ 55.788668][ T4351] EXT4-fs (loop1): 1 truncate cleaned up [ 55.812690][ T4351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.862319][ T29] audit: type=1326 audit(1737953874.166:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 55.890080][ T4373] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.892883][ T4375] loop4: detected capacity change from 0 to 256 [ 55.897578][ T4373] vhci_hcd: invalid port number 23 [ 55.908324][ T29] audit: type=1326 audit(1737953874.166:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 55.932335][ T29] audit: type=1326 audit(1737953874.166:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 55.955583][ T29] audit: type=1326 audit(1737953874.166:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 55.978948][ T29] audit: type=1326 audit(1737953874.166:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 56.002795][ T29] audit: type=1326 audit(1737953874.166:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 56.028094][ T29] audit: type=1326 audit(1737953874.296:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 56.040706][ T4375] futex_wake_op: syz.4.263 tries to shift op by -1; fix this program [ 56.051559][ T29] audit: type=1326 audit(1737953874.296:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 56.073377][ T4375] netlink: 'syz.4.263': attribute type 13 has an invalid length. [ 56.090589][ T4375] netlink: 152 bytes leftover after parsing attributes in process `syz.4.263'. [ 56.113913][ T4375] syz_tun: refused to change device tx_queue_len [ 56.120340][ T4375] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 56.158758][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.261243][ T4392] bio_check_eod: 13464 callbacks suppressed [ 56.261258][ T4392] syz.4.267: attempt to access beyond end of device [ 56.261258][ T4392] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 56.305808][ T4390] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.313230][ T4390] vhci_hcd: invalid port number 23 [ 56.332303][ T4395] FAULT_INJECTION: forcing a failure. [ 56.332303][ T4395] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 56.345632][ T4395] CPU: 1 UID: 0 PID: 4395 Comm: syz.3.269 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 56.345653][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 56.345663][ T4395] Call Trace: [ 56.345669][ T4395] [ 56.345675][ T4395] dump_stack_lvl+0xf2/0x150 [ 56.345702][ T4395] dump_stack+0x15/0x1a [ 56.345719][ T4395] should_fail_ex+0x223/0x230 [ 56.345745][ T4395] should_fail_alloc_page+0xfd/0x110 [ 56.345768][ T4395] __alloc_pages_noprof+0x109/0x340 [ 56.345789][ T4395] ___kmalloc_large_node+0x7a/0x120 [ 56.345878][ T4395] __kmalloc_large_noprof+0x1f/0xb0 [ 56.345896][ T4395] ksys_ioperm+0xfe/0x2e0 [ 56.345908][ T4395] ? __x64_sys_ioperm+0xd/0x20 [ 56.345969][ T4395] x64_sys_call+0x2d88/0x2dc0 [ 56.345982][ T4395] do_syscall_64+0xc9/0x1c0 [ 56.346073][ T4395] ? clear_bhb_loop+0x55/0xb0 [ 56.346087][ T4395] ? clear_bhb_loop+0x55/0xb0 [ 56.346100][ T4395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.346125][ T4395] RIP: 0033:0x7fc38272cd29 [ 56.346156][ T4395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.346165][ T4395] RSP: 002b:00007fc380d97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 56.346175][ T4395] RAX: ffffffffffffffda RBX: 00007fc382945fa0 RCX: 00007fc38272cd29 [ 56.346182][ T4395] RDX: 000000000000d644 RSI: 0000000000000006 RDI: 0000000000000000 [ 56.346188][ T4395] RBP: 00007fc380d97090 R08: 0000000000000000 R09: 0000000000000000 [ 56.346194][ T4395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.346200][ T4395] R13: 0000000000000000 R14: 00007fc382945fa0 R15: 00007ffe4d324c58 [ 56.346283][ T4395] [ 56.397428][ T4400] FAULT_INJECTION: forcing a failure. [ 56.397428][ T4400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.538369][ T4400] CPU: 0 UID: 0 PID: 4400 Comm: syz.5.272 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 56.538389][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 56.538398][ T4400] Call Trace: [ 56.538403][ T4400] [ 56.538474][ T4400] dump_stack_lvl+0xf2/0x150 [ 56.538500][ T4400] dump_stack+0x15/0x1a [ 56.538594][ T4400] should_fail_ex+0x223/0x230 [ 56.538625][ T4400] should_fail+0xb/0x10 [ 56.538649][ T4400] should_fail_usercopy+0x1a/0x20 [ 56.538795][ T4400] _copy_from_user+0x1c/0xa0 [ 56.538815][ T4400] copy_msghdr_from_user+0x54/0x2a0 [ 56.538847][ T4400] ? __fget_files+0x17c/0x1c0 [ 56.538899][ T4400] __sys_sendmsg+0x13e/0x230 [ 56.538934][ T4400] __x64_sys_sendmsg+0x46/0x50 [ 56.538955][ T4400] x64_sys_call+0x2734/0x2dc0 [ 56.539027][ T4400] do_syscall_64+0xc9/0x1c0 [ 56.539045][ T4400] ? clear_bhb_loop+0x55/0xb0 [ 56.539069][ T4400] ? clear_bhb_loop+0x55/0xb0 [ 56.539095][ T4400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.539148][ T4400] RIP: 0033:0x7f5d4621cd29 [ 56.539222][ T4400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.539266][ T4400] RSP: 002b:00007f5d44887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.539281][ T4400] RAX: ffffffffffffffda RBX: 00007f5d46435fa0 RCX: 00007f5d4621cd29 [ 56.539290][ T4400] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 56.539415][ T4400] RBP: 00007f5d44887090 R08: 0000000000000000 R09: 0000000000000000 [ 56.539427][ T4400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.539436][ T4400] R13: 0000000000000000 R14: 00007f5d46435fa0 R15: 00007ffd8678fef8 [ 56.539450][ T4400] [ 56.728382][ T4407] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.747981][ T4407] vhci_hcd: invalid port number 23 [ 57.176316][ T4424] loop1: detected capacity change from 0 to 512 [ 57.188346][ T4422] usb usb8: usbfs: process 4422 (syz.3.279) did not claim interface 0 before use [ 58.777518][ T4434] loop4: detected capacity change from 0 to 512 [ 58.805140][ T4424] EXT4-fs (loop1): too many log groups per flexible block group [ 58.812843][ T4424] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 58.830003][ T4424] EXT4-fs (loop1): mount failed [ 59.143222][ T4434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.169468][ T4434] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.176625][ T4434] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.282: Failed to acquire dquot type 1 [ 59.189944][ T4434] EXT4-fs (loop4): 1 truncate cleaned up [ 59.230123][ T4434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.267509][ T4443] loop5: detected capacity change from 0 to 512 [ 59.294763][ T4443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.377156][ T4441] loop3: detected capacity change from 0 to 256 [ 59.386142][ T4443] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.448661][ T4441] futex_wake_op: syz.3.284 tries to shift op by -1; fix this program [ 59.457595][ T4441] netlink: 'syz.3.284': attribute type 13 has an invalid length. [ 59.465374][ T4441] __nla_validate_parse: 1 callbacks suppressed [ 59.465385][ T4441] netlink: 152 bytes leftover after parsing attributes in process `syz.3.284'. [ 59.482838][ T4441] syz_tun: refused to change device tx_queue_len [ 59.489209][ T4441] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 59.588479][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.638824][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.661853][ T4447] loop2: detected capacity change from 0 to 512 [ 59.692927][ T4447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.706495][ T4447] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.718194][ T4453] loop3: detected capacity change from 0 to 256 [ 59.728538][ T4453] futex_wake_op: syz.3.287 tries to shift op by -1; fix this program [ 59.737318][ T4453] netlink: 'syz.3.287': attribute type 13 has an invalid length. [ 59.745094][ T4453] netlink: 152 bytes leftover after parsing attributes in process `syz.3.287'. [ 59.745195][ T4462] netlink: 272 bytes leftover after parsing attributes in process `syz.5.290'. [ 59.764513][ T4451] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 59.772283][ T4451] vhci_hcd: invalid port number 23 [ 59.794125][ T4453] syz_tun: refused to change device tx_queue_len [ 59.800536][ T4453] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 59.847873][ T4465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.291'. [ 59.878443][ T4461] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 59.882049][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 59.885944][ T4461] vhci_hcd: invalid port number 23 [ 59.951864][ T4473] loop3: detected capacity change from 0 to 512 [ 59.981959][ T4475] netlink: 14 bytes leftover after parsing attributes in process `syz.1.295'. [ 59.984542][ T4473] loop3: detected capacity change from 0 to 512 [ 59.999519][ T4475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.000324][ T4473] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.020800][ T4475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.031116][ T4475] bond0 (unregistering): Released all slaves [ 60.045442][ T4473] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.075298][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.094521][ T4473] EXT4-fs (loop3): 1 truncate cleaned up [ 60.102528][ T4473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.178156][ T4482] loop5: detected capacity change from 0 to 764 [ 60.241737][ T4482] rock: directory entry would overflow storage [ 60.248042][ T4482] rock: sig=0x4f50, size=4, remaining=3 [ 60.253680][ T4482] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 60.265273][ T4473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.294'. [ 60.286595][ T4473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.294'. [ 60.348869][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.435630][ T4492] loop3: detected capacity change from 0 to 512 [ 60.475467][ T4492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.488259][ T4492] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.518804][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.526509][ T4495] loop4: detected capacity change from 0 to 256 [ 60.558386][ T4495] futex_wake_op: syz.4.302 tries to shift op by -1; fix this program [ 60.580874][ T4495] netlink: 'syz.4.302': attribute type 13 has an invalid length. [ 60.588718][ T4495] netlink: 152 bytes leftover after parsing attributes in process `syz.4.302'. [ 60.618447][ T4495] syz_tun: refused to change device tx_queue_len [ 60.625042][ T4495] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 60.633295][ T4497] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.648379][ T4497] vhci_hcd: invalid port number 23 [ 60.801225][ T4504] syzkaller0: entered promiscuous mode [ 60.806832][ T4504] syzkaller0: entered allmulticast mode [ 60.876918][ T4506] syzkaller0: entered promiscuous mode [ 60.882613][ T4506] syzkaller0: entered allmulticast mode [ 60.985045][ T4515] SELinux: syz.3.305 (4515) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 61.089176][ T4516] SELinux: syz.4.306 (4516) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 61.107467][ T4536] loop2: detected capacity change from 0 to 1024 [ 61.122226][ T4536] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.151727][ T4536] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 61.176418][ T4536] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.191901][ T4536] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.309: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 61.236965][ T4536] EXT4-fs (loop2): Remounting filesystem read-only [ 61.243591][ T4536] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 61.258297][ T4536] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 61.280704][ T4536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.300108][ T4536] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 61.309417][ T4536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.444808][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 61.444832][ T29] audit: type=1400 audit(1737953879.746:1171): avc: denied { append } for pid=4528 comm="syz.2.309" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 61.445694][ T4529] netlink: 36 bytes leftover after parsing attributes in process `syz.2.309'. [ 61.451523][ T29] audit: type=1400 audit(1737953879.746:1172): avc: denied { open } for pid=4528 comm="syz.2.309" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 61.507154][ T29] audit: type=1400 audit(1737953879.756:1173): avc: denied { ioctl } for pid=4528 comm="syz.2.309" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 61.595467][ T4572] batman_adv: batadv0: Adding interface: dummy0 [ 61.601758][ T4572] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.635024][ T4572] batman_adv: batadv0: Interface activated: dummy0 [ 61.645186][ T29] audit: type=1400 audit(1737953879.946:1174): avc: denied { ioctl } for pid=4571 comm="syz.5.314" path="socket:[9655]" dev="sockfs" ino=9655 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.661480][ T4584] loop2: detected capacity change from 0 to 512 [ 61.683614][ T4586] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.693244][ T4586] vhci_hcd: invalid port number 23 [ 61.711598][ T4580] batadv0: mtu less than device minimum [ 61.717591][ T4580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 61.728328][ T4580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 61.739182][ T4580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 61.749947][ T4580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 61.760565][ T4580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 61.769398][ T4584] loop2: detected capacity change from 0 to 512 [ 61.771309][ T4580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 61.787741][ T4584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.888133][ T4584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 61.930766][ T29] audit: type=1326 audit(1737953880.186:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4621cd29 code=0x7ffc0000 [ 61.954276][ T29] audit: type=1326 audit(1737953880.196:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4621cd29 code=0x7ffc0000 [ 61.977884][ T29] audit: type=1326 audit(1737953880.196:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f5d4621cd29 code=0x7ffc0000 [ 62.001829][ T29] audit: type=1326 audit(1737953880.196:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4621cd29 code=0x7ffc0000 [ 62.025452][ T29] audit: type=1326 audit(1737953880.196:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4621cd29 code=0x7ffc0000 [ 62.048967][ T29] audit: type=1326 audit(1737953880.196:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5d4621cd29 code=0x7ffc0000 [ 62.072541][ T4584] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.099035][ T4610] loop3: detected capacity change from 0 to 764 [ 62.129781][ T4606] loop5: detected capacity change from 0 to 512 [ 62.163848][ T4606] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 62.227455][ T4606] EXT4-fs (loop5): failed to open journal device unknown-block(4,137) -6 [ 62.267466][ T4614] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.275539][ T4614] vhci_hcd: invalid port number 23 [ 62.386553][ T4637] syzkaller0: entered promiscuous mode [ 62.392098][ T4637] syzkaller0: entered allmulticast mode [ 62.437317][ T4644] dummy0: entered promiscuous mode [ 62.447931][ T4644] dummy0: left promiscuous mode [ 62.485603][ T4655] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.493024][ T4655] vhci_hcd: invalid port number 23 [ 62.520451][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 62.566441][ T4652] SELinux: syz.1.323 (4652) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 62.652436][ T4674] loop2: detected capacity change from 0 to 128 [ 62.733353][ T4684] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 62.784221][ T4684] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.784278][ T4687] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 62.800054][ T4684] bond0: (slave team0): Enslaving as an active interface with an up link [ 62.812743][ T4687] bond0: (slave team0): Releasing backup interface [ 62.826175][ T4687] bridge0: port 3(team0) entered blocking state [ 62.832592][ T4687] bridge0: port 3(team0) entered disabled state [ 62.849399][ T4687] team0: entered allmulticast mode [ 62.854577][ T4687] team_slave_0: entered allmulticast mode [ 62.860447][ T4687] team_slave_1: entered allmulticast mode [ 62.881494][ T4687] team0: entered promiscuous mode [ 62.886614][ T4687] team_slave_0: entered promiscuous mode [ 62.892320][ T4687] team_slave_1: entered promiscuous mode [ 63.242783][ T4698] loop3: detected capacity change from 0 to 256 [ 63.250920][ T4698] /dev/loop3: Can't open blockdev [ 63.262668][ T4698] futex_wake_op: syz.3.333 tries to shift op by -1; fix this program [ 63.273145][ T4698] netlink: 'syz.3.333': attribute type 13 has an invalid length. [ 63.282816][ T4698] syz_tun: refused to change device tx_queue_len [ 63.889100][ T4721] FAULT_INJECTION: forcing a failure. [ 63.889100][ T4721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.902299][ T4721] CPU: 1 UID: 0 PID: 4721 Comm: syz.5.337 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 63.902322][ T4721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.902388][ T4721] Call Trace: [ 63.902394][ T4721] [ 63.902400][ T4721] dump_stack_lvl+0xf2/0x150 [ 63.902472][ T4721] dump_stack+0x15/0x1a [ 63.902560][ T4721] should_fail_ex+0x223/0x230 [ 63.902589][ T4721] should_fail+0xb/0x10 [ 63.902621][ T4721] should_fail_usercopy+0x1a/0x20 [ 63.902692][ T4721] _copy_from_iter+0xd5/0xd00 [ 63.902707][ T4721] ? kmalloc_reserve+0x16e/0x190 [ 63.902725][ T4721] ? __build_skb_around+0x196/0x1f0 [ 63.902742][ T4721] ? __alloc_skb+0x21f/0x310 [ 63.902759][ T4721] ? __virt_addr_valid+0x1ed/0x250 [ 63.902782][ T4721] ? __check_object_size+0x364/0x520 [ 63.902812][ T4721] netlink_sendmsg+0x460/0x6e0 [ 63.902848][ T4721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.903004][ T4721] __sock_sendmsg+0x140/0x180 [ 63.903055][ T4721] ____sys_sendmsg+0x312/0x410 [ 63.903082][ T4721] __sys_sendmsg+0x19d/0x230 [ 63.903144][ T4721] __x64_sys_sendmsg+0x46/0x50 [ 63.903164][ T4721] x64_sys_call+0x2734/0x2dc0 [ 63.903188][ T4721] do_syscall_64+0xc9/0x1c0 [ 63.903211][ T4721] ? clear_bhb_loop+0x55/0xb0 [ 63.903270][ T4721] ? clear_bhb_loop+0x55/0xb0 [ 63.903292][ T4721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.903312][ T4721] RIP: 0033:0x7f5d4621cd29 [ 63.903325][ T4721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.903351][ T4721] RSP: 002b:00007f5d44887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.903379][ T4721] RAX: ffffffffffffffda RBX: 00007f5d46435fa0 RCX: 00007f5d4621cd29 [ 63.903388][ T4721] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 000000000000000a [ 63.903398][ T4721] RBP: 00007f5d44887090 R08: 0000000000000000 R09: 0000000000000000 [ 63.903407][ T4721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.903416][ T4721] R13: 0000000000000000 R14: 00007f5d46435fa0 R15: 00007ffd8678fef8 [ 63.903431][ T4721] [ 64.227400][ T4724] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.257054][ T4724] vhci_hcd: invalid port number 23 [ 64.443131][ T4740] loop1: detected capacity change from 0 to 764 [ 64.727251][ T4750] program syz.2.345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.811550][ T4751] tmpfs: Bad value for 'mpol' [ 64.941229][ T4752] loop5: detected capacity change from 0 to 256 [ 64.996591][ T4752] futex_wake_op: syz.5.344 tries to shift op by -1; fix this program [ 65.005237][ T4752] netlink: 'syz.5.344': attribute type 13 has an invalid length. [ 65.012991][ T4752] __nla_validate_parse: 3 callbacks suppressed [ 65.013003][ T4752] netlink: 152 bytes leftover after parsing attributes in process `syz.5.344'. [ 65.035286][ T4752] syz_tun: refused to change device tx_queue_len [ 65.041741][ T4752] net_ratelimit: 15 callbacks suppressed [ 65.041751][ T4752] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 65.121548][ T4763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 65.157426][ T35] kernel write not supported for file bpf-prog (pid: 35 comm: kworker/1:1) [ 65.232305][ T4770] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.239818][ T4770] vhci_hcd: invalid port number 23 [ 65.272594][ T4774] can0: slcan on ttyS3. [ 65.376738][ T4774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 65.530624][ T4794] loop1: detected capacity change from 0 to 512 [ 65.564498][ T4794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.598527][ T4794] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.606208][ T4794] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.356: Failed to acquire dquot type 1 [ 65.618256][ T4794] EXT4-fs (loop1): 1 truncate cleaned up [ 65.636615][ T4788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.354'. [ 65.705072][ T4788] can0 (unregistered): slcan off ttyS3. [ 66.085586][ T4800] syzkaller0: entered promiscuous mode [ 66.091199][ T4800] syzkaller0: entered allmulticast mode [ 66.112174][ T4806] FAULT_INJECTION: forcing a failure. [ 66.112174][ T4806] name failslab, interval 1, probability 0, space 0, times 0 [ 66.124989][ T4806] CPU: 1 UID: 0 PID: 4806 Comm: syz.4.361 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 66.125013][ T4806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.125024][ T4806] Call Trace: [ 66.125031][ T4806] [ 66.125037][ T4806] dump_stack_lvl+0xf2/0x150 [ 66.125060][ T4806] dump_stack+0x15/0x1a [ 66.125144][ T4806] should_fail_ex+0x223/0x230 [ 66.125173][ T4806] should_failslab+0x8f/0xb0 [ 66.125193][ T4806] __kmalloc_node_noprof+0xad/0x410 [ 66.125218][ T4806] ? __kvmalloc_node_noprof+0x72/0x170 [ 66.125245][ T4806] __kvmalloc_node_noprof+0x72/0x170 [ 66.125315][ T4806] file_tty_write+0x1a9/0x680 [ 66.125381][ T4806] ? iter_file_splice_write+0x1f2/0x980 [ 66.125398][ T4806] tty_write+0x28/0x30 [ 66.125436][ T4806] iter_file_splice_write+0x5f1/0x980 [ 66.125462][ T4806] ? __pfx_iter_file_splice_write+0x10/0x10 [ 66.125482][ T4806] direct_splice_actor+0x160/0x2c0 [ 66.125502][ T4806] splice_direct_to_actor+0x302/0x670 [ 66.125518][ T4806] ? __pfx_direct_splice_actor+0x10/0x10 [ 66.125563][ T4806] do_splice_direct+0xd7/0x150 [ 66.125581][ T4806] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 66.125636][ T4806] do_sendfile+0x398/0x660 [ 66.125660][ T4806] __x64_sys_sendfile64+0x110/0x150 [ 66.125682][ T4806] x64_sys_call+0xfbd/0x2dc0 [ 66.125741][ T4806] do_syscall_64+0xc9/0x1c0 [ 66.125761][ T4806] ? clear_bhb_loop+0x55/0xb0 [ 66.125857][ T4806] ? clear_bhb_loop+0x55/0xb0 [ 66.125926][ T4806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.125947][ T4806] RIP: 0033:0x7f1278efcd29 [ 66.125958][ T4806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.125972][ T4806] RSP: 002b:00007f1277567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 66.125990][ T4806] RAX: ffffffffffffffda RBX: 00007f1279115fa0 RCX: 00007f1278efcd29 [ 66.125999][ T4806] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 66.126032][ T4806] RBP: 00007f1277567090 R08: 0000000000000000 R09: 0000000000000000 [ 66.126121][ T4806] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 66.126132][ T4806] R13: 0000000000000000 R14: 00007f1279115fa0 R15: 00007ffc611252f8 [ 66.126145][ T4806] [ 66.405801][ T4808] FAULT_INJECTION: forcing a failure. [ 66.405801][ T4808] name failslab, interval 1, probability 0, space 0, times 0 [ 66.418546][ T4808] CPU: 1 UID: 0 PID: 4808 Comm: +}[@ Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 66.418641][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.418652][ T4808] Call Trace: [ 66.418658][ T4808] [ 66.418665][ T4808] dump_stack_lvl+0xf2/0x150 [ 66.418691][ T4808] dump_stack+0x15/0x1a [ 66.418707][ T4808] should_fail_ex+0x223/0x230 [ 66.418792][ T4808] should_failslab+0x8f/0xb0 [ 66.418814][ T4808] kmem_cache_alloc_noprof+0x52/0x320 [ 66.418843][ T4808] ? skb_clone+0x154/0x1f0 [ 66.418864][ T4808] skb_clone+0x154/0x1f0 [ 66.418893][ T4808] __netlink_deliver_tap+0x2bd/0x4f0 [ 66.418923][ T4808] netlink_unicast+0x64a/0x670 [ 66.418985][ T4808] netlink_sendmsg+0x5cc/0x6e0 [ 66.419087][ T4808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.419114][ T4808] __sock_sendmsg+0x140/0x180 [ 66.419223][ T4808] ____sys_sendmsg+0x312/0x410 [ 66.419325][ T4808] __sys_sendmsg+0x19d/0x230 [ 66.419358][ T4808] __x64_sys_sendmsg+0x46/0x50 [ 66.419441][ T4808] x64_sys_call+0x2734/0x2dc0 [ 66.419465][ T4808] do_syscall_64+0xc9/0x1c0 [ 66.419484][ T4808] ? clear_bhb_loop+0x55/0xb0 [ 66.419549][ T4808] ? clear_bhb_loop+0x55/0xb0 [ 66.419572][ T4808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.419605][ T4808] RIP: 0033:0x7fc38272cd29 [ 66.419620][ T4808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.419636][ T4808] RSP: 002b:00007fc380d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.419724][ T4808] RAX: ffffffffffffffda RBX: 00007fc382945fa0 RCX: 00007fc38272cd29 [ 66.419736][ T4808] RDX: 0000000000008840 RSI: 0000000020000740 RDI: 0000000000000005 [ 66.419746][ T4808] RBP: 00007fc380d97090 R08: 0000000000000000 R09: 0000000000000000 [ 66.419756][ T4808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.419765][ T4808] R13: 0000000000000000 R14: 00007fc382945fa0 R15: 00007ffe4d324c58 [ 66.419779][ T4808] [ 66.645163][ T4808] netem: change failed [ 66.649737][ T4794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.906264][ T4820] bridge0: entered promiscuous mode [ 66.938999][ T4822] loop4: detected capacity change from 0 to 764 [ 66.948749][ T4820] macvlan2: entered promiscuous mode [ 66.975870][ T4820] bridge0: port 3(macvlan2) entered blocking state [ 66.982482][ T4820] bridge0: port 3(macvlan2) entered disabled state [ 67.036469][ T4820] macvlan2: entered allmulticast mode [ 67.036873][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.041867][ T4820] bridge0: entered allmulticast mode [ 67.042471][ T4828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 67.052666][ T4822] rock: directory entry would overflow storage [ 67.071602][ T4822] rock: sig=0x4f50, size=4, remaining=3 [ 67.077218][ T4822] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 67.085228][ T4820] macvlan2: left allmulticast mode [ 67.090369][ T4820] bridge0: left allmulticast mode [ 67.111197][ T4820] bridge0: left promiscuous mode [ 67.142958][ T4800] SELinux: +}[@ (4800) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 67.295397][ T4852] loop1: detected capacity change from 0 to 512 [ 67.295812][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 67.295824][ T29] audit: type=1326 audit(1737953885.596:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 67.332922][ T29] audit: type=1326 audit(1737953885.596:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 67.356245][ T29] audit: type=1326 audit(1737953885.596:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 67.379847][ T29] audit: type=1326 audit(1737953885.596:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 67.403224][ T29] audit: type=1326 audit(1737953885.596:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 67.426654][ T29] audit: type=1326 audit(1737953885.596:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 67.450005][ T29] audit: type=1326 audit(1737953885.596:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa11596cd63 code=0x7ffc0000 [ 67.473441][ T29] audit: type=1326 audit(1737953885.596:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa11596b7df code=0x7ffc0000 [ 67.496584][ T29] audit: type=1326 audit(1737953885.596:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa11596cdb7 code=0x7ffc0000 [ 67.519891][ T29] audit: type=1326 audit(1737953885.606:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa11596b690 code=0x7ffc0000 [ 67.545839][ T4852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.560796][ T4852] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.702111][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.006000][ T4882] FAULT_INJECTION: forcing a failure. [ 68.006000][ T4882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.019159][ T4882] CPU: 0 UID: 0 PID: 4882 Comm: syz.3.380 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 68.019193][ T4882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.019203][ T4882] Call Trace: [ 68.019209][ T4882] [ 68.019215][ T4882] dump_stack_lvl+0xf2/0x150 [ 68.019257][ T4882] dump_stack+0x15/0x1a [ 68.019276][ T4882] should_fail_ex+0x223/0x230 [ 68.019304][ T4882] should_fail+0xb/0x10 [ 68.019358][ T4882] should_fail_usercopy+0x1a/0x20 [ 68.019470][ T4882] _copy_from_user+0x1c/0xa0 [ 68.019496][ T4882] set_selection_user+0x48/0xa0 [ 68.019519][ T4882] tioclinux+0x2b0/0x430 [ 68.019579][ T4882] vt_ioctl+0x84f/0x1810 [ 68.019649][ T4882] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 68.019666][ T4882] tty_ioctl+0x815/0xbe0 [ 68.019687][ T4882] ? __pfx_tty_ioctl+0x10/0x10 [ 68.019728][ T4882] __se_sys_ioctl+0xc9/0x140 [ 68.019746][ T4882] __x64_sys_ioctl+0x43/0x50 [ 68.019763][ T4882] x64_sys_call+0x1690/0x2dc0 [ 68.019787][ T4882] do_syscall_64+0xc9/0x1c0 [ 68.019806][ T4882] ? clear_bhb_loop+0x55/0xb0 [ 68.019877][ T4882] ? clear_bhb_loop+0x55/0xb0 [ 68.019945][ T4882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.019965][ T4882] RIP: 0033:0x7fc38272cd29 [ 68.020055][ T4882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.020069][ T4882] RSP: 002b:00007fc380d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.020086][ T4882] RAX: ffffffffffffffda RBX: 00007fc382945fa0 RCX: 00007fc38272cd29 [ 68.020095][ T4882] RDX: 0000000020000280 RSI: 000000000000541c RDI: 0000000000000003 [ 68.020104][ T4882] RBP: 00007fc380d97090 R08: 0000000000000000 R09: 0000000000000000 [ 68.020114][ T4882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.020124][ T4882] R13: 0000000000000000 R14: 00007fc382945fa0 R15: 00007ffe4d324c58 [ 68.020140][ T4882] [ 68.052592][ T4874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.248521][ T4874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.276408][ T4884] loop3: detected capacity change from 0 to 1024 [ 68.283130][ T4884] ext4: Unknown parameter 'subj_user' [ 68.301765][ T4874] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 68.326588][ T4884] netlink: 80 bytes leftover after parsing attributes in process `syz.3.381'. [ 68.335566][ T4884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 68.407013][ T4887] syzkaller0: entered promiscuous mode [ 68.412607][ T4887] syzkaller0: entered allmulticast mode [ 68.467628][ T4892] loop5: detected capacity change from 0 to 512 [ 68.486638][ T4892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.499377][ T4892] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.572060][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.585900][ T4887] SELinux: +}[@ (4887) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 68.729773][ T4901] loop5: detected capacity change from 0 to 764 [ 68.817464][ T4901] rock: directory entry would overflow storage [ 68.823771][ T4901] rock: sig=0x4f50, size=4, remaining=3 [ 68.829507][ T4901] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 68.844528][ T4911] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 68.931821][ T4920] loop2: detected capacity change from 0 to 512 [ 68.960994][ T4920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.968470][ T4918] loop3: detected capacity change from 0 to 256 [ 68.980067][ T4920] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.997396][ T4918] futex_wake_op: syz.3.395 tries to shift op by -1; fix this program [ 69.027261][ T4930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.399'. [ 69.047873][ T4918] netlink: 'syz.3.395': attribute type 13 has an invalid length. [ 69.055677][ T4918] netlink: 152 bytes leftover after parsing attributes in process `syz.3.395'. [ 69.108341][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.159692][ T4918] syz_tun: refused to change device tx_queue_len [ 69.166146][ T4918] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 69.271343][ T4945] FAULT_INJECTION: forcing a failure. [ 69.271343][ T4945] name failslab, interval 1, probability 0, space 0, times 0 [ 69.284145][ T4945] CPU: 1 UID: 0 PID: 4945 Comm: syz.2.405 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 69.284167][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 69.284186][ T4945] Call Trace: [ 69.284192][ T4945] [ 69.284199][ T4945] dump_stack_lvl+0xf2/0x150 [ 69.284223][ T4945] dump_stack+0x15/0x1a [ 69.284279][ T4945] should_fail_ex+0x223/0x230 [ 69.284307][ T4945] should_failslab+0x8f/0xb0 [ 69.284363][ T4945] kmem_cache_alloc_node_noprof+0x59/0x320 [ 69.284442][ T4945] ? __alloc_skb+0x10b/0x310 [ 69.284462][ T4945] __alloc_skb+0x10b/0x310 [ 69.284560][ T4945] ? audit_log_start+0x34c/0x6b0 [ 69.284588][ T4945] audit_log_start+0x368/0x6b0 [ 69.284613][ T4945] audit_seccomp+0x4b/0x130 [ 69.284696][ T4945] __seccomp_filter+0x6fa/0x1180 [ 69.284719][ T4945] __secure_computing+0x9f/0x1c0 [ 69.284739][ T4945] syscall_trace_enter+0xd1/0x1f0 [ 69.284818][ T4945] ? fpregs_assert_state_consistent+0x83/0xa0 [ 69.284892][ T4945] do_syscall_64+0xaa/0x1c0 [ 69.284937][ T4945] ? clear_bhb_loop+0x55/0xb0 [ 69.284961][ T4945] ? clear_bhb_loop+0x55/0xb0 [ 69.284980][ T4945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.285007][ T4945] RIP: 0033:0x7ff0e465b73c [ 69.285019][ T4945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 69.285034][ T4945] RSP: 002b:00007ff0e2cc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.285051][ T4945] RAX: ffffffffffffffda RBX: 00007ff0e4875fa0 RCX: 00007ff0e465b73c [ 69.285063][ T4945] RDX: 000000000000000f RSI: 00007ff0e2cc70a0 RDI: 0000000000000006 [ 69.285073][ T4945] RBP: 00007ff0e2cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.285085][ T4945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.285094][ T4945] R13: 0000000000000000 R14: 00007ff0e4875fa0 R15: 00007fff999a3618 [ 69.285162][ T4945] [ 69.564908][ T4961] loop1: detected capacity change from 0 to 512 [ 69.610129][ T4961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.638225][ T4961] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.651004][ T4966] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 69.651004][ T4966] The task syz.4.404 (4966) triggered the difference, watch for misbehavior. [ 69.750395][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.773508][ T4962] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.780960][ T4962] vhci_hcd: invalid port number 23 [ 69.793930][ T4973] loop3: detected capacity change from 0 to 512 [ 69.809112][ T4973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.880301][ T4973] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.914492][ T4985] loop5: detected capacity change from 0 to 512 [ 69.941167][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.959579][ T4985] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 69.971640][ T4985] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.978703][ T4985] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.996833][ T4983] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.005034][ T4983] vhci_hcd: invalid port number 23 [ 70.011154][ T4985] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 70.018216][ T4985] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.417: bg 0: block 40: padding at end of block bitmap is not set [ 70.037405][ T4985] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 70.046801][ T4985] EXT4-fs (loop5): 1 truncate cleaned up [ 70.052899][ T4985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.060049][ T4997] __nla_validate_parse: 2 callbacks suppressed [ 70.060064][ T4997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.422'. [ 70.066617][ T4998] netlink: 256 bytes leftover after parsing attributes in process `syz.3.419'. [ 70.149971][ T5001] pim6reg1: entered promiscuous mode [ 70.155370][ T5001] pim6reg1: entered allmulticast mode [ 70.197672][ T5005] loop2: detected capacity change from 0 to 512 [ 70.205727][ T5008] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #16: comm syz.5.417: corrupted xattr block 31: invalid header [ 70.223456][ T5008] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 70.241716][ T5005] EXT4-fs (loop2): too many log groups per flexible block group [ 70.249565][ T5005] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 70.287223][ T5005] EXT4-fs (loop2): mount failed [ 70.304875][ T4993] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.317521][ T5017] loop1: detected capacity change from 0 to 512 [ 70.326527][ T4993] vhci_hcd: invalid port number 23 [ 70.356722][ T5017] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.377534][ T5018] loop4: detected capacity change from 0 to 764 [ 70.391524][ T5017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.469784][ T5018] rock: directory entry would overflow storage [ 70.476128][ T5018] rock: sig=0x4f50, size=4, remaining=3 [ 70.481759][ T5018] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 70.500035][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.712397][ T5038] loop2: detected capacity change from 0 to 512 [ 70.730168][ T5038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.810725][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.846017][ T5038] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.854804][ T5038] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.431: Failed to acquire dquot type 1 [ 70.868518][ T5038] EXT4-fs (loop2): 1 truncate cleaned up [ 70.875118][ T5038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.947288][ T5043] FAULT_INJECTION: forcing a failure. [ 70.947288][ T5043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.960531][ T5043] CPU: 0 UID: 0 PID: 5043 Comm: syz.1.437 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 70.960553][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.960599][ T5043] Call Trace: [ 70.960605][ T5043] [ 70.960611][ T5043] dump_stack_lvl+0xf2/0x150 [ 70.960686][ T5043] dump_stack+0x15/0x1a [ 70.960706][ T5043] should_fail_ex+0x223/0x230 [ 70.960735][ T5043] should_fail+0xb/0x10 [ 70.960756][ T5043] should_fail_usercopy+0x1a/0x20 [ 70.960798][ T5043] _copy_to_user+0x20/0xa0 [ 70.960818][ T5043] simple_read_from_buffer+0xa0/0x110 [ 70.960840][ T5043] proc_fail_nth_read+0xf9/0x140 [ 70.961049][ T5043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.961107][ T5043] vfs_read+0x19b/0x6f0 [ 70.961192][ T5043] ? __rcu_read_unlock+0x4e/0x70 [ 70.961209][ T5043] ? __fget_files+0x17c/0x1c0 [ 70.961270][ T5043] ksys_read+0xe8/0x1b0 [ 70.961322][ T5043] __x64_sys_read+0x42/0x50 [ 70.961337][ T5043] x64_sys_call+0x2874/0x2dc0 [ 70.961357][ T5043] do_syscall_64+0xc9/0x1c0 [ 70.961441][ T5043] ? clear_bhb_loop+0x55/0xb0 [ 70.961466][ T5043] ? clear_bhb_loop+0x55/0xb0 [ 70.961487][ T5043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.961511][ T5043] RIP: 0033:0x7fa11596b73c [ 70.961526][ T5043] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.961621][ T5043] RSP: 002b:00007fa113fd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.961639][ T5043] RAX: ffffffffffffffda RBX: 00007fa115b85fa0 RCX: 00007fa11596b73c [ 70.961650][ T5043] RDX: 000000000000000f RSI: 00007fa113fd70a0 RDI: 0000000000000006 [ 70.961660][ T5043] RBP: 00007fa113fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.961670][ T5043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.961681][ T5043] R13: 0000000000000000 R14: 00007fa115b85fa0 R15: 00007ffc8f6d8238 [ 70.961757][ T5043] [ 71.412015][ T5048] pim6reg1: entered promiscuous mode [ 71.417421][ T5048] pim6reg1: entered allmulticast mode [ 71.646937][ T5071] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.758998][ T5071] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.817770][ T5071] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.877581][ T5071] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.948548][ T5083] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 71.968351][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.996032][ T5071] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.034528][ T5071] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.048480][ T5071] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.066012][ T5071] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.231424][ T5107] FAULT_INJECTION: forcing a failure. [ 72.231424][ T5107] name failslab, interval 1, probability 0, space 0, times 0 [ 72.244154][ T5107] CPU: 1 UID: 0 PID: 5107 Comm: syz.5.458 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 72.244178][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 72.244189][ T5107] Call Trace: [ 72.244262][ T5107] [ 72.244269][ T5107] dump_stack_lvl+0xf2/0x150 [ 72.244358][ T5107] dump_stack+0x15/0x1a [ 72.244389][ T5107] should_fail_ex+0x223/0x230 [ 72.244427][ T5107] should_failslab+0x8f/0xb0 [ 72.244456][ T5107] kmem_cache_alloc_noprof+0x52/0x320 [ 72.244539][ T5107] ? dst_alloc+0xc0/0x100 [ 72.244555][ T5107] ? __pfx_ip6_dst_gc+0x10/0x10 [ 72.244579][ T5107] dst_alloc+0xc0/0x100 [ 72.244595][ T5107] icmp6_dst_alloc+0xaa/0x320 [ 72.244652][ T5107] ? icmpv6_flow_init+0x93/0xb0 [ 72.244731][ T5107] ndisc_send_skb+0x175/0x700 [ 72.244761][ T5107] ndisc_solicit+0x24b/0x300 [ 72.244789][ T5107] ? __pfx_ndisc_solicit+0x10/0x10 [ 72.244842][ T5107] __neigh_event_send+0x85f/0xa80 [ 72.244866][ T5107] neigh_resolve_output+0x117/0x460 [ 72.244956][ T5107] ? selinux_ip_postroute+0x1ea/0xb90 [ 72.244978][ T5107] ip6_finish_output2+0x9e2/0xd40 [ 72.245019][ T5107] ? __rcu_read_unlock+0x34/0x70 [ 72.245037][ T5107] ip6_finish_output+0x438/0x540 [ 72.245057][ T5107] ip6_output+0xf5/0x230 [ 72.245078][ T5107] ? __pfx_ip6_finish_output+0x10/0x10 [ 72.245233][ T5107] ? __pfx_ip6_output+0x10/0x10 [ 72.245251][ T5107] ip6_local_out+0x76/0xd0 [ 72.245279][ T5107] ip6_send_skb+0x5a/0x120 [ 72.245344][ T5107] udp_v6_send_skb+0x772/0xbe0 [ 72.245362][ T5107] udp_v6_push_pending_frames+0xd7/0x120 [ 72.245380][ T5107] udpv6_sendmsg+0x9fd/0x15b0 [ 72.245467][ T5107] ? __rcu_read_unlock+0x4e/0x70 [ 72.245486][ T5107] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 72.245511][ T5107] ? mntput_no_expire+0x70/0x3d0 [ 72.245537][ T5107] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 72.245556][ T5107] inet6_sendmsg+0xaf/0xd0 [ 72.245596][ T5107] __sock_sendmsg+0x8b/0x180 [ 72.245627][ T5107] sock_write_iter+0x15e/0x1a0 [ 72.245653][ T5107] vfs_write+0x77b/0x920 [ 72.245668][ T5107] ? __pfx_sock_write_iter+0x10/0x10 [ 72.245762][ T5107] ksys_write+0xe8/0x1b0 [ 72.245780][ T5107] __x64_sys_write+0x42/0x50 [ 72.245797][ T5107] x64_sys_call+0x287e/0x2dc0 [ 72.245827][ T5107] do_syscall_64+0xc9/0x1c0 [ 72.245849][ T5107] ? clear_bhb_loop+0x55/0xb0 [ 72.245935][ T5107] ? clear_bhb_loop+0x55/0xb0 [ 72.245989][ T5107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.246013][ T5107] RIP: 0033:0x7f5d4621cd29 [ 72.246028][ T5107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.246045][ T5107] RSP: 002b:00007f5d44887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.246123][ T5107] RAX: ffffffffffffffda RBX: 00007f5d46435fa0 RCX: 00007f5d4621cd29 [ 72.246135][ T5107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 72.246146][ T5107] RBP: 00007f5d44887090 R08: 0000000000000000 R09: 0000000000000000 [ 72.246157][ T5107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.246168][ T5107] R13: 0000000000000000 R14: 00007f5d46435fa0 R15: 00007ffd8678fef8 [ 72.246185][ T5107] [ 72.728260][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 72.728274][ T29] audit: type=1326 audit(1737953891.036:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5116 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 72.758044][ T29] audit: type=1326 audit(1737953891.036:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5116 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 72.844184][ T5120] loop1: detected capacity change from 0 to 512 [ 72.862523][ T29] audit: type=1326 audit(1737953891.166:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5116 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 72.886114][ T29] audit: type=1326 audit(1737953891.166:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5116 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 72.909528][ T29] audit: type=1326 audit(1737953891.166:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5116 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 73.006275][ T5126] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 73.107772][ T5120] EXT4-fs (loop1): too many log groups per flexible block group [ 73.115710][ T5120] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 73.123107][ T5120] EXT4-fs (loop1): mount failed [ 73.167319][ T29] audit: type=1326 audit(1737953891.286:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 73.190744][ T29] audit: type=1326 audit(1737953891.286:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 73.214304][ T29] audit: type=1326 audit(1737953891.296:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 73.237887][ T29] audit: type=1326 audit(1737953891.296:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 73.261249][ T29] audit: type=1326 audit(1737953891.296:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 73.292565][ T5130] FAULT_INJECTION: forcing a failure. [ 73.292565][ T5130] name failslab, interval 1, probability 0, space 0, times 0 [ 73.305357][ T5130] CPU: 0 UID: 0 PID: 5130 Comm: syz.4.465 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 73.305379][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 73.305388][ T5130] Call Trace: [ 73.305393][ T5130] [ 73.305398][ T5130] dump_stack_lvl+0xf2/0x150 [ 73.305421][ T5130] dump_stack+0x15/0x1a [ 73.305441][ T5130] should_fail_ex+0x223/0x230 [ 73.305471][ T5130] should_failslab+0x8f/0xb0 [ 73.305494][ T5130] kmem_cache_alloc_noprof+0x52/0x320 [ 73.305598][ T5130] ? skb_clone+0x154/0x1f0 [ 73.305624][ T5130] skb_clone+0x154/0x1f0 [ 73.305648][ T5130] __netlink_deliver_tap+0x2bd/0x4f0 [ 73.305677][ T5130] netlink_unicast+0x64a/0x670 [ 73.305765][ T5130] netlink_sendmsg+0x5cc/0x6e0 [ 73.305797][ T5130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.305822][ T5130] __sock_sendmsg+0x140/0x180 [ 73.305847][ T5130] ____sys_sendmsg+0x312/0x410 [ 73.305896][ T5130] __sys_sendmsg+0x19d/0x230 [ 73.305930][ T5130] __x64_sys_sendmsg+0x46/0x50 [ 73.306025][ T5130] x64_sys_call+0x2734/0x2dc0 [ 73.306049][ T5130] do_syscall_64+0xc9/0x1c0 [ 73.306071][ T5130] ? clear_bhb_loop+0x55/0xb0 [ 73.306096][ T5130] ? clear_bhb_loop+0x55/0xb0 [ 73.306143][ T5130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.306247][ T5130] RIP: 0033:0x7f1278efcd29 [ 73.306262][ T5130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.306279][ T5130] RSP: 002b:00007f1277567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.306294][ T5130] RAX: ffffffffffffffda RBX: 00007f1279115fa0 RCX: 00007f1278efcd29 [ 73.306304][ T5130] RDX: 0000000000008840 RSI: 0000000020000740 RDI: 0000000000000003 [ 73.306316][ T5130] RBP: 00007f1277567090 R08: 0000000000000000 R09: 0000000000000000 [ 73.306364][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.306385][ T5130] R13: 0000000000000000 R14: 00007f1279115fa0 R15: 00007ffc611252f8 [ 73.306398][ T5130] [ 73.515063][ T5130] netem: change failed [ 73.677240][ T5150] netlink: 256 bytes leftover after parsing attributes in process `syz.5.468'. [ 73.741568][ T5142] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 73.777705][ T5142] vhci_hcd: invalid port number 23 [ 73.854487][ T5157] netlink: 256 bytes leftover after parsing attributes in process `syz.5.474'. [ 73.890933][ T5145] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 73.898410][ T5145] vhci_hcd: invalid port number 23 [ 73.929359][ T5161] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 73.949027][ T5162] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 73.971618][ T5161] vhci_hcd: invalid port number 23 [ 74.052483][ T5164] loop4: detected capacity change from 0 to 512 [ 74.113129][ T5164] EXT4-fs (loop4): too many log groups per flexible block group [ 74.120942][ T5164] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 74.135317][ T5164] EXT4-fs (loop4): mount failed [ 74.434920][ T5187] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.494617][ T5185] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.517041][ T5187] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.535842][ T5185] vhci_hcd: invalid port number 23 [ 74.596400][ T5187] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.659720][ T5193] loop2: detected capacity change from 0 to 512 [ 74.659722][ T5197] loop1: detected capacity change from 0 to 512 [ 74.660193][ T5197] EXT4-fs: Ignoring removed i_version option [ 74.678513][ T5197] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.696213][ T5187] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.706302][ T5197] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.721530][ T5200] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 74.729377][ T5193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.757218][ T5197] EXT4-fs (loop1): 1 truncate cleaned up [ 74.757778][ T5193] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.779033][ T5197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.831221][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.866550][ T5204] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.873998][ T5204] vhci_hcd: invalid port number 23 [ 74.905852][ T5214] loop3: detected capacity change from 0 to 164 [ 74.916515][ T5214] Unsupported NM flag settings (8) [ 74.959394][ T5220] FAULT_INJECTION: forcing a failure. [ 74.959394][ T5220] name failslab, interval 1, probability 0, space 0, times 0 [ 74.972064][ T5220] CPU: 1 UID: 0 PID: 5220 Comm: syz.2.497 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 74.972086][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 74.972095][ T5220] Call Trace: [ 74.972101][ T5220] [ 74.972107][ T5220] dump_stack_lvl+0xf2/0x150 [ 74.972147][ T5220] dump_stack+0x15/0x1a [ 74.972157][ T5220] should_fail_ex+0x223/0x230 [ 74.972195][ T5220] should_failslab+0x8f/0xb0 [ 74.972208][ T5220] __kmalloc_noprof+0xab/0x3f0 [ 74.972224][ T5220] ? tracepoint_probe_unregister+0x172/0x6a0 [ 74.972241][ T5220] ? __pfx_tp_stub_func+0x10/0x10 [ 74.972331][ T5220] tracepoint_probe_unregister+0x172/0x6a0 [ 74.972346][ T5220] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 74.972359][ T5220] bpf_probe_unregister+0x37/0x50 [ 74.972421][ T5220] bpf_raw_tp_link_release+0x27/0x40 [ 74.972437][ T5220] bpf_link_free+0xb2/0x360 [ 74.972451][ T5220] bpf_link_release+0x52/0x70 [ 74.972463][ T5220] ? __pfx_bpf_link_release+0x10/0x10 [ 74.972560][ T5220] __fput+0x2ac/0x640 [ 74.972577][ T5220] ____fput+0x1c/0x30 [ 74.972590][ T5220] task_work_run+0x13a/0x1a0 [ 74.972606][ T5220] syscall_exit_to_user_mode+0xa8/0x120 [ 74.972621][ T5220] do_syscall_64+0xd6/0x1c0 [ 74.972633][ T5220] ? clear_bhb_loop+0x55/0xb0 [ 74.972646][ T5220] ? clear_bhb_loop+0x55/0xb0 [ 74.972668][ T5220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.972682][ T5220] RIP: 0033:0x7ff0e465cd29 [ 74.972692][ T5220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.972702][ T5220] RSP: 002b:00007ff0e2cc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 74.972861][ T5220] RAX: 0000000000000000 RBX: 00007ff0e4875fa0 RCX: 00007ff0e465cd29 [ 74.972868][ T5220] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 74.972874][ T5220] RBP: 00007ff0e2cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.972880][ T5220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.972886][ T5220] R13: 0000000000000000 R14: 00007ff0e4875fa0 R15: 00007fff999a3618 [ 74.972896][ T5220] [ 75.188680][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.198615][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.229222][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.245992][ T5209] usb usb6: usbfs: process 5209 (+}[@) did not claim interface 0 before use [ 75.276916][ T5227] loop2: detected capacity change from 0 to 764 [ 75.322682][ T5229] loop3: detected capacity change from 0 to 512 [ 75.366849][ T5229] EXT4-fs (loop3): too many log groups per flexible block group [ 75.374588][ T5229] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 75.385096][ T5229] EXT4-fs (loop3): mount failed [ 75.415202][ T5227] rock: directory entry would overflow storage [ 75.421412][ T5227] rock: sig=0x4f50, size=4, remaining=3 [ 75.427203][ T5227] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 75.513430][ T5235] loop3: detected capacity change from 0 to 512 [ 75.532939][ T5235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.605115][ T5235] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.718055][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.871051][ T5241] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.912122][ T5241] vhci_hcd: invalid port number 23 [ 75.960241][ T5247] pim6reg1: entered promiscuous mode [ 75.965711][ T5247] pim6reg1: entered allmulticast mode [ 76.011031][ T5249] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 76.067438][ T5252] netlink: 40 bytes leftover after parsing attributes in process `syz.3.510'. [ 76.156132][ T5255] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.205396][ T5259] syzkaller1: entered promiscuous mode [ 76.210910][ T5259] syzkaller1: entered allmulticast mode [ 76.219708][ T5258] loop4: detected capacity change from 0 to 512 [ 76.228636][ T5255] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.255594][ T5258] EXT4-fs (loop4): too many log groups per flexible block group [ 76.263368][ T5258] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 76.271309][ T5258] EXT4-fs (loop4): mount failed [ 76.296226][ T5255] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.346234][ T5255] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.410003][ T5187] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.426780][ T5187] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.448663][ T5187] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.460503][ T5187] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.477994][ T5255] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.506157][ T5255] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.519122][ T5255] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.534699][ T5255] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.608589][ T5273] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.623531][ T5273] vhci_hcd: invalid port number 23 [ 76.647972][ T5269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.674164][ T5269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.701874][ T5277] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.710212][ T5277] vhci_hcd: invalid port number 23 [ 76.725668][ T5269] usb usb6: usbfs: process 5269 (+}[@) did not claim interface 0 before use [ 76.753420][ T5282] loop2: detected capacity change from 0 to 512 [ 76.766539][ T5282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.785111][ T5282] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.912475][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.950681][ T5288] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.986406][ T5288] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.003400][ T5289] syzkaller1: entered promiscuous mode [ 77.008991][ T5289] syzkaller1: entered allmulticast mode [ 77.066200][ T5288] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.136493][ T5288] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.201346][ T5288] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.213656][ T5288] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.224842][ T5288] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.237759][ T5288] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.326130][ T5297] loop4: detected capacity change from 0 to 512 [ 77.346377][ T5297] EXT4-fs (loop4): too many log groups per flexible block group [ 77.354220][ T5297] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 77.361460][ T5297] EXT4-fs (loop4): mount failed [ 77.394558][ T5301] loop1: detected capacity change from 0 to 512 [ 77.412998][ T5301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.426550][ T5301] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.446820][ T5304] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.475297][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.509502][ T5304] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.588941][ T5304] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.618384][ T5311] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.625772][ T5311] vhci_hcd: invalid port number 23 [ 77.646835][ T5304] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.670066][ T5317] loop1: detected capacity change from 0 to 512 [ 77.679288][ T5317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.692182][ T5317] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.716474][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.740110][ T5304] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.750731][ T5304] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.762206][ T5304] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.773263][ T5304] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.873511][ T5332] syzkaller0: entered promiscuous mode [ 77.879277][ T5332] syzkaller0: entered allmulticast mode [ 77.937434][ T5321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.947557][ T5321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.960086][ T5332] SELinux: +}[@ (5332) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 78.502476][ T29] kauditd_printk_skb: 888 callbacks suppressed [ 78.502490][ T29] audit: type=1326 audit(1737953896.806:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 78.532380][ T29] audit: type=1326 audit(1737953896.816:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 78.555862][ T29] audit: type=1326 audit(1737953896.816:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 78.579194][ T29] audit: type=1326 audit(1737953896.816:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 78.602600][ T29] audit: type=1326 audit(1737953896.816:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 78.626241][ T29] audit: type=1326 audit(1737953896.836:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 78.649636][ T29] audit: type=1326 audit(1737953896.836:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 78.673109][ T29] audit: type=1326 audit(1737953896.836:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 78.696741][ T29] audit: type=1326 audit(1737953896.836:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 78.720104][ T29] audit: type=1326 audit(1737953896.836:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11596cd29 code=0x7ffc0000 [ 79.414119][ T5345] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.421512][ T5345] vhci_hcd: invalid port number 23 [ 79.443694][ T5347] netlink: 44 bytes leftover after parsing attributes in process `syz.5.545'. [ 79.452753][ T5347] netlink: 19 bytes leftover after parsing attributes in process `syz.5.545'. [ 79.461696][ T5347] netlink: 'syz.5.545': attribute type 6 has an invalid length. [ 79.469374][ T5347] netlink: 'syz.5.545': attribute type 4 has an invalid length. [ 79.559051][ T5359] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.613613][ T5360] syzkaller1: entered promiscuous mode [ 79.619587][ T5360] syzkaller1: entered allmulticast mode [ 79.636762][ T5359] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.686230][ T5359] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.766367][ T5359] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.099693][ T5359] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.110801][ T5359] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.121613][ T5359] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.132704][ T5359] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.575551][ T5372] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.583026][ T5372] vhci_hcd: invalid port number 23 [ 80.852174][ T5391] loop3: detected capacity change from 0 to 512 [ 80.861798][ T5391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.874772][ T5391] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.898002][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.936520][ T5395] syzkaller0: entered promiscuous mode [ 80.942002][ T5395] syzkaller0: entered allmulticast mode [ 81.050443][ T5395] SELinux: +}[@ (5395) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 81.186311][ T5402] pim6reg1: entered promiscuous mode [ 81.191637][ T5402] pim6reg1: entered allmulticast mode [ 81.232324][ T5404] smc: net device bond0 applied user defined pnetid SYZ2 [ 81.297297][ T5418] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.337117][ T5418] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.351452][ T5427] syzkaller1: entered promiscuous mode [ 81.357034][ T5427] syzkaller1: entered allmulticast mode [ 81.379125][ T5430] loop3: detected capacity change from 0 to 512 [ 81.385906][ T5430] EXT4-fs: Ignoring removed i_version option [ 81.391940][ T5430] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.399056][ T5430] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.420425][ T5430] EXT4-fs (loop3): 1 truncate cleaned up [ 81.426577][ T5430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.427413][ T5418] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.474363][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.487647][ T5418] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.539131][ T5439] loop1: detected capacity change from 0 to 512 [ 81.546389][ T5439] EXT4-fs: Ignoring removed i_version option [ 81.552460][ T5439] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.559490][ T5439] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.563190][ T5418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.571279][ T5439] EXT4-fs (loop1): 1 truncate cleaned up [ 81.583710][ T5439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.586429][ T5418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.609072][ T5418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.620657][ T5418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.654659][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.735439][ T5437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.743999][ T5437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.775483][ T5437] usb usb6: usbfs: process 5437 (+}[@) did not claim interface 0 before use [ 81.873338][ T5444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.881866][ T5444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.915925][ T5444] usb usb6: usbfs: process 5444 (+}[@) did not claim interface 0 before use [ 82.447116][ T5466] loop1: detected capacity change from 0 to 512 [ 82.460719][ T5466] EXT4-fs (loop1): too many log groups per flexible block group [ 82.468479][ T5466] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 82.472345][ T5470] loop4: detected capacity change from 0 to 512 [ 82.479470][ T5466] EXT4-fs (loop1): mount failed [ 82.482443][ T5470] EXT4-fs: Ignoring removed i_version option [ 82.492882][ T5470] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.507248][ T5470] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.518542][ T5470] EXT4-fs (loop4): 1 truncate cleaned up [ 82.524604][ T5470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.568551][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.668045][ T5487] syzkaller0: entered promiscuous mode [ 82.673547][ T5487] syzkaller0: entered allmulticast mode [ 82.749055][ T5487] SELinux: +}[@ (5487) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.821062][ T5481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.831272][ T5481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.867362][ T5481] usb usb6: usbfs: process 5481 (+}[@) did not claim interface 0 before use [ 83.282412][ T5500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.598'. [ 83.319797][ T5504] loop3: detected capacity change from 0 to 512 [ 83.326687][ T5504] EXT4-fs: Ignoring removed i_version option [ 83.332796][ T5504] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.339728][ T5504] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.350894][ T5504] EXT4-fs (loop3): 1 truncate cleaned up [ 83.357210][ T5504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.409584][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.468178][ T5520] loop4: detected capacity change from 0 to 512 [ 83.474724][ T5520] EXT4-fs: Ignoring removed oldalloc option [ 83.491813][ T5520] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.502449][ T5520] EXT4-fs (loop4): 1 truncate cleaned up [ 83.508597][ T5520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.531325][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.567436][ T5530] loop4: detected capacity change from 0 to 256 [ 83.577172][ T5530] futex_wake_op: syz.4.609 tries to shift op by -1; fix this program [ 83.585868][ T5530] netlink: 'syz.4.609': attribute type 13 has an invalid length. [ 83.593587][ T5530] netlink: 152 bytes leftover after parsing attributes in process `syz.4.609'. [ 83.603139][ T5530] syz_tun: refused to change device tx_queue_len [ 83.609520][ T5530] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 83.663326][ T5533] loop4: detected capacity change from 0 to 256 [ 83.673872][ T5533] futex_wake_op: syz.4.610 tries to shift op by -1; fix this program [ 83.682772][ T5533] netlink: 'syz.4.610': attribute type 13 has an invalid length. [ 83.690652][ T5533] netlink: 152 bytes leftover after parsing attributes in process `syz.4.610'. [ 83.700057][ T5533] syz_tun: refused to change device tx_queue_len [ 83.706479][ T5533] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 83.777999][ T5539] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.816538][ T5539] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.866136][ T5539] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.926336][ T5539] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.950173][ T5535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.958753][ T5535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.981236][ T5539] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.991977][ T5539] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.003158][ T5539] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.013590][ T5539] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.037070][ T29] kauditd_printk_skb: 723 callbacks suppressed [ 84.037084][ T29] audit: type=1326 audit(1737953902.346:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 84.040133][ T5542] loop4: detected capacity change from 0 to 512 [ 84.043421][ T29] audit: type=1326 audit(1737953902.346:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 84.070362][ T5542] EXT4-fs: Ignoring removed i_version option [ 84.072810][ T29] audit: type=1326 audit(1737953902.346:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 84.096159][ T5542] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.104267][ T5542] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.125544][ T29] audit: type=1326 audit(1737953902.346:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1278efcd63 code=0x7ffc0000 [ 84.146976][ T5542] EXT4-fs (loop4): 1 truncate cleaned up [ 84.165169][ T29] audit: type=1326 audit(1737953902.346:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1278efb7df code=0x7ffc0000 [ 84.172292][ T5542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.194107][ T29] audit: type=1326 audit(1737953902.346:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1278efcdb7 code=0x7ffc0000 [ 84.229358][ T29] audit: type=1326 audit(1737953902.346:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1278efb690 code=0x7ffc0000 [ 84.252808][ T29] audit: type=1326 audit(1737953902.346:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1278efc92b code=0x7ffc0000 [ 84.278432][ T29] audit: type=1326 audit(1737953902.376:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1278efb98a code=0x7ffc0000 [ 84.285268][ T5542] pim6reg1: entered promiscuous mode [ 84.301775][ T29] audit: type=1326 audit(1737953902.376:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1278efb98a code=0x7ffc0000 [ 84.307007][ T5542] pim6reg1: entered allmulticast mode [ 84.440269][ T5560] loop3: detected capacity change from 0 to 256 [ 84.452203][ T5560] futex_wake_op: syz.3.620 tries to shift op by -1; fix this program [ 84.460894][ T5560] netlink: 'syz.3.620': attribute type 13 has an invalid length. [ 84.468699][ T5560] netlink: 152 bytes leftover after parsing attributes in process `syz.3.620'. [ 84.478290][ T5560] syz_tun: refused to change device tx_queue_len [ 84.484653][ T5560] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 84.546382][ T5562] netlink: 256 bytes leftover after parsing attributes in process `syz.3.621'. [ 84.933940][ T5585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.944841][ T5585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.486294][ T5593] netlink: 256 bytes leftover after parsing attributes in process `syz.3.634'. [ 85.543397][ T5599] loop2: detected capacity change from 0 to 512 [ 85.550053][ T5599] EXT4-fs: Ignoring removed oldalloc option [ 85.561798][ T5599] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.583396][ T5599] EXT4-fs (loop2): 1 truncate cleaned up [ 85.594341][ T5599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.684116][ T5610] FAULT_INJECTION: forcing a failure. [ 85.684116][ T5610] name failslab, interval 1, probability 0, space 0, times 0 [ 85.696911][ T5610] CPU: 0 UID: 0 PID: 5610 Comm: syz.3.642 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 85.696933][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 85.696943][ T5610] Call Trace: [ 85.696949][ T5610] [ 85.696956][ T5610] dump_stack_lvl+0xf2/0x150 [ 85.697039][ T5610] dump_stack+0x15/0x1a [ 85.697058][ T5610] should_fail_ex+0x223/0x230 [ 85.697084][ T5610] should_failslab+0x8f/0xb0 [ 85.697105][ T5610] __kmalloc_noprof+0xab/0x3f0 [ 85.697128][ T5610] ? bpf_test_init+0xc7/0x170 [ 85.697163][ T5610] bpf_test_init+0xc7/0x170 [ 85.697219][ T5610] bpf_prog_test_run_xdp+0x321/0x8b0 [ 85.697243][ T5610] ? __rcu_read_unlock+0x4e/0x70 [ 85.697262][ T5610] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.697293][ T5610] bpf_prog_test_run+0x20f/0x3a0 [ 85.697317][ T5610] __sys_bpf+0x400/0x7a0 [ 85.697340][ T5610] __x64_sys_bpf+0x43/0x50 [ 85.697359][ T5610] x64_sys_call+0x2914/0x2dc0 [ 85.697420][ T5610] do_syscall_64+0xc9/0x1c0 [ 85.697442][ T5610] ? clear_bhb_loop+0x55/0xb0 [ 85.697465][ T5610] ? clear_bhb_loop+0x55/0xb0 [ 85.697552][ T5610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.697604][ T5610] RIP: 0033:0x7fc38272cd29 [ 85.697618][ T5610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.697632][ T5610] RSP: 002b:00007fc380d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.697659][ T5610] RAX: ffffffffffffffda RBX: 00007fc382945fa0 RCX: 00007fc38272cd29 [ 85.697668][ T5610] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 85.697678][ T5610] RBP: 00007fc380d97090 R08: 0000000000000000 R09: 0000000000000000 [ 85.697687][ T5610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.697696][ T5610] R13: 0000000000000000 R14: 00007fc382945fa0 R15: 00007ffe4d324c58 [ 85.697767][ T5610] [ 85.907554][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.054275][ T5620] loop5: detected capacity change from 0 to 512 [ 86.085110][ T5620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.113580][ T5620] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.147182][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.158667][ T5617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.167466][ T5617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.344139][ T5631] netlink: 256 bytes leftover after parsing attributes in process `syz.5.650'. [ 86.428170][ T5635] netlink: 3 bytes leftover after parsing attributes in process `syz.5.652'. [ 86.438328][ T5635] 0ªX¹¦À: renamed from caif0 [ 86.444814][ T5635] 0ªX¹¦À: entered allmulticast mode [ 86.450400][ T5635] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 86.499612][ T5640] pim6reg1: entered promiscuous mode [ 86.501281][ T5641] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.505046][ T5640] pim6reg1: entered allmulticast mode [ 86.513332][ T5641] vhci_hcd: invalid port number 23 [ 86.556495][ T5643] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.616484][ T5643] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.618716][ T5649] loop5: detected capacity change from 0 to 512 [ 86.638783][ T5649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.651915][ T5649] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.671825][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.682527][ T5643] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.770281][ T5643] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.781253][ T5661] netlink: 256 bytes leftover after parsing attributes in process `syz.2.663'. [ 86.824481][ T5665] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.831928][ T5665] vhci_hcd: invalid port number 23 [ 86.855133][ T5643] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.883305][ T5643] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.900333][ T5673] loop3: detected capacity change from 0 to 512 [ 86.921445][ T5673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.922005][ T5643] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.934143][ T5673] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.956487][ T5643] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.990292][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.091167][ T5685] loop2: detected capacity change from 0 to 128 [ 87.128763][ T5685] syz.2.670: attempt to access beyond end of device [ 87.128763][ T5685] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 87.167092][ T5685] FAULT_INJECTION: forcing a failure. [ 87.167092][ T5685] name failslab, interval 1, probability 0, space 0, times 0 [ 87.179753][ T5685] CPU: 1 UID: 0 PID: 5685 Comm: syz.2.670 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 87.179772][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 87.179781][ T5685] Call Trace: [ 87.179788][ T5685] [ 87.179795][ T5685] dump_stack_lvl+0xf2/0x150 [ 87.179819][ T5685] dump_stack+0x15/0x1a [ 87.179839][ T5685] should_fail_ex+0x223/0x230 [ 87.179862][ T5685] should_failslab+0x8f/0xb0 [ 87.179882][ T5685] kmem_cache_alloc_noprof+0x52/0x320 [ 87.179907][ T5685] ? vm_area_dup+0x2c/0x130 [ 87.179924][ T5685] vm_area_dup+0x2c/0x130 [ 87.179940][ T5685] __split_vma+0xf7/0x6a0 [ 87.179965][ T5685] ? mntput+0x49/0x70 [ 87.179984][ T5685] vma_modify+0xd3/0x1e0 [ 87.180004][ T5685] vma_modify_flags+0xf1/0x120 [ 87.180028][ T5685] mlock_fixup+0x113/0x450 [ 87.180044][ T5685] apply_vma_lock_flags+0x194/0x240 [ 87.180066][ T5685] do_mlock+0x3f4/0x570 [ 87.180084][ T5685] ? fput+0x1c4/0x200 [ 87.180107][ T5685] ? ksys_write+0x176/0x1b0 [ 87.180122][ T5685] __x64_sys_mlock2+0x72/0x90 [ 87.180136][ T5685] x64_sys_call+0x971/0x2dc0 [ 87.180155][ T5685] do_syscall_64+0xc9/0x1c0 [ 87.180175][ T5685] ? clear_bhb_loop+0x55/0xb0 [ 87.180197][ T5685] ? clear_bhb_loop+0x55/0xb0 [ 87.180215][ T5685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.180235][ T5685] RIP: 0033:0x7ff0e465cd29 [ 87.180249][ T5685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.180265][ T5685] RSP: 002b:00007ff0e2ca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 87.180279][ T5685] RAX: ffffffffffffffda RBX: 00007ff0e4876080 RCX: 00007ff0e465cd29 [ 87.180290][ T5685] RDX: 0000000000000000 RSI: 00000000000040ef RDI: 0000000020004000 [ 87.180301][ T5685] RBP: 00007ff0e2ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 87.180312][ T5685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.180323][ T5685] R13: 0000000000000000 R14: 00007ff0e4876080 R15: 00007fff999a3618 [ 87.180340][ T5685] [ 87.228695][ T5677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.399027][ T5677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.571064][ T5696] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.578695][ T5696] vhci_hcd: invalid port number 23 [ 87.886380][ T5702] netlink: 256 bytes leftover after parsing attributes in process `syz.2.678'. [ 87.957071][ T5706] loop3: detected capacity change from 0 to 512 [ 87.968240][ T5706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.980938][ T5706] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.032217][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.059176][ T5715] FAULT_INJECTION: forcing a failure. [ 88.059176][ T5715] name failslab, interval 1, probability 0, space 0, times 0 [ 88.072016][ T5715] CPU: 0 UID: 0 PID: 5715 Comm: syz.1.685 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 88.072038][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 88.072048][ T5715] Call Trace: [ 88.072055][ T5715] [ 88.072061][ T5715] dump_stack_lvl+0xf2/0x150 [ 88.072085][ T5715] dump_stack+0x15/0x1a [ 88.072100][ T5715] should_fail_ex+0x223/0x230 [ 88.072127][ T5715] should_failslab+0x8f/0xb0 [ 88.072197][ T5715] kmem_cache_alloc_node_noprof+0x59/0x320 [ 88.072226][ T5715] ? __alloc_skb+0x10b/0x310 [ 88.072247][ T5715] __alloc_skb+0x10b/0x310 [ 88.072264][ T5715] netlink_alloc_large_skb+0xad/0xe0 [ 88.072321][ T5715] netlink_sendmsg+0x3b4/0x6e0 [ 88.072347][ T5715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.072400][ T5715] __sock_sendmsg+0x140/0x180 [ 88.072416][ T5715] ____sys_sendmsg+0x312/0x410 [ 88.072431][ T5715] __sys_sendmsg+0x19d/0x230 [ 88.072608][ T5715] __x64_sys_sendmsg+0x46/0x50 [ 88.072621][ T5715] x64_sys_call+0x2734/0x2dc0 [ 88.072640][ T5715] do_syscall_64+0xc9/0x1c0 [ 88.072653][ T5715] ? clear_bhb_loop+0x55/0xb0 [ 88.072719][ T5715] ? clear_bhb_loop+0x55/0xb0 [ 88.072732][ T5715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.072746][ T5715] RIP: 0033:0x7fa11596cd29 [ 88.072754][ T5715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.072764][ T5715] RSP: 002b:00007fa113fd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.072775][ T5715] RAX: ffffffffffffffda RBX: 00007fa115b85fa0 RCX: 00007fa11596cd29 [ 88.072896][ T5715] RDX: 0000000000044080 RSI: 0000000020000040 RDI: 0000000000000007 [ 88.072903][ T5715] RBP: 00007fa113fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.072909][ T5715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.072915][ T5715] R13: 0000000000000000 R14: 00007fa115b85fa0 R15: 00007ffc8f6d8238 [ 88.072924][ T5715] [ 88.287214][ T5720] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.302528][ T5722] loop3: detected capacity change from 0 to 512 [ 88.321464][ T5722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.334193][ T5722] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.341421][ T5724] syzkaller1: entered promiscuous mode [ 88.350135][ T5724] syzkaller1: entered allmulticast mode [ 88.383792][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.406339][ T5720] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.417237][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 88.427848][ T5730] FAULT_INJECTION: forcing a failure. [ 88.427848][ T5730] name failslab, interval 1, probability 0, space 0, times 0 [ 88.440649][ T5730] CPU: 1 UID: 0 PID: 5730 Comm: syz.3.689 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 88.440672][ T5730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 88.440682][ T5730] Call Trace: [ 88.440698][ T5730] [ 88.440735][ T5730] dump_stack_lvl+0xf2/0x150 [ 88.440759][ T5730] dump_stack+0x15/0x1a [ 88.440775][ T5730] should_fail_ex+0x223/0x230 [ 88.440800][ T5730] should_failslab+0x8f/0xb0 [ 88.440919][ T5730] kmem_cache_alloc_node_noprof+0x59/0x320 [ 88.440951][ T5730] ? __alloc_skb+0x10b/0x310 [ 88.440990][ T5730] __alloc_skb+0x10b/0x310 [ 88.441015][ T5730] netlink_alloc_large_skb+0xad/0xe0 [ 88.441041][ T5730] netlink_sendmsg+0x3b4/0x6e0 [ 88.441116][ T5730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.441144][ T5730] __sock_sendmsg+0x140/0x180 [ 88.441188][ T5730] ____sys_sendmsg+0x312/0x410 [ 88.441277][ T5730] __sys_sendmsg+0x19d/0x230 [ 88.441306][ T5730] __x64_sys_sendmsg+0x46/0x50 [ 88.441371][ T5730] x64_sys_call+0x2734/0x2dc0 [ 88.441391][ T5730] do_syscall_64+0xc9/0x1c0 [ 88.441410][ T5730] ? clear_bhb_loop+0x55/0xb0 [ 88.441431][ T5730] ? clear_bhb_loop+0x55/0xb0 [ 88.441498][ T5730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.441522][ T5730] RIP: 0033:0x7fc38272cd29 [ 88.441534][ T5730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.441697][ T5730] RSP: 002b:00007fc380d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.441770][ T5730] RAX: ffffffffffffffda RBX: 00007fc382945fa0 RCX: 00007fc38272cd29 [ 88.441780][ T5730] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 88.441821][ T5730] RBP: 00007fc380d97090 R08: 0000000000000000 R09: 0000000000000000 [ 88.441831][ T5730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.441842][ T5730] R13: 0000000000000000 R14: 00007fc382945fa0 R15: 00007ffe4d324c58 [ 88.441860][ T5730] [ 88.639973][ T5728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.640381][ T5720] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.648490][ T5728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.724437][ T5736] loop3: detected capacity change from 0 to 512 [ 88.737990][ T5720] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.764778][ T5736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.777679][ T5736] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.800492][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.849855][ T5749] loop3: detected capacity change from 0 to 164 [ 88.857358][ T5749] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 88.920756][ T5756] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.956365][ T5756] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.974026][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.007062][ T5756] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.045006][ T29] kauditd_printk_skb: 627 callbacks suppressed [ 89.045020][ T29] audit: type=1326 audit(1737953907.346:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 89.074854][ T29] audit: type=1326 audit(1737953907.356:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1278efb690 code=0x7ffc0000 [ 89.098253][ T29] audit: type=1326 audit(1737953907.356:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1278efe557 code=0x7ffc0000 [ 89.121621][ T29] audit: type=1326 audit(1737953907.356:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 89.144910][ T29] audit: type=1326 audit(1737953907.356:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1278efe557 code=0x7ffc0000 [ 89.168277][ T29] audit: type=1326 audit(1737953907.356:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1278efb98a code=0x7ffc0000 [ 89.191833][ T29] audit: type=1326 audit(1737953907.356:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 89.215237][ T29] audit: type=1326 audit(1737953907.356:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1278efebbc code=0x7ffc0000 [ 89.238473][ T29] audit: type=1326 audit(1737953907.356:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1278efeaf4 code=0x7ffc0000 [ 89.261910][ T29] audit: type=1326 audit(1737953907.356:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1278efeaf4 code=0x7ffc0000 [ 89.287646][ T5756] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.302979][ T5770] loop2: detected capacity change from 0 to 512 [ 89.316045][ T5770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.328973][ T5770] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.345659][ T5756] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.357368][ T5767] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.364835][ T5767] vhci_hcd: invalid port number 23 [ 89.367543][ T5756] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.380698][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.392043][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 89.412368][ T5756] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.433786][ T5756] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.483875][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 89.505438][ T5780] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 89.539368][ T5784] loop3: detected capacity change from 0 to 512 [ 89.547987][ T5784] EXT4-fs: Ignoring removed i_version option [ 89.554045][ T5784] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.562182][ T5784] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.599346][ T5784] EXT4-fs (loop3): 1 truncate cleaned up [ 89.607045][ T5784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.631134][ T5784] pim6reg1: entered promiscuous mode [ 89.636484][ T5784] pim6reg1: entered allmulticast mode [ 89.658598][ T5794] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.798644][ T5790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.815240][ T5790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.903291][ T5799] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.911145][ T5799] vhci_hcd: invalid port number 23 [ 90.154122][ T5812] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 90.184571][ T5814] loop5: detected capacity change from 0 to 512 [ 90.195581][ T5814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.209796][ T5814] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.240798][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.290666][ T5819] loop5: detected capacity change from 0 to 512 [ 90.301195][ T5819] netlink: 44 bytes leftover after parsing attributes in process `syz.5.728'. [ 90.318883][ T5819] loop5: detected capacity change from 0 to 512 [ 90.367330][ T5819] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.389765][ T5819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 90.402476][ T5819] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.443542][ T5825] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.451020][ T5825] vhci_hcd: invalid port number 23 [ 90.516386][ T5828] netlink: 256 bytes leftover after parsing attributes in process `syz.2.731'. [ 90.665924][ T5832] loop2: detected capacity change from 0 to 512 [ 90.675941][ T5832] EXT4-fs (loop2): too many log groups per flexible block group [ 90.683800][ T5832] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 90.699604][ T5832] EXT4-fs (loop2): mount failed [ 90.902274][ T5720] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.932751][ T5720] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.947856][ T5720] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.972697][ T5720] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.212267][ T5843] loop2: detected capacity change from 0 to 512 [ 91.226904][ T5843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.321168][ T5843] EXT4-fs (loop2): orphan cleanup on readonly fs [ 91.328348][ T5843] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.736: Failed to acquire dquot type 1 [ 91.341187][ T5843] EXT4-fs (loop2): 1 truncate cleaned up [ 91.786886][ T5855] pim6reg1: entered promiscuous mode [ 91.792263][ T5855] pim6reg1: entered allmulticast mode [ 92.036684][ T5857] pim6reg1: entered promiscuous mode [ 92.042085][ T5857] pim6reg1: entered allmulticast mode [ 92.106273][ T5859] netlink: 256 bytes leftover after parsing attributes in process `syz.4.743'. [ 92.201096][ T5862] loop5: detected capacity change from 0 to 512 [ 92.236684][ T5862] EXT4-fs (loop5): too many log groups per flexible block group [ 92.244570][ T5862] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 92.278784][ T5862] EXT4-fs (loop5): mount failed [ 92.304292][ T5860] dccp_close: ABORT with 32 bytes unread [ 92.900129][ T5900] Illegal XDP return value 2677520836 on prog (id 642) dev N/A, expect packet loss! [ 92.911578][ T5900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.757'. [ 92.923143][ T5900] loop5: detected capacity change from 0 to 128 [ 92.929771][ T5900] vfat: Unknown parameter '00000000000000000005ÿÿ' [ 93.344921][ T5919] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 93.371793][ T5921] xt_TPROXY: Can be used only with -p tcp or -p udp [ 93.393241][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 93.412353][ T5925] netlink: 76 bytes leftover after parsing attributes in process `syz.3.767'. [ 93.482950][ T5934] loop4: detected capacity change from 0 to 512 [ 93.489956][ T5934] EXT4-fs: Ignoring removed i_version option [ 93.496044][ T5934] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.504201][ T5934] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.529440][ T5934] EXT4-fs (loop4): 1 truncate cleaned up [ 93.549799][ T5934] pim6reg1: entered promiscuous mode [ 93.555151][ T5934] pim6reg1: entered allmulticast mode [ 93.706701][ T5951] FAULT_INJECTION: forcing a failure. [ 93.706701][ T5951] name failslab, interval 1, probability 0, space 0, times 0 [ 93.719377][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: syz.4.778 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 93.719461][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 93.719470][ T5951] Call Trace: [ 93.719476][ T5951] [ 93.719483][ T5951] dump_stack_lvl+0xf2/0x150 [ 93.719510][ T5951] dump_stack+0x15/0x1a [ 93.719528][ T5951] should_fail_ex+0x223/0x230 [ 93.719560][ T5951] should_failslab+0x8f/0xb0 [ 93.719581][ T5951] kmem_cache_alloc_node_noprof+0x59/0x320 [ 93.719608][ T5951] ? __alloc_skb+0x10b/0x310 [ 93.719650][ T5951] __alloc_skb+0x10b/0x310 [ 93.719666][ T5951] ? audit_log_start+0x34c/0x6b0 [ 93.719693][ T5951] audit_log_start+0x368/0x6b0 [ 93.719750][ T5951] audit_seccomp+0x4b/0x130 [ 93.719771][ T5951] __seccomp_filter+0x6fa/0x1180 [ 93.719788][ T5951] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 93.719808][ T5951] ? vfs_write+0x644/0x920 [ 93.719825][ T5951] ? putname+0xcf/0xf0 [ 93.719852][ T5951] __secure_computing+0x9f/0x1c0 [ 93.719869][ T5951] syscall_trace_enter+0xd1/0x1f0 [ 93.719887][ T5951] ? fpregs_assert_state_consistent+0x83/0xa0 [ 93.719961][ T5951] do_syscall_64+0xaa/0x1c0 [ 93.719996][ T5951] ? clear_bhb_loop+0x55/0xb0 [ 93.720017][ T5951] ? clear_bhb_loop+0x55/0xb0 [ 93.720039][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.720114][ T5951] RIP: 0033:0x7f1278efcd29 [ 93.720127][ T5951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.720142][ T5951] RSP: 002b:00007f1277567038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 93.720157][ T5951] RAX: ffffffffffffffda RBX: 00007f1279115fa0 RCX: 00007f1278efcd29 [ 93.720196][ T5951] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000100 [ 93.720225][ T5951] RBP: 00007f1277567090 R08: 0000000000000001 R09: 0000000000000000 [ 93.720352][ T5951] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000001 [ 93.720361][ T5951] R13: 0000000000000000 R14: 00007f1279115fa0 R15: 00007ffc611252f8 [ 93.720375][ T5951] [ 94.110963][ T5964] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.134827][ T5964] vhci_hcd: invalid port number 23 [ 94.138350][ T29] kauditd_printk_skb: 751 callbacks suppressed [ 94.138365][ T29] audit: type=1326 audit(1737953912.446:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38272cd29 code=0x7ffc0000 [ 94.205347][ T29] audit: type=1326 audit(1737953912.496:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.3.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38272cd29 code=0x7ffc0000 [ 94.244935][ T5969] loop2: detected capacity change from 0 to 764 [ 94.269138][ T5969] rock: directory entry would overflow storage [ 94.275390][ T5969] rock: sig=0x4f50, size=4, remaining=3 [ 94.280963][ T5969] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 94.297593][ T5973] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.349213][ T29] audit: type=1326 audit(1737953912.656:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 94.376238][ T5977] loop4: detected capacity change from 0 to 512 [ 94.383100][ T5977] EXT4-fs: Ignoring removed i_version option [ 94.389179][ T5977] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.397273][ T5977] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.407397][ T29] audit: type=1326 audit(1737953912.686:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1278efcd29 code=0x7ffc0000 [ 94.430762][ T29] audit: type=1326 audit(1737953912.686:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1278efcd63 code=0x7ffc0000 [ 94.454019][ T29] audit: type=1326 audit(1737953912.686:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1278efb7df code=0x7ffc0000 [ 94.477225][ T29] audit: type=1326 audit(1737953912.686:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1278efcdb7 code=0x7ffc0000 [ 94.500970][ T29] audit: type=1326 audit(1737953912.686:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1278efb690 code=0x7ffc0000 [ 94.524383][ T29] audit: type=1326 audit(1737953912.686:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1278efc92b code=0x7ffc0000 [ 94.547700][ T29] audit: type=1326 audit(1737953912.686:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1278efb98a code=0x7ffc0000 [ 94.596602][ T5977] EXT4-fs (loop4): 1 truncate cleaned up [ 94.613197][ T5977] pim6reg1: entered promiscuous mode [ 94.618587][ T5977] pim6reg1: entered allmulticast mode [ 94.662603][ T5982] FAULT_INJECTION: forcing a failure. [ 94.662603][ T5982] name failslab, interval 1, probability 0, space 0, times 0 [ 94.675372][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: syz.3.790 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 94.675393][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 94.675404][ T5982] Call Trace: [ 94.675410][ T5982] [ 94.675417][ T5982] dump_stack_lvl+0xf2/0x150 [ 94.675512][ T5982] dump_stack+0x15/0x1a [ 94.675527][ T5982] should_fail_ex+0x223/0x230 [ 94.675554][ T5982] ? security_load_policy+0x6a/0x8d0 [ 94.675618][ T5982] should_failslab+0x8f/0xb0 [ 94.675642][ T5982] __kmalloc_cache_noprof+0x4e/0x320 [ 94.675715][ T5982] security_load_policy+0x6a/0x8d0 [ 94.675738][ T5982] ? rep_movs_alternative+0x4a/0x70 [ 94.675763][ T5982] sel_write_load+0x1d1/0x360 [ 94.675832][ T5982] ? __pfx_sel_write_load+0x10/0x10 [ 94.675888][ T5982] vfs_write+0x27d/0x920 [ 94.675903][ T5982] ? putname+0xcf/0xf0 [ 94.675926][ T5982] ? __fget_files+0x17c/0x1c0 [ 94.675952][ T5982] ksys_write+0xe8/0x1b0 [ 94.675982][ T5982] __x64_sys_write+0x42/0x50 [ 94.676001][ T5982] x64_sys_call+0x287e/0x2dc0 [ 94.676025][ T5982] do_syscall_64+0xc9/0x1c0 [ 94.676083][ T5982] ? clear_bhb_loop+0x55/0xb0 [ 94.676109][ T5982] ? clear_bhb_loop+0x55/0xb0 [ 94.676159][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.676183][ T5982] RIP: 0033:0x7fc38272cd29 [ 94.676197][ T5982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.676215][ T5982] RSP: 002b:00007fc380d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.676233][ T5982] RAX: ffffffffffffffda RBX: 00007fc382945fa0 RCX: 00007fc38272cd29 [ 94.676244][ T5982] RDX: 0000000000002000 RSI: 0000000020000180 RDI: 0000000000000003 [ 94.676254][ T5982] RBP: 00007fc380d97090 R08: 0000000000000000 R09: 0000000000000000 [ 94.676321][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.676330][ T5982] R13: 0000000000000000 R14: 00007fc382945fa0 R15: 00007ffe4d324c58 [ 94.676343][ T5982] [ 94.676359][ T5982] SELinux: failed to load policy [ 95.018882][ T5992] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.026323][ T5992] vhci_hcd: invalid port number 23 [ 95.067000][ T6002] loop5: detected capacity change from 0 to 512 [ 95.093499][ T6002] netlink: 44 bytes leftover after parsing attributes in process `syz.5.799'. [ 95.120401][ T6002] loop5: detected capacity change from 0 to 512 [ 95.142980][ T6002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.179025][ T6002] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.250303][ T6017] xt_TPROXY: Can be used only with -p tcp or -p udp [ 95.253433][ T6015] pim6reg1: entered promiscuous mode [ 95.262364][ T6015] pim6reg1: entered allmulticast mode [ 95.307256][ T6022] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 95.528487][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'. [ 95.538541][ T6035] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.551147][ T6035] vhci_hcd: invalid port number 23 [ 95.779832][ T6043] loop1: detected capacity change from 0 to 764 [ 95.798879][ T4197] ================================================================== [ 95.806988][ T4197] BUG: KCSAN: data-race in n_tty_flush_buffer / n_tty_lookahead_flow_ctrl [ 95.815514][ T4197] [ 95.815524][ T4197] write to 0xffffc900069f9270 of 8 bytes by task 6047 on cpu 1: [ 95.815538][ T4197] n_tty_flush_buffer+0x9f/0x190 [ 95.815565][ T4197] tty_ldisc_hangup+0x72/0x370 [ 95.815586][ T4197] __tty_hangup+0x3b1/0x530 [ 95.825504][ T4197] tty_ioctl+0x607/0xbe0 [ 95.825534][ T4197] __se_sys_ioctl+0xc9/0x140 [ 95.825548][ T4197] __x64_sys_ioctl+0x43/0x50 [ 95.825562][ T4197] x64_sys_call+0x1690/0x2dc0 [ 95.854219][ T6043] rock: directory entry would overflow storage [ 95.857831][ T4197] do_syscall_64+0xc9/0x1c0 [ 95.857860][ T4197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.857881][ T4197] [ 95.857886][ T4197] read-write to 0xffffc900069f9270 of 8 bytes by task 4197 on cpu 0: [ 95.857898][ T4197] n_tty_lookahead_flow_ctrl+0x48/0x130 [ 95.857930][ T4197] tty_port_default_lookahead_buf+0x8a/0xc0 [ 95.857953][ T4197] flush_to_ldisc+0x31c/0x410 [ 95.864142][ T6043] rock: sig=0x4f50, size=4, remaining=3 [ 95.868574][ T4197] process_scheduled_works+0x483/0x9a0 [ 95.868594][ T4197] worker_thread+0x51d/0x6f0 [ 95.874464][ T6043] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 95.876781][ T4197] kthread+0x4ae/0x520 [ 95.876803][ T4197] ret_from_fork+0x4b/0x60 [ 95.932774][ T4197] ret_from_fork_asm+0x1a/0x30 [ 95.937556][ T4197] [ 95.939878][ T4197] value changed: 0x0000000000002673 -> 0x0000000000000000 [ 95.946989][ T4197] [ 95.949317][ T4197] Reported by Kernel Concurrency Sanitizer on: [ 95.955475][ T4197] CPU: 0 UID: 0 PID: 4197 Comm: kworker/u8:8 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 95.965986][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 95.976051][ T4197] Workqueue: events_unbound flush_to_ldisc [ 95.981885][ T4197] ================================================================== [ 96.010010][ T6046] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.373627][ T6038] syz.1.815 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 96.384611][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.1.815 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 96.384633][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 96.384692][ T6038] Call Trace: [ 96.384697][ T6038] [ 96.384703][ T6038] dump_stack_lvl+0xf2/0x150 [ 96.384732][ T6038] dump_stack+0x15/0x1a [ 96.384748][ T6038] dump_header+0x83/0x2d0 [ 96.384771][ T6038] oom_kill_process+0x341/0x4c0 [ 96.384794][ T6038] out_of_memory+0x9af/0xbe0 [ 96.384815][ T6038] ? css_next_descendant_pre+0x11c/0x140 [ 96.384862][ T6038] mem_cgroup_out_of_memory+0x13e/0x190 [ 96.384885][ T6038] try_charge_memcg+0x508/0x7f0 [ 96.384992][ T6038] charge_memcg+0x50/0xc0 [ 96.385007][ T6038] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 96.385027][ T6038] __read_swap_cache_async+0x236/0x480 [ 96.385045][ T6038] swap_cluster_readahead+0x279/0x3f0 [ 96.385064][ T6038] swapin_readahead+0xe4/0x6f0 [ 96.385113][ T6038] ? swap_cache_get_folio+0x77/0x210 [ 96.385130][ T6038] do_swap_page+0x31b/0x2550 [ 96.385156][ T6038] ? hrtimer_try_to_cancel+0x1d3/0x1e0 [ 96.385173][ T6038] ? __rcu_read_lock+0x36/0x50 [ 96.385195][ T6038] ? __pfx_default_wake_function+0x10/0x10 [ 96.385224][ T6038] handle_mm_fault+0x8e4/0x2ac0 [ 96.385296][ T6038] exc_page_fault+0x3b9/0x650 [ 96.385314][ T6038] asm_exc_page_fault+0x26/0x30 [ 96.385337][ T6038] RIP: 0033:0x7fa115843b1c [ 96.385390][ T6038] Code: 66 0f 1f 44 00 00 69 3d 96 1b e7 00 e8 03 00 00 48 8d 1d 97 24 34 00 e8 72 91 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 96.385405][ T6038] RSP: 002b:00007ffc8f6d83a0 EFLAGS: 00010202 [ 96.385495][ T6038] RAX: 0000000000000000 RBX: 00007fa115b85fa0 RCX: 0000000000000000 [ 96.385504][ T6038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555794c9808 [ 96.385515][ T6038] RBP: 00007fa115b87ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 96.385527][ T6038] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001790a [ 96.385558][ T6038] R13: 00007ffc8f6d84a0 R14: 0000000000000032 R15: ffffffffffffffff [ 96.385598][ T6038] [ 96.589216][ T6038] memory: usage 307200kB, limit 307200kB, failcnt 243 [ 96.596017][ T6038] memory+swap: usage 307768kB, limit 9007199254740988kB, failcnt 0 [ 96.603990][ T6038] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 96.611328][ T6038] Memory cgroup stats for /syz1: [ 96.611662][ T6038] cache 0 [ 96.619530][ T6038] rss 0 [ 96.622272][ T6038] shmem 0 [ 96.625217][ T6038] mapped_file 0 [ 96.628747][ T6038] dirty 0 [ 96.631664][ T6038] writeback 8192 [ 96.635222][ T6038] workingset_refault_anon 208 [ 96.639989][ T6038] workingset_refault_file 750 [ 96.644654][ T6038] swap 581632 [ 96.647972][ T6038] swapcached 16384 [ 96.651681][ T6038] pgpgin 58240 [ 96.655077][ T6038] pgpgout 58236 [ 96.658545][ T6038] pgfault 89356 [ 96.661992][ T6038] pgmajfault 90 [ 96.665549][ T6038] inactive_anon 0 [ 96.669228][ T6038] active_anon 16384 [ 96.673011][ T6038] inactive_file 0 [ 96.676651][ T6038] active_file 0 [ 96.680138][ T6038] unevictable 0 [ 96.683573][ T6038] hierarchical_memory_limit 314572800 [ 96.688947][ T6038] hierarchical_memsw_limit 9223372036854771712 [ 96.695110][ T6038] total_cache 0 [ 96.698591][ T6038] total_rss 0 [ 96.701857][ T6038] total_shmem 0 [ 96.705322][ T6038] total_mapped_file 0 [ 96.709308][ T6038] total_dirty 0 [ 96.712749][ T6038] total_writeback 8192 [ 96.716857][ T6038] total_workingset_refault_anon 208 [ 96.722078][ T6038] total_workingset_refault_file 750 [ 96.727273][ T6038] total_swap 581632 [ 96.731072][ T6038] total_swapcached 16384 [ 96.735420][ T6038] total_pgpgin 58240 [ 96.739411][ T6038] total_pgpgout 58236 [ 96.743377][ T6038] total_pgfault 89356 [ 96.747368][ T6038] total_pgmajfault 90 [ 96.751340][ T6038] total_inactive_anon 0 [ 96.755620][ T6038] total_active_anon 16384 [ 96.759938][ T6038] total_inactive_file 0 [ 96.764165][ T6038] total_active_file 0 [ 96.768152][ T6038] total_unevictable 0 [ 96.772121][ T6038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.815,pid=6038,uid=0 [ 96.786623][ T6038] Memory cgroup out of memory: Killed process 6038 (syz.1.815) total-vm:93712kB, anon-rss:916kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000