last executing test programs: 2m23.010295358s ago: executing program 1 (id=5017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r5 = dup2(r4, r4) pwritev2(r1, &(0x7f00000004c0)=[{&(0x7f00000002c0)="29528059a5ece215554e304c1f9d2897d15577a958f960f9190b471451e85a35f3a7a9336d1c9dbfb60c251484306804d252fd6660527f108760394c07886e7f787d9224ef7c5d3551952190a2f3fe8c94eea22512fed53f05537278c78a00b74c13c7eded4f5e0651fd8749fca0215460a2d0f31821677cd7aca37b6d914e0516", 0x81}, {&(0x7f0000000680)="29279a5470da8020a09d5afd3f1dc38212f350559976cfb41682359164c1b14bb105cc24bf88afd3b14dea329259cf7f78931b4e8169acb856fad7c5e83c8afa585803ce601b826a3385a45bd76dd851d4bcecf99e7fcf98be15f30931cdad682ebad6bc1deda5ea671dece0eada2ed430ce7d212df2482e3d630797e11aade188e3facfb828f7dc94e8e0ce9ceca0eb0a66a78b67af1de09f83356a732460f595ad585b7f335a24b23fbeff24753f83aa7748f33b47fa785241df16f46e8a174ea746e72912ea686dc1992d41800415a81efcaa96989d3a525bf9d21aca5387fc7b", 0xe2}, {&(0x7f0000000380)="0e0d3122dd9f63d722b12e7ebd12ccecfefb767f4977845d9c4f5ef6c4e157d3c990b9dd2712f68d0a5668994c593ab77fd394396c8dabe348accb75f9bbc1be1c2397fb87d260ed93aa0f2b534f956b2fb0062fee6129ded7049d85145b3019841f413bf05e768369b0c7e5be379b7c70939d9e6ba88dd3a410b1fd71967bb69c1ee3f0fd1361d4bd33c85ea84870f0fef63ce98165e6bb2bf1b25a4f82bcc390a31096dc209b774054fbba8818", 0xae}, {&(0x7f0000000780)="a98c4e5d497e151cfef13d915df727208d2ffc4731dd9a1f04f5014202f07b135289fda7d537b697cb769c42555387ff8008536310b368c7f80c97dd17fd8d19e3801b8443c37fc1d9aa028a3452f9c6e4bdd87bf3cb289174ab805c7583c4f5225e197d13920a81561f4b1c7cc8d812137fa6e84d49d75b02afb175d468b80c1698414ba78a731f2e45e5f681abcfd90f758738f92199866ebfca4b38c1143195eb22fc3e1f73b581975f8a59a092f379ada65142c1ccafca1cbeec9032dcbdff8dd289f57459984cd9ee8012a776fd90333af969e8ab962723a54dc730f285503465258e77238609e5cd2bcd", 0xed}, {&(0x7f0000000880)="d2a889d4b3f83f8baa6a45769d03267049f90a6ea108d7013aad53be5779081d58dc12f2b821ebee6ed2ad2a8bfc77f7b94b45f05163aa488832b0d7ff1fde21febaa6e987c011e46bfb4419638245d02dbd6c5afaf2cd15a981f091add02585f67869fb53e0af20ade311a9169c0117a684410ee566ef89870959d8b8f4b61e19d59ed87c38084a040196930fb710d38b65c085fe42b861725057f85dfd7a", 0x9f}], 0x5, 0x7fff, 0x0, 0xa) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x2000006, 0x4, 0x2, 0xfffffffffffffffc}) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket(0x15, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x6) capget(&(0x7f0000000940)={0x19980330}, &(0x7f0000000980)={0x2, 0x0, 0x0, 0xdd0f, 0x12c, 0x7}) close(r7) 2m22.985622208s ago: executing program 1 (id=5019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r5 = dup2(r4, r4) pwritev2(r1, &(0x7f00000004c0)=[{&(0x7f00000002c0)="29528059a5ece215554e304c1f9d2897d15577a958f960f9190b471451e85a35f3a7a9336d1c9dbfb60c251484306804d252fd6660527f108760394c07886e7f787d9224ef7c5d3551952190a2f3fe8c94eea22512fed53f05537278c78a00b74c13c7eded4f5e0651fd8749fca0215460a2d0f31821677cd7aca37b6d914e0516", 0x81}, {&(0x7f0000000680)="29279a5470da8020a09d5afd3f1dc38212f350559976cfb41682359164c1b14bb105cc24bf88afd3b14dea329259cf7f78931b4e8169acb856fad7c5e83c8afa585803ce601b826a3385a45bd76dd851d4bcecf99e7fcf98be15f30931cdad682ebad6bc1deda5ea671dece0eada2ed430ce7d212df2482e3d630797e11aade188e3facfb828f7dc94e8e0ce9ceca0eb0a66a78b67af1de09f83356a732460f595ad585b7f335a24b23fbeff24753f83aa7748f33b47fa785241df16f46e8a174ea746e72912ea686dc1992d41800415a81efcaa96989d3a525bf9d21aca5387fc7b", 0xe2}, {&(0x7f0000000380)="0e0d3122dd9f63d722b12e7ebd12ccecfefb767f4977845d9c4f5ef6c4e157d3c990b9dd2712f68d0a5668994c593ab77fd394396c8dabe348accb75f9bbc1be1c2397fb87d260ed93aa0f2b534f956b2fb0062fee6129ded7049d85145b3019841f413bf05e768369b0c7e5be379b7c70939d9e6ba88dd3a410b1fd71967bb69c1ee3f0fd1361d4bd33c85ea84870f0fef63ce98165e6bb2bf1b25a4f82bcc390a31096dc209b774054fbba8818", 0xae}, {&(0x7f0000000780)="a98c4e5d497e151cfef13d915df727208d2ffc4731dd9a1f04f5014202f07b135289fda7d537b697cb769c42555387ff8008536310b368c7f80c97dd17fd8d19e3801b8443c37fc1d9aa028a3452f9c6e4bdd87bf3cb289174ab805c7583c4f5225e197d13920a81561f4b1c7cc8d812137fa6e84d49d75b02afb175d468b80c1698414ba78a731f2e45e5f681abcfd90f758738f92199866ebfca4b38c1143195eb22fc3e1f73b581975f8a59a092f379ada65142c1ccafca1cbeec9032dcbdff8dd289f57459984cd9ee8012a776fd90333af969e8ab962723a54dc730f285503465258e77238609e5cd2bcd", 0xed}, {&(0x7f0000000880)="d2a889d4b3f83f8baa6a45769d03267049f90a6ea108d7013aad53be5779081d58dc12f2b821ebee6ed2ad2a8bfc77f7b94b45f05163aa488832b0d7ff1fde21febaa6e987c011e46bfb4419638245d02dbd6c5afaf2cd15a981f091add02585f67869fb53e0af20ade311a9169c0117a684410ee566ef89870959d8b8f4b61e19d59ed87c38084a040196930fb710d38b65c085fe42b861725057f85dfd7a", 0x9f}], 0x5, 0x7fff, 0x0, 0xa) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x2000006, 0x4, 0x2, 0xfffffffffffffffc}) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) socket(0x15, 0x1, 0x3) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x6) getpgid(0xffffffffffffffff) close(r6) 2m22.930491969s ago: executing program 1 (id=5021): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x241, 0x4040880, 0x0, 0x0) 2m22.911827539s ago: executing program 1 (id=5022): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0xfffffffd, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x8000, 0x0, 0x4, 0x0, @empty, @multicast1}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x400002}}]}, 0x2, 0x45c, &(0x7f0000000a40)="$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") 2m22.71487754s ago: executing program 1 (id=5026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 2m22.67598631s ago: executing program 1 (id=5027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m19.041095668s ago: executing program 0 (id=5122): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000002d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff3d1401000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c4e704000000000000a04d1ffc187fa1a2ba7ba0c0d507b92de00435fd233cc0f0d9b2c312b68856656ca9caa2ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1d8bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6f902b261848d74096636ab6d8c63c8d62861cbc38d1e6bef45e672ac3d3d5243b85b3b15c7499ff39a3dadcbfbea9e050fb6940344dfbeebbf3e7e37d0a9a387518f926fba75479eacd4f51aeb28b6c56a75144ef6df55a275799897ca000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2m18.925212328s ago: executing program 0 (id=5127): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000040)={[{@data_journal}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f0000000240)=[{0x4, 0x90, 0x2, 0xca8}, {0x4c, 0xfc, 0xff, 0x2}, {0xfffc, 0x81, 0x28, 0x6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) execveat(0xffffffffffffffff, &(0x7f0000000280)='./file10\x00', 0x0, 0x0, 0x400) 2m18.781013589s ago: executing program 0 (id=5130): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@bridge_delneigh={0x44, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2, 0x64}, [@NDA_LLADDR={0xa}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @NDA_NH_ID={0x8, 0xd, 0x7}, @NDA_FLAGS_EXT={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m18.713947919s ago: executing program 0 (id=5131): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x32a000, 0x800}, 0x20) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x400, 0x8}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc47, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={'team_slave_1\x00', &(0x7f0000000700)=@ethtool_eeprom={0xc, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x1, 0x3, {{0x20, 0x4, 0x2, 0x1, 0x80, 0x64, 0x0, 0x43, 0x29, 0x0, @private=0xa010102, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x53, [@broadcast]}, @ssrr={0x89, 0x27, 0xa5, [@dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @multicast1, @multicast2]}, @cipso={0x86, 0xe, 0x0, [{0x7, 0x4, '0x0, @empty, @broadcast}, &(0x7f00000002c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x68, r10}) 2m7.796613723s ago: executing program 32 (id=5027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m3.326116355s ago: executing program 33 (id=5147): socket$nl_route(0x10, 0x3, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x6, 0x3) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4ae}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000006600)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1ff, @private2, 0x8006}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="8d06", 0x2}, {&(0x7f0000000440)="747ceb2a1b466c2d2b2965220aa4bd87eebd582ab3219b534f8f1151d461b8c4b3968cf3f37e020df602198e42d7114e2670cc80f6576ee0a4b94ebdaecfd87cd662b0c476ba093264a699d4787878d9943d69336940f46cefdc238e20410a2c9088", 0x62}], 0x2}}], 0x1, 0x80d1) (async) listen(r1, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") (async) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x400103) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000840)="c4ca7dca202d6272d8c5481e2b79c54e0cf8b085bb71c4553e004c58c0dd4933492de4bfdf1c22184b1e6d9ac9d2e24ee18a38da7b996ad2ce46cd0cfa84e04a87709aaa0234e28a2e1b5d6c95965643ae5625af54d9a35aee6246384087fd26d0cea58da592b4485648d302895dc2de8e38f7de3d9b24af200aa7ca227b6631f14b5384394458292b7847e15c3b7f4ad7b32d22f42c74b8fd542a9f3924b97bb14fea572fd3cd568cb74ac9740cd4ad32ee87facad5535bcd414820f86024c8f4191e1666c2e9fc98b37bb3bcdb86c1ff900413fd3317676766e3b8e144c47dd88751b90668b87c11", &(0x7f0000000300)="03c111a9e23352d2e1c7c221ca4c65279b0caf1fe5500da7a3f67c2f0da398828b82f25bc31b46fa4fd23268eca571b4a5b7e37d04fa27c35692442a44efa053c28fc3920fc24ab305806602db8eb9a4a2542059f00ee920245f174b2cce0115dc68d9c59ded21edb76196724d35d1f87c30119b6fae001aa1a2388f55c257d65c9a53b0391c374b67f30d"}}, &(0x7f0000bbdffc)) (async) r4 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x36, 0x3, 0x1, 0x1, 0x0, 0x0, 0xf1521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x2, @perf_config_ext={0xc, 0x4}, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x0, 0xfffd, 0x0, 0x80000001, 0x0, 0x100028f}, r3, 0x0, 0xffffffffffffffff, 0x2) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b2", @ANYRESOCT=r4, @ANYRESHEX=r5, @ANYRES32=r2], 0x0, 0x3, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async) ptrace$getregset(0x4205, 0x0, 0x202, 0x0) getpid() (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="fcffffdf000000000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) (async) syz_usbip_server_init(0x4) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c, 0x80000) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @empty, @broadcast}, &(0x7f00000002c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x68, r10}) 36.554314171s ago: executing program 3 (id=7127): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x32a000, 0x800}, 0x20) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x400, 0x8}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc47, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={'team_slave_1\x00', &(0x7f0000000700)=@ethtool_eeprom={0xc, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x1, 0x3, {{0x21, 0x4, 0x2, 0x1, 0x84, 0x64, 0x0, 0x43, 0x29, 0x0, @private=0xa010102, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x53, [@broadcast]}, @ssrr={0x89, 0x2b, 0xa5, [@dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, @empty, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @multicast1, @multicast2]}, @cipso={0x86, 0xe, 0x0, [{0x7, 0x4, '0x0, 0x8, 0x7, 0x1, 0x3, {{0x20, 0x4, 0x2, 0x1, 0x80, 0x64, 0x0, 0x43, 0x29, 0x0, @private=0xa010102, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x53, [@broadcast]}, @ssrr={0x89, 0x2b, 0xa5, [@dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, @empty, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @multicast1, @multicast2]}, @cipso={0x86, 0xe, 0x0, [{0x7, 0x4, '0x0}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0xb, 0x0) stat(&(0x7f0000002680)='./file0\x00', &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000002740)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(0x0, r12) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r14 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="74c5616ef33dffffffffff3571b8a336cb092c00d0f2fb4134ffffff3d", @ANYRESHEX=r13, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB=',dfltgid=', @ANYRESHEX=r15, @ANYBLOB=',\x00']) sendmmsg$unix(r2, &(0x7f0000002900)=[{{&(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000000540)="e38c556a5c44142d6f6c7940988c3a7e0b571fd872578381fdf69092387a7c9469ca09f4fe0a931aac23929386a3cb2d98207e11f5f03f1cf01bb0fed687246a3024115dd32345fc2e039a0a93fad75af3634c47ca7e43c16ea24c965b089728144393b1be031f75062a1a59088fb6f90415a48ca18a936b48995e8dc285c9b88b55188ba275f36724dc3ee11ba356ff4cf135e005df7c3a10dcc45f609ad76e5ef2d758a0be2b3446316a9eede732177c5c13b79dacf1f575fec1aaa4b42085dcfdf22b09ebf07a45", 0xc9}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000002000000000000000010000000100000080fc3039ab8a2292187a4b1f73d655a61bda777c49d1175bb1e726c583ed2220f3e43678438cb54f7ba3fcecbf76019e6b5c3e4ac3f44064c368b25817bd965f1b1b9ce3d2a4f9a965b8c8e8f1c686000cc8b3eede9486fc03da75000261bc63ab955f888c5c659bd00df7ca986ce5533bad170a617b4e28a4f16e50a31c56b2f88b47", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1], 0xf0, 0x40000}}, {{&(0x7f00000022c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000002340)="dc9123887da3c4aace2e50c27bd85e1c157e79a6782810e32430eb7d75ec1af225f2fa4f823b73b750052d2f1e39043e8648906849a38918fd8ce8259c802c802f5642b648c1a6a03e33dc7d0acb95261f5a079325079a8d179a8e93b56fbd7fc2b1a65e523b947f0524925830c3ba19d372994c0d839f8876baef31f23cc0e02cc6dd5d0c0fbf85a808b2c742f89b19c151810136085616d3e04215e32273d8d0b495b6b637f738d1374a6372d1bbe980a79eaebe6eb535be89f43057b6361c2f9dd6d66e623a0134e28199d11c4f145baf11d420de980d68869abfc0ce1316fb8443", 0xe3}], 0x1, &(0x7f0000002780)=[@rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r3]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r0, r1, r3, r0, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r2, r1, r3, r3, r2]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, r15}}}], 0x170, 0x850}}], 0x2, 0x20000080) r16 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r16, 0x402, 0x29) fcntl$notify(r3, 0x402, 0x10) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r17}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) name_to_handle_at(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="280000004e00000009000000000000000e00000000000000fdffffffb42f00000000000004000000000000"], &(0x7f0000000100), 0x400) 35.296932787s ago: executing program 3 (id=7161): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x500b, 0x148, 0x158, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x41}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dvmrp0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@length={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 35.154332058s ago: executing program 3 (id=7168): unshare(0x2c020400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x508443, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5416, 0x0) 35.133739708s ago: executing program 34 (id=7168): unshare(0x2c020400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x508443, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5416, 0x0) 3.929365391s ago: executing program 4 (id=7739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r2, r1, 0x0, 0x4, &(0x7f00000004c0)='GPL\x00'}, 0x30) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000180)=0xc) unshare(0x62040200) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000006dfa6fc4ee4069b3369e6516c33feb353a9bffc776d9997c1d8fe5cb62ae9ed8ab6de4e3895921814c79c78deead2d2e68d8bd3d0ab484c3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) close_range(r8, r5, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48200, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r9, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=""/85, 0x55}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/229, 0xe5}}], 0x3, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) close_range(r10, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.786336067s ago: executing program 6 (id=7773): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x32a000, 0x800}, 0x20) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x400, 0x8}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc47, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={'team_slave_1\x00', &(0x7f0000000700)=@ethtool_eeprom={0xc, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x1, 0x3, {{0x20, 0x4, 0x2, 0x1, 0x80, 0x64, 0x0, 0x43, 0x29, 0x0, @private=0xa010102, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x53, [@broadcast]}, @ssrr={0x89, 0x2b, 0xa5, [@dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, @empty, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @multicast1, @multicast2]}, @cipso={0x86, 0xe, 0x0, [{0x7, 0x4, '0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000001000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000fff60000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r8, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kvm_halt_poll_ns\x00', 0xffffffffffffffff, 0x0, 0x80000000000000}, 0x61) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, 0x0) setreuid(r9, 0x0) io_cancel(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) 1.958956111s ago: executing program 6 (id=7779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x125003, 0x0) 1.947022101s ago: executing program 6 (id=7780): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x50}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_CLR_FD(r0, 0x4c01) 1.792155612s ago: executing program 6 (id=7783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r4) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r5, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) 1.690600752s ago: executing program 2 (id=7785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x48) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000340), 0x4000) syz_clone(0x4010e000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000640)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) tkill(r1, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r1, @ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000009fa35445530400000003000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='9p_client_res\x00'}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x80, 0xfffffffd, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0xa0, 0x2, 0x25}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r6}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 1.531895143s ago: executing program 7 (id=7787): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x4000804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000740)={[{@jqfmt_vfsv0}, {@errors_remount}, {@nogrpid}, {@abort}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, '\x00'}, 0x22}]}, 0x0, 0x525, &(0x7f0000000f80)="$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") r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) io_setup(0x7, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000400), 0x0) sendmmsg$inet(r3, &(0x7f0000000f40), 0x0, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r2, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, &(0x7f0000000140)="0120", 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x8, 0x1, r3, 0x0, 0x0, 0x7}]) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000a0000000000000000000000000000000000000000000000000000017906440a2bfcdf252803ea213a3b1470c2dc2c898f4393c2e1d2e3781126456250f96e95ee740b89306adf6a7f98a87a1c5690b7c88dd9fd30d5759af36a24f4909cdfcd6bf1665f22b78b7101b749dc4b65ef8db58b63065d9818ea913dfe2fca759d66f7a4c096e23669aabdc311f1a75ea5ae7db20581873e00f588edd1ba1f41"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x1a, 0x2, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='objagg_obj_root_create\x00', r7, 0x0, 0x1}, 0x18) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r9 = io_uring_setup(0x26ce, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8e, 0x0, r3}) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r10, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) 1.066009945s ago: executing program 2 (id=7788): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c5512406c7f00", [0x6, 0x40000000000000]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000007000068fb2b1aac1c92800003000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000c800"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000001801000020646c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dvmrp1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000ac0)='kmem_cache_free\x00'}, 0x18) get_mempolicy(&(0x7f0000000180), &(0x7f0000000480), 0xf3b, &(0x7f0000003000/0x2000)=nil, 0x6) 1.029702626s ago: executing program 2 (id=7789): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 943.044416ms ago: executing program 2 (id=7791): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$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") r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42000, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@delalloc}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@nouid32}, {@resgid}, {@grpquota}, {@sysvgroups}]}, 0x1, 0x573, &(0x7f0000001140)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)) add_key$user(&(0x7f0000000180), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000001c80)="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", 0x1000, r2) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 900.422226ms ago: executing program 7 (id=7794): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c5512406c7f00", [0x6, 0x40000000000000]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000007000068fb2b1aac1c92800003000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000c800"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000001801000020646c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dvmrp1\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000ac0)='kmem_cache_free\x00', r7}, 0x18) sendto$packet(r5, &(0x7f00000000c0)="24d41ef2502c6b8d356d236c0800", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r8, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) 886.617256ms ago: executing program 4 (id=7795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x45, 0x0, 0x8, 0x5, 0xba44, 0x3, 0xe, 0x80000000, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x8, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x5, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca6, 0x9fa7, 0xfffeffff, 0x38, 0x4, 0xfffffffe, 0x7, 0x44d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x9, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x4, 0x422dd3f4, 0x4, 0x8, 0x2, 0x8, 0x8, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0xfffffffc, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x63, 0x800, 0x7, 0xffffff80, 0x43, 0xc22, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0x2, 0x10001, 0xfffffffc, 0x5, 0x4, 0x400, 0x101, 0xffffffff, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x8, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0xb, 0x4, 0x9, 0x7, 0x4, 0x4, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x8, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff01, 0x894, 0x7, 0xfb3, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000000, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x0, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") 863.936497ms ago: executing program 4 (id=7796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x125003, 0x0) 848.451936ms ago: executing program 4 (id=7797): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000a40)={0x0, 0x2, 0x80000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000e40)={{r0}, r1, 0x2, @inherit={0x70, &(0x7f0000000180)={0x0, 0x5, 0x2, 0x0, {0x3, 0x6, 0x4, 0x3, 0x1ff}, [0x1, 0xffffffffffc00000, 0x1, 0xfffffffffffffff9, 0xfffffffffffffffd]}}, @devid=r2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x5, 0x100}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x40}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00022bbd7000fbdbdf2504000000080006009429ff5c6d3cef92fe7a7a31cc9e1e3d55eb7f000d9abab05538a7761565b68da4b628392b87551f326937c7", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040004) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb0, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc}, {0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7fff}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x40}, {}, {}, {0x0, 0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {0x4, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000900)='kfree\x00', r10}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22080406, &(0x7f00000008c0)={[{@dioread_lock}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@data_writeback}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x8000000000000001}}], [], 0x2c}, 0x84, 0x0, 0xfffffffffffffffd) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r11, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 829.419856ms ago: executing program 2 (id=7799): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x44, r3, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) 788.627127ms ago: executing program 5 (id=7800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) 768.624997ms ago: executing program 2 (id=7801): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x800804, &(0x7f0000000640)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c757466383d312c73686f72746e616d653d6c6f7765722c636865636b3d72656c617865642c726f6469722c726f6469722c757466383d302c74696d655f6f66667365743d3078666666666666666666666666666632382c636f6465706167653d3835372c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c747a3d5554432c00b6638b2365bfce5edff2d3206c0f3ff8c1bfe859ee824ff85d7690d773272154164bea29b754d1a2e184"], 0x1, 0x276, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="35cb1f", 0x3, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x5452, &(0x7f0000000500)={0x1c, 0x2d, 0x0, 0x6, 0x9, 0x2006, 0xffffffff, 0x0, 0xffffffffffffffff}) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 761.336816ms ago: executing program 7 (id=7802): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000a40)={0x0, 0x2, 0x80000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000e40)={{r0}, r1, 0x2, @inherit={0x48, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, {0x3, 0x6, 0x4, 0x3, 0x1ff}}}, @devid=r2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x5, 0x100}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x40}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00022bbd7000fbdbdf2504000000080006009429ff5c6d3cef92fe7a7a31cc9e1e3d55eb7f000d9abab05538a7761565b68da4b628392b87551f326937c7", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000900)='kfree\x00', r7}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 725.127357ms ago: executing program 5 (id=7803): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0), 0x25, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 626.544678ms ago: executing program 7 (id=7804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0x10}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 575.903798ms ago: executing program 6 (id=7805): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd37, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x20004000) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd37, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x20004000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) r3 = getpid() syz_pidfd_open(r3, 0x0) (async) r4 = syz_pidfd_open(r3, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1410, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x801) setns(r4, 0x24020000) (async) setns(r4, 0x24020000) syz_clone(0xf58a3180, 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(r2, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x9, 0x9, 0x1, 0x5, 0xc}) 559.067938ms ago: executing program 4 (id=7806): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061f95f0000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 428.294888ms ago: executing program 5 (id=7807): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x125003, 0x0) 421.821948ms ago: executing program 7 (id=7808): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_submit(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x80000000) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398e8, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0xff], 0x0, 0x0, 0x1}}, 0x40) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 311.029709ms ago: executing program 4 (id=7809): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) semget(0x0, 0x2, 0x1) syz_usb_disconnect(r0) 310.404989ms ago: executing program 5 (id=7810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="000000702da4db6815d436007dd19fe007036aeef0b1d3ec277f6b816733fe59a5e706cbf39da6b947f365fc072a7724688c0f916df002bfc88ebd52682c6dd5e6cb7415616209f6f368bc9763014bc29c5dd2acb3a40a8e57cc53b2e5de86f1691a25323b7727965e52c8e982273ba9680ceb4ac1c88e46c9bf585f410e200bb43192a48af7df86d161c12edc938709a12f128ee9034684fd0d33df472153b8a386b3d6fd9742a17db5e1cf1ba6e4b63b33d90df9101005f465ca", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000101010300000000000000000a0000fcf700198000ad0400001800018014000c8008000100ac1e00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000850}, 0x20040040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800e80000000000000000000040000018111c013ff766835daffad17c1a3e8ffcb75af6043524e36492b4499a962a91a1f1233cf6cb83d7fd2afc05c237d90c11f0971dfbc358b4df36ffbbf5b617f6f088f8a3e61793f10750ff3004a09d0337d52532f207800b795245fdd4598c37fcfe6fd52533670c37b15b7fea1e400dd90b0cb5c9ef9cce84ccc78090bac344a309503c70056b8fcdd09ecd7b2af2e240591817ac3b88e2392a4cca425cdddfb2e3a32e0bd8ad2871a10fa428de14d19f0c7d046316641dc17e8725fb", @ANYRESOCT, @ANYRES8=0x0], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000001000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000fff60000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r8, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kvm_halt_poll_ns\x00', 0xffffffffffffffff, 0x0, 0x80000000000000}, 0x61) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, 0x0) setreuid(r9, 0x0) io_cancel(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) 168.35746ms ago: executing program 7 (id=7811): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x44, r3, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) 18.945541ms ago: executing program 5 (id=7812): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 0s ago: executing program 5 (id=7813): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="721da520004370", 0xfffffcc8}], 0x7) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x3, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8000000000005, 0x6a200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ////8+wKHhUtID7hAOjFcXV2f8+nMsBIBLl3r/n+/A3mcLMBIKfY1AhAYZf/3/f9zpelDJQQAAAzcdGtKCqXs673pKBRKpYibrZ8FKCZrG9XKfEQ8ERG/nSlea9YXWlsm514zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAIy0iMKfkl+2n+U/N/P8dPf3AxPJv1o/CTwREW/98I3v311uNHYXmsv/drS88YNs+YvD+AYDAAAA6Na5Tm/N/znsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNe89eHulM/Xx8qlBxf3LFyJiNi/+eEy25pNRjIjrf09i/MR2SUSMDSD+4b2I+Ghe/KSZ1lHIvPiDeBPOiR+z2buQF//GAOLDVXa/efx5La//FeLZ1jy//41H/E/9g+p9/Iuj499Yj/5/s88YT73zs3LP+PcinhrPP/504ic94j/XZ/yvf+3goNe69EcRc53Pn9YR72SE41K5sbVTru8f3N7YWl6vrFe2FxcXXl56Zemlpfny2ka1kv2bG+M7T//8/bPafz338y/Jsund/udz9pf3mfSfd+4++HCncng6/q3ncuL/6sfZK07HL2RxPpWVm+vnOuXDdvmkZ376m2fOav/qcfuLD/P/f6vXTrud6ihP9/unAwBcgPr+weZytVrZHdlC8yr9EUhD4REsfGugO0zTNG32qZxV9yOin/0kMeCWFvLzOS70PAIM+8gEAAAM2vFJ/7AzAQAAAAAAAAAAAAAAAAAAgKvrMp6y1h3z+BHIySAeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/DQAA///dpdP7") symlinkat(&(0x7f0000001040)='\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB="18020000fe04ffff00000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d0000000000000000020000000000fb0400000000069c9b0005000000000004000000000000000000000000000000000000000001"], 0x4c}}, 0x0) socket(0x10, 0xa, 0xc) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 315.457905][T22884] Tainted: [W]=WARN [ 315.461698][T22884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 315.471747][T22884] Call Trace: [ 315.475015][T22884] [ 315.477937][T22884] dump_stack_lvl+0xf2/0x150 [ 315.482592][T22884] dump_stack+0x15/0x1a [ 315.486804][T22884] should_fail_ex+0x223/0x230 [ 315.491482][T22884] should_failslab+0x8f/0xb0 [ 315.496074][T22884] kmem_cache_alloc_noprof+0x52/0x320 [ 315.501439][T22884] ? getname_flags+0x81/0x3b0 [ 315.506111][T22884] getname_flags+0x81/0x3b0 [ 315.510617][T22884] __x64_sys_mknod+0x40/0x60 [ 315.515212][T22884] x64_sys_call+0x16be/0x2dc0 [ 315.519935][T22884] do_syscall_64+0xc9/0x1c0 [ 315.524428][T22884] ? clear_bhb_loop+0x55/0xb0 [ 315.529098][T22884] ? clear_bhb_loop+0x55/0xb0 [ 315.533818][T22884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.539770][T22884] RIP: 0033:0x7f47641dff19 [ 315.544247][T22884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.563855][T22884] RSP: 002b:00007f4762857058 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 315.572258][T22884] RAX: ffffffffffffffda RBX: 00007f47643a5fa0 RCX: 00007f47641dff19 [ 315.580220][T22884] RDX: 0000000000000000 RSI: 0000000008001420 RDI: 0000000000000000 [ 315.588182][T22884] RBP: 00007f47628570a0 R08: 0000000000000000 R09: 0000000000000000 [ 315.596143][T22884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.604188][T22884] R13: 0000000000000000 R14: 00007f47643a5fa0 R15: 00007ffc71b49698 [ 315.612155][T22884] [ 315.668130][T22891] lo speed is unknown, defaulting to 1000 [ 315.677478][T22893] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6890'. [ 315.762839][T22890] lo speed is unknown, defaulting to 1000 [ 315.809121][T22883] 9pnet_fd: Insufficient options for proto=fd [ 315.832765][T22905] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 315.836263][T22898] rdma_rxe: rxe_newlink: failed to add lo [ 315.871000][T22880] 9pnet_fd: Insufficient options for proto=fd [ 315.932955][T22918] rdma_rxe: rxe_newlink: failed to add lo [ 315.973337][T22922] loop5: detected capacity change from 0 to 512 [ 315.983179][T22922] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 316.011113][T22922] 9pnet_fd: Insufficient options for proto=fd [ 316.053288][T22931] loop5: detected capacity change from 0 to 512 [ 316.069456][T22931] ext4: Unknown parameter 'uid' [ 316.131649][T22932] lo speed is unknown, defaulting to 1000 [ 316.231180][T22935] lo speed is unknown, defaulting to 1000 [ 316.290226][T22926] 9pnet_fd: Insufficient options for proto=fd [ 316.345041][T22936] lo speed is unknown, defaulting to 1000 [ 316.475710][T22946] lo speed is unknown, defaulting to 1000 [ 316.531326][T22955] netlink: 'syz.4.6908': attribute type 13 has an invalid length. [ 316.539181][T22955] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6908'. [ 316.555751][T22955] syz_tun: refused to change device tx_queue_len [ 316.562167][T22955] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 316.570666][T22958] loop3: detected capacity change from 0 to 512 [ 316.598773][T22958] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 316.656523][T22958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.692232][T22964] xt_HMARK: spi-set and port-set can't be combined [ 316.755303][T22968] netlink: 'syz.5.6912': attribute type 13 has an invalid length. [ 316.755992][T22958] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.6909: corrupted inode contents [ 316.763185][T22968] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6912'. [ 316.785759][T22968] syz_tun: refused to change device tx_queue_len [ 316.792146][T22968] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 316.824137][T22968] blktrace: Concurrent blktraces are not allowed on sg0 [ 316.836544][T22958] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.6909: mark_inode_dirty error [ 316.876602][T22958] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.6909: corrupted inode contents [ 317.000992][T20454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.065587][T22979] lo speed is unknown, defaulting to 1000 [ 317.099904][T22971] 9pnet_fd: Insufficient options for proto=fd [ 317.191487][T22993] netlink: 'syz.6.6920': attribute type 13 has an invalid length. [ 317.199507][T22993] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6920'. [ 317.253921][T22993] syz_tun: refused to change device tx_queue_len [ 317.260322][T22993] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 317.435453][T22995] wireguard0: left promiscuous mode [ 317.440790][T22995] wireguard0: left allmulticast mode [ 317.568718][T23005] xt_HMARK: spi-set and port-set can't be combined [ 317.617123][T23008] netlink: 'syz.5.6925': attribute type 10 has an invalid length. [ 317.626798][T23001] lo speed is unknown, defaulting to 1000 [ 317.641528][T23011] netlink: 'syz.2.6927': attribute type 1 has an invalid length. [ 317.661027][T23013] netlink: 'syz.3.6928': attribute type 13 has an invalid length. [ 317.668979][T23013] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6928'. [ 317.720847][T23013] syz_tun: refused to change device tx_queue_len [ 317.727367][T23013] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 317.855748][T23022] FAULT_INJECTION: forcing a failure. [ 317.855748][T23022] name failslab, interval 1, probability 0, space 0, times 0 [ 317.868485][T23022] CPU: 0 UID: 0 PID: 23022 Comm: syz.5.6931 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 317.880770][T23022] Tainted: [W]=WARN [ 317.884605][T23022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.894665][T23022] Call Trace: [ 317.897943][T23022] [ 317.900879][T23022] dump_stack_lvl+0xf2/0x150 [ 317.905498][T23022] dump_stack+0x15/0x1a [ 317.909670][T23022] should_fail_ex+0x223/0x230 [ 317.914384][T23022] ? sctp_add_bind_addr+0x6f/0x1e0 [ 317.919558][T23022] should_failslab+0x8f/0xb0 [ 317.924239][T23022] __kmalloc_cache_noprof+0x4e/0x320 [ 317.929539][T23022] ? sctp_get_port_local+0x79c/0xa90 [ 317.934923][T23022] sctp_add_bind_addr+0x6f/0x1e0 [ 317.939890][T23022] sctp_do_bind+0x434/0x4c0 [ 317.944422][T23022] sctp_connect_new_asoc+0x15b/0x3b0 [ 317.949728][T23022] sctp_sendmsg+0xf05/0x1920 [ 317.954403][T23022] ? __pfx_sctp_sendmsg+0x10/0x10 [ 317.959486][T23022] inet_sendmsg+0xc5/0xd0 [ 317.963839][T23022] __sock_sendmsg+0x102/0x180 [ 317.968646][T23022] ____sys_sendmsg+0x312/0x410 [ 317.973460][T23022] __sys_sendmmsg+0x227/0x4b0 [ 317.978175][T23022] __x64_sys_sendmmsg+0x57/0x70 [ 317.983117][T23022] x64_sys_call+0x29aa/0x2dc0 [ 317.987802][T23022] do_syscall_64+0xc9/0x1c0 [ 317.992373][T23022] ? clear_bhb_loop+0x55/0xb0 [ 317.997053][T23022] ? clear_bhb_loop+0x55/0xb0 [ 318.001793][T23022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.007696][T23022] RIP: 0033:0x7fd5fd88ff19 [ 318.012148][T23022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.031762][T23022] RSP: 002b:00007fd5fbf07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 318.040325][T23022] RAX: ffffffffffffffda RBX: 00007fd5fda55fa0 RCX: 00007fd5fd88ff19 [ 318.048403][T23022] RDX: 0000000000000001 RSI: 0000000020000480 RDI: 0000000000000003 [ 318.056428][T23022] RBP: 00007fd5fbf070a0 R08: 0000000000000000 R09: 0000000000000000 [ 318.064494][T23022] R10: 0000000034000811 R11: 0000000000000246 R12: 0000000000000001 [ 318.072473][T23022] R13: 0000000000000000 R14: 00007fd5fda55fa0 R15: 00007ffcf34a7008 [ 318.080461][T23022] [ 318.548701][T23042] xt_HMARK: spi-set and port-set can't be combined [ 318.664870][T23049] netlink: 'syz.5.6941': attribute type 1 has an invalid length. [ 318.767868][T23060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.902258][T23068] lo speed is unknown, defaulting to 1000 [ 319.090796][T23077] loop3: detected capacity change from 0 to 512 [ 319.106777][T23077] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 319.121120][T23077] 9pnet_fd: Insufficient options for proto=fd [ 319.159829][T23083] netlink: 'syz.3.6955': attribute type 1 has an invalid length. [ 319.185829][T23086] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 319.281244][T23089] lo speed is unknown, defaulting to 1000 [ 319.370795][T23102] netlink: 'syz.3.6961': attribute type 13 has an invalid length. [ 319.378683][T23102] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6961'. [ 319.402339][T23102] syz_tun: refused to change device tx_queue_len [ 319.408724][T23102] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 319.436149][T23079] 9pnet_fd: Insufficient options for proto=fd [ 319.479595][T23109] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 319.512754][T23114] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6965'. [ 319.601533][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 319.601545][ T29] audit: type=1326 audit(1733205161.208:26239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23113 comm="syz.2.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47641dff19 code=0x7ffc0000 [ 319.631442][ T29] audit: type=1326 audit(1733205161.208:26240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23113 comm="syz.2.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47641dff19 code=0x7ffc0000 [ 319.670192][ T29] audit: type=1326 audit(1733205161.278:26241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23113 comm="syz.2.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f47641dff19 code=0x7ffc0000 [ 319.704648][ T29] audit: type=1326 audit(1733205161.278:26242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23113 comm="syz.2.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47641dff19 code=0x7ffc0000 [ 319.728310][ T29] audit: type=1326 audit(1733205161.288:26243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23113 comm="syz.2.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47641dff19 code=0x7ffc0000 [ 319.815817][T23129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 319.828322][T23132] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 319.885883][T23134] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6973'. [ 319.893068][ T29] audit: type=1326 audit(1733205161.488:26244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.5.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 319.894959][T23134] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6973'. [ 319.977995][ T29] audit: type=1326 audit(1733205161.528:26245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.5.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 320.001658][ T29] audit: type=1326 audit(1733205161.528:26246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.5.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 320.025255][ T29] audit: type=1326 audit(1733205161.528:26247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.5.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 320.048845][ T29] audit: type=1326 audit(1733205161.528:26248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.5.6975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 320.144531][T23150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6979'. [ 320.289354][T23153] lo speed is unknown, defaulting to 1000 [ 320.349537][T23162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.380858][T23165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.396672][T23147] 9pnet_fd: Insufficient options for proto=fd [ 320.422051][T23168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.526454][T23175] netlink: 'syz.3.6987': attribute type 13 has an invalid length. [ 320.542487][T23175] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6987'. [ 320.570440][T23175] syz_tun: refused to change device tx_queue_len [ 320.576825][T23175] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 321.009175][T23199] blktrace: Concurrent blktraces are not allowed on sg0 [ 321.055151][T23204] lo speed is unknown, defaulting to 1000 [ 321.100454][T23211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.254232][T23220] syz_tun: refused to change device tx_queue_len [ 321.269003][T23220] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 321.371312][T23229] xt_HMARK: spi-set and port-set can't be combined [ 321.566215][T23235] lo speed is unknown, defaulting to 1000 [ 321.930628][T23248] loop3: detected capacity change from 0 to 512 [ 321.949640][T23248] ext4: Unknown parameter 'uid' [ 321.960954][T23252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.087875][T23248] blktrace: Concurrent blktraces are not allowed on sg0 [ 322.155348][T23259] lo speed is unknown, defaulting to 1000 [ 322.189407][ T9] hid (null): unknown global tag 0x11 [ 322.203308][T23270] rdma_rxe: rxe_newlink: failed to add bond0 [ 322.210090][ T9] hid-generic 0005:0007:0005.0046: ignoring exceeding usage max [ 322.227065][T23273] 9pnet: Could not find request transport: f [ 322.237575][ T9] hid-generic 0005:0007:0005.0046: unexpected long global item [ 322.255409][ T9] hid-generic 0005:0007:0005.0046: probe with driver hid-generic failed with error -22 [ 322.364175][T23284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.378164][T23286] xt_HMARK: spi-set and port-set can't be combined [ 322.639886][T23310] validate_nla: 1 callbacks suppressed [ 322.639902][T23310] netlink: 'syz.3.7038': attribute type 13 has an invalid length. [ 322.653279][T23310] __nla_validate_parse: 2 callbacks suppressed [ 322.653291][T23310] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7038'. [ 322.672143][T23310] syz_tun: refused to change device tx_queue_len [ 322.678624][T23310] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 322.772504][T23323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.772607][T23324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7042'. [ 323.052470][T23333] lo speed is unknown, defaulting to 1000 [ 323.153922][T23343] 9pnet_fd: Insufficient options for proto=fd [ 323.239962][T23357] loop3: detected capacity change from 0 to 512 [ 323.246984][T23357] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 323.271614][T23357] 9pnet_fd: Insufficient options for proto=fd [ 323.276078][T23354] lo speed is unknown, defaulting to 1000 [ 323.288886][T23359] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 323.356651][T23369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.374317][T23366] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 323.444848][T23367] lo speed is unknown, defaulting to 1000 [ 323.448992][T23375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.556804][T23385] netlink: 'syz.3.7062': attribute type 13 has an invalid length. [ 323.572902][T23385] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7062'. [ 323.584327][T23385] syz_tun: refused to change device tx_queue_len [ 323.587742][T23389] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7063'. [ 323.590732][T23385] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 323.735425][T23402] rdma_rxe: rxe_newlink: failed to add bond0 [ 323.764233][T23404] netlink: 'syz.5.7070': attribute type 13 has an invalid length. [ 323.772111][T23404] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7070'. [ 323.772425][ T3541] hid (null): unknown global tag 0x11 [ 323.797886][ T3541] hid-generic 0005:0007:0005.0047: ignoring exceeding usage max [ 323.806021][T23404] syz_tun: refused to change device tx_queue_len [ 323.810473][T23402] 9pnet: Could not find request transport: f [ 323.812378][T23404] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 323.848025][T23404] blktrace: Concurrent blktraces are not allowed on sg0 [ 323.854946][ T3541] hid-generic 0005:0007:0005.0047: unexpected long global item [ 323.864334][ T3541] hid-generic 0005:0007:0005.0047: probe with driver hid-generic failed with error -22 [ 323.986154][T23417] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7075'. [ 324.123651][T23423] netlink: 'syz.4.7078': attribute type 1 has an invalid length. [ 324.284382][T23435] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 324.441310][T23441] lo speed is unknown, defaulting to 1000 [ 324.506136][T23447] netlink: 'syz.2.7088': attribute type 1 has an invalid length. [ 324.525259][T23448] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.620480][T23457] netlink: 'syz.3.7091': attribute type 13 has an invalid length. [ 324.628400][T23457] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7091'. [ 324.683440][T23457] syz_tun: refused to change device tx_queue_len [ 324.689919][T23457] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 324.732812][T23467] netlink: 'syz.6.7095': attribute type 1 has an invalid length. [ 324.793762][T23471] netlink: 'syz.6.7098': attribute type 13 has an invalid length. [ 324.801631][T23471] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7098'. [ 324.819947][T23471] syz_tun: refused to change device tx_queue_len [ 324.826304][T23471] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 324.940162][T23482] xt_ct_set_timeout: 1 callbacks suppressed [ 324.940178][T23482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.994350][T23476] lo speed is unknown, defaulting to 1000 [ 325.055910][T23491] xt_HMARK: spi-set and port-set can't be combined [ 325.072433][T23494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.105336][T23496] xt_HMARK: spi-set and port-set can't be combined [ 325.172189][T23500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.225535][T23506] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7109'. [ 325.395152][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 325.395167][ T29] audit: type=1326 audit(1733205166.997:26552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23505 comm="syz.3.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6b8aff19 code=0x7ffc0000 [ 325.434851][ T29] audit: type=1326 audit(1733205167.037:26553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23505 comm="syz.3.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6b8aff19 code=0x7ffc0000 [ 325.448855][T23510] lo speed is unknown, defaulting to 1000 [ 325.458503][ T29] audit: type=1326 audit(1733205167.037:26554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23505 comm="syz.3.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0c6b8aff19 code=0x7ffc0000 [ 325.487703][ T29] audit: type=1326 audit(1733205167.037:26555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23505 comm="syz.3.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6b8aff19 code=0x7ffc0000 [ 325.511341][ T29] audit: type=1326 audit(1733205167.037:26556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23505 comm="syz.3.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6b8aff19 code=0x7ffc0000 [ 325.534965][ T29] audit: type=1326 audit(1733205167.037:26557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23505 comm="syz.3.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f0c6b8aff19 code=0x7ffc0000 [ 325.558637][ T29] audit: type=1326 audit(1733205167.037:26558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23505 comm="syz.3.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6b8aff19 code=0x7ffc0000 [ 325.582286][ T29] audit: type=1326 audit(1733205167.037:26559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23505 comm="syz.3.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6b8aff19 code=0x7ffc0000 [ 325.606218][ T29] audit: type=1326 audit(1733205167.037:26560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23505 comm="syz.3.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f0c6b8aff19 code=0x7ffc0000 [ 325.629808][ T29] audit: type=1326 audit(1733205167.037:26561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23505 comm="syz.3.7109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6b8aff19 code=0x7ffc0000 [ 325.760510][T23538] FAULT_INJECTION: forcing a failure. [ 325.760510][T23538] name failslab, interval 1, probability 0, space 0, times 0 [ 325.773202][T23538] CPU: 1 UID: 0 PID: 23538 Comm: syz.3.7120 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 325.785456][T23538] Tainted: [W]=WARN [ 325.789248][T23538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 325.796425][T23534] netlink: 'syz.2.7119': attribute type 13 has an invalid length. [ 325.799292][T23538] Call Trace: [ 325.799302][T23538] [ 325.799309][T23538] dump_stack_lvl+0xf2/0x150 [ 325.807120][T23534] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7119'. [ 325.810371][T23538] dump_stack+0x15/0x1a [ 325.810403][T23538] should_fail_ex+0x223/0x230 [ 325.810426][T23538] should_failslab+0x8f/0xb0 [ 325.840391][T23538] kmem_cache_alloc_noprof+0x52/0x320 [ 325.845817][T23538] ? getname_flags+0x81/0x3b0 [ 325.850556][T23538] ? vfs_write+0x596/0x920 [ 325.854990][T23538] getname_flags+0x81/0x3b0 [ 325.859497][T23538] user_path_at+0x26/0x120 [ 325.863923][T23538] __se_sys_utime+0xc6/0x1c0 [ 325.868670][T23538] __x64_sys_utime+0x31/0x40 [ 325.873348][T23538] x64_sys_call+0x2996/0x2dc0 [ 325.878033][T23538] do_syscall_64+0xc9/0x1c0 [ 325.882592][T23538] ? clear_bhb_loop+0x55/0xb0 [ 325.887268][T23538] ? clear_bhb_loop+0x55/0xb0 [ 325.891936][T23538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.897907][T23538] RIP: 0033:0x7f0c6b8aff19 [ 325.902310][T23538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.921986][T23538] RSP: 002b:00007f0c69f27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 325.930492][T23538] RAX: ffffffffffffffda RBX: 00007f0c6ba75fa0 RCX: 00007f0c6b8aff19 [ 325.938509][T23538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200006c0 [ 325.946526][T23538] RBP: 00007f0c69f270a0 R08: 0000000000000000 R09: 0000000000000000 [ 325.954491][T23538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.962451][T23538] R13: 0000000000000000 R14: 00007f0c6ba75fa0 R15: 00007fff01ca9888 [ 325.970420][T23538] [ 325.982769][T23544] netlink: 'syz.5.7123': attribute type 13 has an invalid length. [ 326.000638][T23534] syz_tun: refused to change device tx_queue_len [ 326.006984][T23534] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 326.023958][T23544] syz_tun: refused to change device tx_queue_len [ 326.030337][T23544] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 326.052092][T23546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.102808][T23541] lo speed is unknown, defaulting to 1000 [ 326.128327][T23549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.142254][T23549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.317359][T23556] syz_tun: refused to change device tx_queue_len [ 326.323855][T23556] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 326.851727][T23587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.859829][T23589] syz_tun: refused to change device tx_queue_len [ 326.874250][T23589] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 326.954825][T23592] lo speed is unknown, defaulting to 1000 [ 327.216006][T23614] loop5: detected capacity change from 0 to 128 [ 327.240494][T23614] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.254788][T23614] ext4 filesystem being mounted at /328/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 327.306633][T23622] loop3: detected capacity change from 0 to 1024 [ 327.307007][T18434] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.323010][T23622] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 327.332865][T23622] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 327.360536][T23629] rdma_rxe: rxe_newlink: failed to add bond0 [ 327.363781][T23622] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 327.368581][T23627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.385412][ T3372] hid (null): unknown global tag 0x11 [ 327.399466][T23622] EXT4-fs error (device loop3): ext4_get_journal_inode:5809: inode #5: comm syz.3.7151: unexpected bad inode w/o EXT4_IGET_BAD [ 327.407863][ T3372] hid-generic 0005:0007:0005.0048: ignoring exceeding usage max [ 327.435529][ T3372] hid-generic 0005:0007:0005.0048: unexpected long global item [ 327.445618][T23622] EXT4-fs (loop3): no journal found [ 327.450966][T23622] EXT4-fs (loop3): can't get journal size [ 327.451721][T23629] 9pnet: Could not find request transport: f [ 327.463537][ T3372] hid-generic 0005:0007:0005.0048: probe with driver hid-generic failed with error -22 [ 327.473908][T23622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.537647][T23643] xt_HMARK: spi-set and port-set can't be combined [ 327.545621][T20454] EXT4-fs error (device loop3): __ext4_iget:4984: inode #15: block 1803188595: comm syz-executor: invalid block [ 327.567750][T20454] EXT4-fs error (device loop3): __ext4_iget:4984: inode #15: block 1803188595: comm syz-executor: invalid block [ 327.632635][T23657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.633268][T23659] loop5: detected capacity change from 0 to 512 [ 327.648615][T23659] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 327.670167][T23659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.684234][T23642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.710256][T18434] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.739868][T23665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.844391][T23682] xt_HMARK: spi-set and port-set can't be combined [ 327.967361][T23673] lo speed is unknown, defaulting to 1000 [ 327.992586][T23698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.047960][T23704] validate_nla: 2 callbacks suppressed [ 328.047989][T23704] netlink: 'syz.4.7183': attribute type 13 has an invalid length. [ 328.069421][T23704] __nla_validate_parse: 3 callbacks suppressed [ 328.069435][T23704] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7183'. [ 328.120299][T23704] syz_tun: refused to change device tx_queue_len [ 328.126677][T23704] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 328.149269][T23673] chnl_net:caif_netlink_parms(): no params data found [ 328.218861][T23673] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.225952][T23673] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.267124][T23673] bridge_slave_0: entered allmulticast mode [ 328.274083][T23673] bridge_slave_0: entered promiscuous mode [ 328.291702][T23673] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.293854][T23717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.298854][T23673] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.332656][T23673] bridge_slave_1: entered allmulticast mode [ 328.339871][T23673] bridge_slave_1: entered promiscuous mode [ 328.349944][T23719] xt_HMARK: spi-set and port-set can't be combined [ 328.366388][T23673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.377261][T23673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.413666][T23673] team0: Port device team_slave_0 added [ 328.431430][T23673] team0: Port device team_slave_1 added [ 328.526089][T23673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.533145][T23673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.559117][T23673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.570803][T23673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.577798][T23673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.603911][T23673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.634710][T23734] netlink: 'syz.5.7187': attribute type 1 has an invalid length. [ 328.634723][T23673] hsr_slave_0: entered promiscuous mode [ 328.648716][T23673] hsr_slave_1: entered promiscuous mode [ 328.654749][T23673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.662462][T23673] Cannot create hsr debugfs directory [ 328.756210][T23673] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 328.766359][T23673] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 328.776120][T23673] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 328.787587][T23673] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 328.977319][T23673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.013910][T23746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.067220][T23673] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.078590][T23746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.087202][T23750] netlink: 'syz.4.7198': attribute type 10 has an invalid length. [ 329.130535][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.137619][ T6997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.163772][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.170848][ T6997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.202741][T23750] hsr_slave_0: left promiscuous mode [ 329.208770][T23750] hsr_slave_1: left promiscuous mode [ 329.382155][T23673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.558747][T23778] loop5: detected capacity change from 0 to 764 [ 329.573715][T23780] rdma_rxe: rxe_newlink: failed to add bond0 [ 329.610758][ T3372] hid (null): unknown global tag 0x11 [ 329.611916][T23786] loop5: detected capacity change from 0 to 512 [ 329.616838][ T3372] hid-generic 0005:0007:0005.0049: ignoring exceeding usage max [ 329.622847][T23786] ext4: Unknown parameter 'uid' [ 329.639721][ T3372] hid-generic 0005:0007:0005.0049: unexpected long global item [ 329.647393][ T3372] hid-generic 0005:0007:0005.0049: probe with driver hid-generic failed with error -22 [ 329.659494][T23780] 9pnet: Could not find request transport: f [ 329.722307][T23673] veth0_vlan: entered promiscuous mode [ 329.734751][T23673] veth1_vlan: entered promiscuous mode [ 329.784350][T23673] veth0_macvtap: entered promiscuous mode [ 329.795161][T23786] blktrace: Concurrent blktraces are not allowed on sg0 [ 329.799378][T23673] veth1_macvtap: entered promiscuous mode [ 329.828505][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.839125][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.849157][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.859756][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.869645][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.880233][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.892920][T23673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.901671][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.912153][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.922078][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.932506][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.942335][T23673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.952820][T23673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.964173][T23673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.982752][T23798] lo speed is unknown, defaulting to 1000 [ 329.989053][T23673] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.997771][T23673] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.006571][T23673] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.015341][T23673] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.022179][T23786] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 330.261909][T23818] loop7: detected capacity change from 0 to 512 [ 330.298235][T23818] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 330.334315][T23827] loop7: detected capacity change from 0 to 256 [ 330.341208][T23827] vfat: Bad value for 'time_offset' [ 330.411113][T23830] netlink: 'syz.4.7215': attribute type 1 has an invalid length. [ 330.571253][T23836] 9pnet_fd: Insufficient options for proto=fd [ 330.817357][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 330.817380][ T29] audit: type=1400 audit(1733205172.417:26983): avc: denied { shutdown } for pid=23842 comm="syz.6.7226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 330.925030][ T29] audit: type=1400 audit(1733205172.457:26984): avc: denied { read } for pid=23842 comm="syz.6.7226" path="socket:[84426]" dev="sockfs" ino=84426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 330.939504][T23848] xt_HMARK: spi-set and port-set can't be combined [ 330.948544][ T29] audit: type=1400 audit(1733205172.457:26985): avc: denied { connect } for pid=23842 comm="syz.6.7226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 330.948571][ T29] audit: type=1400 audit(1733205172.467:26986): avc: denied { ioctl } for pid=23842 comm="syz.6.7226" path="socket:[84426]" dev="sockfs" ino=84426 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 331.055964][ T29] audit: type=1326 audit(1733205172.657:26987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.2.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47641dff19 code=0x7ffc0000 [ 331.098089][ T29] audit: type=1326 audit(1733205172.657:26988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.2.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47641dff19 code=0x7ffc0000 [ 331.121838][ T29] audit: type=1326 audit(1733205172.687:26989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.2.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47641dff19 code=0x7ffc0000 [ 331.145560][ T29] audit: type=1326 audit(1733205172.687:26990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.2.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47641dff19 code=0x7ffc0000 [ 331.169178][ T29] audit: type=1326 audit(1733205172.687:26991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.2.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47641dff19 code=0x7ffc0000 [ 331.192825][ T29] audit: type=1326 audit(1733205172.687:26992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23849 comm="syz.2.7229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47641dff19 code=0x7ffc0000 [ 331.225142][T23856] loop5: detected capacity change from 0 to 512 [ 331.571107][T23856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.594165][T23856] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.659846][T18434] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.705463][T23874] loop7: detected capacity change from 0 to 164 [ 331.768711][T23874] syz.7.7239: attempt to access beyond end of device [ 331.768711][T23874] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 331.798229][T23874] syz.7.7239: attempt to access beyond end of device [ 331.798229][T23874] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 331.828831][T23874] syz.7.7239: attempt to access beyond end of device [ 331.828831][T23874] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 331.854487][T23870] blktrace: Concurrent blktraces are not allowed on sg0 [ 331.858527][T23874] syz.7.7239: attempt to access beyond end of device [ 331.858527][T23874] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 331.897654][T23874] syz.7.7239: attempt to access beyond end of device [ 331.897654][T23874] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 331.912461][T23874] syz.7.7239: attempt to access beyond end of device [ 331.912461][T23874] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 331.926303][T23874] syz.7.7239: attempt to access beyond end of device [ 331.926303][T23874] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 331.929408][T23889] xt_ct_set_timeout: 2 callbacks suppressed [ 331.929421][T23889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.940395][T23874] syz.7.7239: attempt to access beyond end of device [ 331.940395][T23874] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 331.989329][T23880] lo speed is unknown, defaulting to 1000 [ 332.011397][T23897] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 332.023341][T23896] rdma_rxe: rxe_newlink: failed to add bond0 [ 332.042781][T23874] syz.7.7239: attempt to access beyond end of device [ 332.042781][T23874] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 332.062549][T23874] syz.7.7239: attempt to access beyond end of device [ 332.062549][T23874] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 332.082444][ T3175] hid (null): unknown global tag 0x11 [ 332.083402][T23901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.099575][ T3175] hid-generic 0005:0007:0005.004A: ignoring exceeding usage max [ 332.126034][ T3175] hid-generic 0005:0007:0005.004A: unexpected long global item [ 332.134174][ T3175] hid-generic 0005:0007:0005.004A: probe with driver hid-generic failed with error -22 [ 332.144930][T23896] 9pnet: Could not find request transport: f [ 332.255303][T23910] rdma_rxe: rxe_newlink: failed to add bond0 [ 332.295886][ T24] hid (null): unknown global tag 0x11 [ 332.322273][ T24] hid-generic 0005:0007:0005.004B: ignoring exceeding usage max [ 332.334636][T23910] 9pnet: Could not find request transport: f [ 332.357468][ T24] hid-generic 0005:0007:0005.004B: unexpected long global item [ 332.367418][ T24] hid-generic 0005:0007:0005.004B: probe with driver hid-generic failed with error -22 [ 332.381337][T23907] lo speed is unknown, defaulting to 1000 [ 332.435758][T23918] 9pnet_fd: Insufficient options for proto=fd [ 332.500045][T23924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.520757][T23926] xt_HMARK: spi-set and port-set can't be combined [ 332.591262][T23931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.694135][T23948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.702852][T23948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.795410][T23954] netlink: 'syz.7.7269': attribute type 13 has an invalid length. [ 332.803308][T23954] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7269'. [ 332.815502][T23954] syz_tun: refused to change device tx_queue_len [ 332.821948][T23954] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 332.933981][T23959] netlink: 'syz.5.7271': attribute type 13 has an invalid length. [ 332.941870][T23959] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7271'. [ 332.958225][T23959] syz_tun: refused to change device tx_queue_len [ 332.964644][T23959] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 332.982936][T23959] blktrace: Concurrent blktraces are not allowed on sg0 [ 333.191664][T23966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.227183][T23968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.263955][T23970] netlink: 'syz.7.7274': attribute type 13 has an invalid length. [ 333.279969][T23970] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7274'. [ 333.291461][T23970] syz_tun: refused to change device tx_queue_len [ 333.297808][T23970] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 333.317974][T23970] blktrace: Concurrent blktraces are not allowed on sg0 [ 333.632840][T23995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.640478][T23991] lo speed is unknown, defaulting to 1000 [ 333.696507][T24006] FAULT_INJECTION: forcing a failure. [ 333.696507][T24006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.709665][T24006] CPU: 0 UID: 0 PID: 24006 Comm: syz.2.7287 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 333.721919][T24006] Tainted: [W]=WARN [ 333.725731][T24006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.735801][T24006] Call Trace: [ 333.739086][T24006] [ 333.742024][T24006] dump_stack_lvl+0xf2/0x150 [ 333.746717][T24006] dump_stack+0x15/0x1a [ 333.750916][T24006] should_fail_ex+0x223/0x230 [ 333.755664][T24006] should_fail+0xb/0x10 [ 333.759823][T24006] should_fail_usercopy+0x1a/0x20 [ 333.764863][T24006] _copy_to_user+0x20/0xa0 [ 333.769363][T24006] simple_read_from_buffer+0xa0/0x110 [ 333.774755][T24006] proc_fail_nth_read+0xf9/0x140 [ 333.779715][T24006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.785325][T24006] vfs_read+0x1a2/0x700 [ 333.789518][T24006] ? __rcu_read_unlock+0x4e/0x70 [ 333.794524][T24006] ? __fget_files+0x17c/0x1c0 [ 333.799229][T24006] ksys_read+0xe8/0x1b0 [ 333.803405][T24006] __x64_sys_read+0x42/0x50 [ 333.807919][T24006] x64_sys_call+0x2874/0x2dc0 [ 333.812608][T24006] do_syscall_64+0xc9/0x1c0 [ 333.817111][T24006] ? clear_bhb_loop+0x55/0xb0 [ 333.821822][T24006] ? clear_bhb_loop+0x55/0xb0 [ 333.826558][T24006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.832952][T24006] RIP: 0033:0x7f47641de92c [ 333.837373][T24006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 333.851377][T24005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7288'. [ 333.857035][T24006] RSP: 002b:00007f4762857050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.857059][T24006] RAX: ffffffffffffffda RBX: 00007f47643a5fa0 RCX: 00007f47641de92c [ 333.882652][T24006] RDX: 000000000000000f RSI: 00007f47628570b0 RDI: 0000000000000007 [ 333.890662][T24006] RBP: 00007f47628570a0 R08: 0000000000000000 R09: 0000000000000000 [ 333.898717][T24006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.906698][T24006] R13: 0000000000000000 R14: 00007f47643a5fa0 R15: 00007ffc71b49698 [ 333.914686][T24006] [ 333.929452][T23981] 9pnet_fd: Insufficient options for proto=fd [ 334.082500][T24015] blktrace: Concurrent blktraces are not allowed on sg0 [ 334.089940][T24027] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7295'. [ 334.145530][T24015] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 334.171262][T24020] lo speed is unknown, defaulting to 1000 [ 334.264860][T24036] netlink: 'syz.7.7300': attribute type 13 has an invalid length. [ 334.272871][T24036] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7300'. [ 334.300472][T24036] syz_tun: refused to change device tx_queue_len [ 334.306851][T24036] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 334.357748][T24041] loop5: detected capacity change from 0 to 128 [ 334.604878][T24063] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7310'. [ 334.662804][T24059] lo speed is unknown, defaulting to 1000 [ 334.767840][T24066] lo speed is unknown, defaulting to 1000 [ 334.864333][T24074] netlink: 352 bytes leftover after parsing attributes in process `syz.4.7312'. [ 334.893463][T24056] 9pnet_fd: Insufficient options for proto=fd [ 334.900607][T24077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.953050][T24082] xt_HMARK: spi-set and port-set can't be combined [ 335.007732][T24086] FAULT_INJECTION: forcing a failure. [ 335.007732][T24086] name failslab, interval 1, probability 0, space 0, times 0 [ 335.020446][T24086] CPU: 1 UID: 0 PID: 24086 Comm: syz.5.7317 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 335.032707][T24086] Tainted: [W]=WARN [ 335.036561][T24086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 335.046601][T24086] Call Trace: [ 335.049921][T24086] [ 335.052843][T24086] dump_stack_lvl+0xf2/0x150 [ 335.057436][T24086] dump_stack+0x15/0x1a [ 335.061662][T24086] should_fail_ex+0x223/0x230 [ 335.066337][T24086] should_failslab+0x8f/0xb0 [ 335.071006][T24086] kmem_cache_alloc_noprof+0x52/0x320 [ 335.076393][T24086] ? getname_flags+0x81/0x3b0 [ 335.081122][T24086] getname_flags+0x81/0x3b0 [ 335.085662][T24086] getname+0x17/0x20 [ 335.089711][T24086] do_sys_openat2+0x67/0x120 [ 335.094334][T24086] __x64_sys_openat+0xf3/0x120 [ 335.099092][T24086] x64_sys_call+0x2b30/0x2dc0 [ 335.103807][T24086] do_syscall_64+0xc9/0x1c0 [ 335.108368][T24086] ? clear_bhb_loop+0x55/0xb0 [ 335.113039][T24086] ? clear_bhb_loop+0x55/0xb0 [ 335.117774][T24086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.123698][T24086] RIP: 0033:0x7fd5fd88ff19 [ 335.128103][T24086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.147742][T24086] RSP: 002b:00007fd5fbf07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 335.156145][T24086] RAX: ffffffffffffffda RBX: 00007fd5fda55fa0 RCX: 00007fd5fd88ff19 [ 335.164148][T24086] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 335.172109][T24086] RBP: 00007fd5fbf070a0 R08: 0000000000000000 R09: 0000000000000000 [ 335.180143][T24086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.188105][T24086] R13: 0000000000000000 R14: 00007fd5fda55fa0 R15: 00007ffcf34a7008 [ 335.196081][T24086] [ 335.264193][T24091] netlink: 'syz.7.7320': attribute type 13 has an invalid length. [ 335.272167][T24091] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7320'. [ 335.282613][T24091] syz_tun: refused to change device tx_queue_len [ 335.288994][T24091] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 335.304867][T24094] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7321'. [ 335.421544][T24092] blktrace: Concurrent blktraces are not allowed on sg0 [ 335.516033][T24104] rdma_rxe: rxe_newlink: failed to add bond0 [ 335.622992][ T24] hid (null): unknown global tag 0x11 [ 335.630015][ T24] hid-generic 0005:0007:0005.004C: ignoring exceeding usage max [ 335.642275][T24104] 9pnet: Could not find request transport: f [ 335.658696][ T24] hid-generic 0005:0007:0005.004C: unexpected long global item [ 335.666390][ T24] hid-generic 0005:0007:0005.004C: probe with driver hid-generic failed with error -22 [ 335.675326][T24110] lo speed is unknown, defaulting to 1000 [ 335.738709][T24113] netlink: 352 bytes leftover after parsing attributes in process `syz.5.7326'. [ 335.818647][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 335.818662][ T29] audit: type=1326 audit(1733205177.416:27309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24115 comm="syz.5.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 335.848435][ T29] audit: type=1326 audit(1733205177.416:27310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24115 comm="syz.5.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 335.872167][ T29] audit: type=1326 audit(1733205177.416:27311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24115 comm="syz.5.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 335.897866][ T29] audit: type=1326 audit(1733205177.416:27312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24115 comm="syz.5.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 335.921500][ T29] audit: type=1326 audit(1733205177.416:27313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24115 comm="syz.5.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 335.945148][ T29] audit: type=1326 audit(1733205177.416:27314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24115 comm="syz.5.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 335.968718][ T29] audit: type=1326 audit(1733205177.416:27315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24115 comm="syz.5.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 335.983433][T24119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.992274][ T29] audit: type=1326 audit(1733205177.416:27316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24115 comm="syz.5.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 336.023920][ T29] audit: type=1326 audit(1733205177.416:27317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24115 comm="syz.5.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 336.052622][ T29] audit: type=1326 audit(1733205177.416:27318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24115 comm="syz.5.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 336.203233][T24134] lo speed is unknown, defaulting to 1000 [ 336.243324][T24142] hub 9-0:1.0: USB hub found [ 336.246989][T24145] loop5: detected capacity change from 0 to 512 [ 336.259590][T24142] hub 9-0:1.0: 8 ports detected [ 336.261971][T24145] ext4: Unknown parameter 'uid' [ 336.289239][T24142] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7337'. [ 336.341185][T24125] 9pnet_fd: Insufficient options for proto=fd [ 336.423528][T24162] blktrace: Concurrent blktraces are not allowed on sg0 [ 336.428358][T24155] lo speed is unknown, defaulting to 1000 [ 336.449923][T24145] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 336.581953][T24156] lo speed is unknown, defaulting to 1000 [ 336.868356][T24189] xt_HMARK: spi-set and port-set can't be combined [ 336.899634][T24192] loop5: detected capacity change from 0 to 512 [ 336.919432][T24192] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 337.003450][T24206] loop5: detected capacity change from 0 to 512 [ 337.015563][T24206] ext4: Unknown parameter 'uid' [ 337.018000][T24210] hub 9-0:1.0: USB hub found [ 337.034735][T24210] hub 9-0:1.0: 8 ports detected [ 337.216176][T24211] lo speed is unknown, defaulting to 1000 [ 337.245626][T24223] blktrace: Concurrent blktraces are not allowed on sg0 [ 337.270709][T24206] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 337.311584][T24226] netlink: 'syz.6.7358': attribute type 1 has an invalid length. [ 337.322953][T24216] lo speed is unknown, defaulting to 1000 [ 337.392372][T24231] rdma_rxe: rxe_newlink: failed to add bond0 [ 337.447714][ T3372] hid (null): unknown global tag 0x11 [ 337.459891][ T3372] hid-generic 0005:0007:0005.004D: ignoring exceeding usage max [ 337.472158][ T3372] hid-generic 0005:0007:0005.004D: unexpected long global item [ 337.479893][ T3372] hid-generic 0005:0007:0005.004D: probe with driver hid-generic failed with error -22 [ 337.496612][T24231] 9pnet: Could not find request transport: f [ 337.507544][T24236] bond1: entered promiscuous mode [ 337.512676][T24236] bond1: entered allmulticast mode [ 337.518171][T24236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.544137][T24236] bond1 (unregistering): Released all slaves [ 337.691172][T24248] netlink: 'syz.5.7375': attribute type 13 has an invalid length. [ 337.716486][T24248] syz_tun: refused to change device tx_queue_len [ 337.722902][T24248] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 337.862373][T24263] rdma_rxe: rxe_newlink: failed to add bond0 [ 337.878003][ T9] hid (null): unknown global tag 0x11 [ 337.889679][T24265] xt_HMARK: spi-set and port-set can't be combined [ 337.910369][ T9] hid-generic 0005:0007:0005.004E: ignoring exceeding usage max [ 337.923859][T24263] 9pnet: Could not find request transport: f [ 337.930196][ T9] hid-generic 0005:0007:0005.004E: unexpected long global item [ 337.957559][ T9] hid-generic 0005:0007:0005.004E: probe with driver hid-generic failed with error -22 [ 338.185905][T24280] FAULT_INJECTION: forcing a failure. [ 338.185905][T24280] name failslab, interval 1, probability 0, space 0, times 0 [ 338.198580][T24280] CPU: 0 UID: 0 PID: 24280 Comm: syz.7.7389 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 338.210872][T24280] Tainted: [W]=WARN [ 338.214745][T24280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 338.224872][T24280] Call Trace: [ 338.228172][T24280] [ 338.231169][T24280] dump_stack_lvl+0xf2/0x150 [ 338.235773][T24280] dump_stack+0x15/0x1a [ 338.240037][T24280] should_fail_ex+0x223/0x230 [ 338.244789][T24280] should_failslab+0x8f/0xb0 [ 338.249387][T24280] __kmalloc_node_noprof+0xad/0x410 [ 338.254657][T24280] ? __kvmalloc_node_noprof+0x72/0x170 [ 338.260182][T24280] __kvmalloc_node_noprof+0x72/0x170 [ 338.265537][T24280] xt_alloc_table_info+0x3d/0x80 [ 338.270544][T24280] do_ipt_set_ctl+0x66f/0x8b0 [ 338.275231][T24280] ? tcp_release_cb+0xfe/0x380 [ 338.280004][T24280] nf_setsockopt+0x195/0x1b0 [ 338.284651][T24280] ip_setsockopt+0xea/0x100 [ 338.289161][T24280] tcp_setsockopt+0x93/0xb0 [ 338.293672][T24280] sock_common_setsockopt+0x64/0x80 [ 338.299006][T24280] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 338.304991][T24280] smc_setsockopt+0x182/0x7a0 [ 338.309696][T24280] ? __pfx_smc_setsockopt+0x10/0x10 [ 338.314916][T24280] __sys_setsockopt+0x187/0x200 [ 338.319774][T24280] __x64_sys_setsockopt+0x66/0x80 [ 338.324869][T24280] x64_sys_call+0x282e/0x2dc0 [ 338.329554][T24280] do_syscall_64+0xc9/0x1c0 [ 338.334059][T24280] ? clear_bhb_loop+0x55/0xb0 [ 338.338791][T24280] ? clear_bhb_loop+0x55/0xb0 [ 338.343524][T24280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.349440][T24280] RIP: 0033:0x7f9e4e8fff19 [ 338.353925][T24280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.373598][T24280] RSP: 002b:00007f9e4cf77058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 338.382013][T24280] RAX: ffffffffffffffda RBX: 00007f9e4eac5fa0 RCX: 00007f9e4e8fff19 [ 338.390000][T24280] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 338.398008][T24280] RBP: 00007f9e4cf770a0 R08: 0000000000000530 R09: 0000000000000000 [ 338.405971][T24280] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000001 [ 338.414397][T24280] R13: 0000000000000000 R14: 00007f9e4eac5fa0 R15: 00007ffd4c0dc168 [ 338.422368][T24280] [ 338.488796][T24288] loop5: detected capacity change from 0 to 512 [ 338.517217][T24288] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 338.556951][T24288] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 338.615550][T24302] __nla_validate_parse: 8 callbacks suppressed [ 338.615572][T24302] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7398'. [ 338.620721][T24295] lo speed is unknown, defaulting to 1000 [ 338.774244][T24295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.782825][T24295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.812162][T24316] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 338.827571][T24321] xt_HMARK: spi-set and port-set can't be combined [ 338.873493][T24325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.906439][T24330] netlink: 'syz.6.7408': attribute type 13 has an invalid length. [ 338.922447][T24330] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7408'. [ 338.935473][T24330] syz_tun: refused to change device tx_queue_len [ 338.941906][T24330] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 339.043153][T24340] netlink: 'syz.4.7401': attribute type 1 has an invalid length. [ 339.433028][T24357] loop5: detected capacity change from 0 to 164 [ 339.454724][T24357] bio_check_eod: 8211 callbacks suppressed [ 339.454738][T24357] syz.5.7418: attempt to access beyond end of device [ 339.454738][T24357] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 339.494910][T24357] syz.5.7418: attempt to access beyond end of device [ 339.494910][T24357] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 339.520875][T24357] syz.5.7418: attempt to access beyond end of device [ 339.520875][T24357] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 339.538131][T24358] lo speed is unknown, defaulting to 1000 [ 339.556553][T24357] syz.5.7418: attempt to access beyond end of device [ 339.556553][T24357] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 339.579178][T24357] syz.5.7418: attempt to access beyond end of device [ 339.579178][T24357] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 339.592737][T24357] syz.5.7418: attempt to access beyond end of device [ 339.592737][T24357] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 339.611071][T24357] syz.5.7418: attempt to access beyond end of device [ 339.611071][T24357] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 339.628018][T24357] syz.5.7418: attempt to access beyond end of device [ 339.628018][T24357] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 339.641648][T24357] syz.5.7418: attempt to access beyond end of device [ 339.641648][T24357] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 339.655271][T24357] syz.5.7418: attempt to access beyond end of device [ 339.655271][T24357] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 339.843294][T24369] loop7: detected capacity change from 0 to 512 [ 339.872735][T24369] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.899208][T24369] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 339.970896][T23673] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.199759][T24378] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.207005][T24378] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.276426][T24378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.291358][T24378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.364898][T24378] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.373888][T24378] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.382787][T24378] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.391679][T24378] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.529541][T24384] rdma_rxe: rxe_newlink: failed to add bond0 [ 340.607386][ T35] hid (null): unknown global tag 0x11 [ 340.662386][ T35] hid-generic 0005:0007:0005.004F: ignoring exceeding usage max [ 340.680685][T24385] 9pnet: Could not find request transport: f [ 340.720642][ T35] hid-generic 0005:0007:0005.004F: unexpected long global item [ 340.767968][ T35] hid-generic 0005:0007:0005.004F: probe with driver hid-generic failed with error -22 [ 341.198842][T24400] loop5: detected capacity change from 0 to 512 [ 341.220530][T24400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.233169][T24400] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.294461][T18434] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.312442][T24412] loop5: detected capacity change from 0 to 512 [ 341.319238][T24412] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 341.382601][T24417] lo speed is unknown, defaulting to 1000 [ 341.434581][T24421] rdma_rxe: rxe_newlink: failed to add bond0 [ 341.446700][ T3376] hid (null): unknown global tag 0x11 [ 341.452902][ T3376] hid-generic 0005:0007:0005.0050: ignoring exceeding usage max [ 341.464907][ T3376] hid-generic 0005:0007:0005.0050: unexpected long global item [ 341.472949][ T3376] hid-generic 0005:0007:0005.0050: probe with driver hid-generic failed with error -22 [ 341.499211][T24421] 9pnet: Could not find request transport: f [ 341.556451][T24427] FAULT_INJECTION: forcing a failure. [ 341.556451][T24427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.569724][T24427] CPU: 1 UID: 0 PID: 24427 Comm: syz.5.7443 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 341.573313][T24431] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7442'. [ 341.581956][T24427] Tainted: [W]=WARN [ 341.581965][T24427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 341.581977][T24427] Call Trace: [ 341.581983][T24427] [ 341.581990][T24427] dump_stack_lvl+0xf2/0x150 [ 341.615571][T24427] dump_stack+0x15/0x1a [ 341.619736][T24427] should_fail_ex+0x223/0x230 [ 341.624436][T24427] should_fail+0xb/0x10 [ 341.628641][T24427] should_fail_usercopy+0x1a/0x20 [ 341.633674][T24427] _copy_from_user+0x1e/0xb0 [ 341.638308][T24427] move_addr_to_kernel+0x82/0x120 [ 341.643338][T24427] copy_msghdr_from_user+0x271/0x2a0 [ 341.648709][T24427] __sys_sendmmsg+0x1e8/0x4b0 [ 341.653438][T24427] __x64_sys_sendmmsg+0x57/0x70 [ 341.658377][T24427] x64_sys_call+0x29aa/0x2dc0 [ 341.663097][T24427] do_syscall_64+0xc9/0x1c0 [ 341.667659][T24427] ? clear_bhb_loop+0x55/0xb0 [ 341.672331][T24427] ? clear_bhb_loop+0x55/0xb0 [ 341.677000][T24427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.682904][T24427] RIP: 0033:0x7fd5fd88ff19 [ 341.687311][T24427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.706943][T24427] RSP: 002b:00007fd5fbf07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 341.715384][T24427] RAX: ffffffffffffffda RBX: 00007fd5fda55fa0 RCX: 00007fd5fd88ff19 [ 341.723376][T24427] RDX: 0000000000000001 RSI: 0000000020000780 RDI: 0000000000000005 [ 341.731383][T24427] RBP: 00007fd5fbf070a0 R08: 0000000000000000 R09: 0000000000000000 [ 341.739368][T24427] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 341.747339][T24427] R13: 0000000000000000 R14: 00007fd5fda55fa0 R15: 00007ffcf34a7008 [ 341.755323][T24427] [ 341.808638][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 341.808653][ T29] audit: type=1326 audit(1733205183.405:27953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 341.858658][ T29] audit: type=1326 audit(1733205183.405:27954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 341.882327][ T29] audit: type=1326 audit(1733205183.405:27955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 341.905978][ T29] audit: type=1326 audit(1733205183.405:27956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 341.929643][ T29] audit: type=1326 audit(1733205183.405:27957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 341.953332][ T29] audit: type=1326 audit(1733205183.405:27958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 341.977117][ T29] audit: type=1326 audit(1733205183.405:27959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 342.000755][ T29] audit: type=1326 audit(1733205183.405:27960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 342.024522][ T29] audit: type=1326 audit(1733205183.405:27961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 342.048094][ T29] audit: type=1326 audit(1733205183.405:27962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 342.076036][T24445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.143643][T24413] syz.4.7438 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 342.162844][T24413] CPU: 1 UID: 0 PID: 24413 Comm: syz.4.7438 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 342.175092][T24413] Tainted: [W]=WARN [ 342.178915][T24413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.188970][T24413] Call Trace: [ 342.192247][T24413] [ 342.195181][T24413] dump_stack_lvl+0xf2/0x150 [ 342.199884][T24413] dump_stack+0x15/0x1a [ 342.204057][T24413] dump_header+0x83/0x2d0 [ 342.208403][T24413] oom_kill_process+0x341/0x4c0 [ 342.213267][T24413] out_of_memory+0x9af/0xbe0 [ 342.217872][T24413] ? css_next_descendant_pre+0x11c/0x140 [ 342.223584][T24413] mem_cgroup_out_of_memory+0x13e/0x190 [ 342.229131][T24413] try_charge_memcg+0x508/0x7f0 [ 342.233977][T24413] charge_memcg+0x50/0xc0 [ 342.238379][T24413] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 342.244359][T24413] __read_swap_cache_async+0x236/0x480 [ 342.249933][T24413] swap_cluster_readahead+0x279/0x3f0 [ 342.255472][T24413] swapin_readahead+0xe4/0x6f0 [ 342.260287][T24413] ? swap_cache_get_folio+0x77/0x210 [ 342.265571][T24413] do_swap_page+0x31b/0x2550 [ 342.270221][T24413] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 342.275678][T24413] ? __rcu_read_lock+0x36/0x50 [ 342.280441][T24413] ? __pfx_default_wake_function+0x10/0x10 [ 342.286254][T24413] handle_mm_fault+0x8e4/0x2ac0 [ 342.291105][T24413] exc_page_fault+0x3b9/0x650 [ 342.295780][T24413] asm_exc_page_fault+0x26/0x30 [ 342.300705][T24413] RIP: 0033:0x7fcaec8227c8 [ 342.305147][T24413] Code: 3c 24 48 89 4c 24 18 e8 06 55 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 5f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 342.324746][T24413] RSP: 002b:00007fff564030f0 EFLAGS: 00010293 [ 342.330803][T24413] RAX: 0000000000000000 RBX: 00007fcaec9b5fa0 RCX: 00007fcaec8227c5 [ 342.338782][T24413] RDX: 00007fff56403130 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.346746][T24413] RBP: 00007fcaec9b7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 342.354709][T24413] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000053a51 [ 342.362689][T24413] R13: 00007fcaec9b6080 R14: 0000000000000032 R15: ffffffffffffffff [ 342.370654][T24413] [ 342.373928][T24413] memory: usage 304484kB, limit 307200kB, failcnt 3140 [ 342.381179][T24413] memory+swap: usage 293904kB, limit 9007199254740988kB, failcnt 0 [ 342.389180][T24413] kmem: usage 292320kB, limit 9007199254740988kB, failcnt 0 [ 342.396525][T24413] Memory cgroup stats for /syz4: [ 342.400949][T24413] cache 0 [ 342.408809][T24413] rss 0 [ 342.411598][T24413] shmem 0 [ 342.414553][T24413] mapped_file 0 [ 342.418002][T24413] dirty 0 [ 342.420954][T24413] writeback 0 [ 342.424243][T24413] workingset_refault_anon 68784 [ 342.429139][T24413] workingset_refault_file 249 [ 342.433827][T24413] swap 1413120 [ 342.437273][T24413] swapcached 4096 [ 342.440916][T24413] pgpgin 603525 [ 342.444377][T24413] pgpgout 603524 [ 342.447923][T24413] pgfault 702306 [ 342.451491][T24413] pgmajfault 9042 [ 342.455114][T24413] inactive_anon 0 [ 342.458764][T24413] active_anon 4096 [ 342.462619][T24413] inactive_file 0 [ 342.466366][T24413] active_file 0 [ 342.469854][T24413] unevictable 0 [ 342.473334][T24413] hierarchical_memory_limit 314572800 [ 342.478712][T24413] hierarchical_memsw_limit 9223372036854771712 [ 342.484881][T24413] total_cache 0 [ 342.488330][T24413] total_rss 0 [ 342.491637][T24413] total_shmem 0 [ 342.495085][T24413] total_mapped_file 0 [ 342.499181][T24413] total_dirty 0 [ 342.502679][T24413] total_writeback 0 [ 342.506473][T24413] total_workingset_refault_anon 68784 [ 342.511859][T24413] total_workingset_refault_file 249 [ 342.517110][T24413] total_swap 1413120 [ 342.521192][T24413] total_swapcached 4096 [ 342.525464][T24413] total_pgpgin 603526 [ 342.529459][T24413] total_pgpgout 603525 [ 342.533521][T24413] total_pgfault 702308 [ 342.537579][T24413] total_pgmajfault 9042 [ 342.541783][T24413] total_inactive_anon 0 [ 342.545933][T24413] total_active_anon 4096 [ 342.550248][T24413] total_inactive_file 0 [ 342.554394][T24413] total_active_file 0 [ 342.558374][T24413] total_unevictable 0 [ 342.562369][T24413] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7438,pid=24413,uid=0 [ 342.577111][T24413] Memory cgroup out of memory: Killed process 24413 (syz.4.7438) total-vm:93412kB, anon-rss:744kB, file-rss:22176kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 342.773895][T24466] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7459'. [ 342.953526][T24476] loop5: detected capacity change from 0 to 164 [ 342.988097][T24477] netlink: 'syz.2.7460': attribute type 1 has an invalid length. [ 343.034324][T24481] blktrace: Concurrent blktraces are not allowed on sg0 [ 343.641917][T24497] rdma_rxe: rxe_newlink: failed to add bond0 [ 343.670998][ T3376] hid (null): unknown global tag 0x11 [ 343.677214][ T3376] hid-generic 0005:0007:0005.0051: ignoring exceeding usage max [ 343.692517][ T3376] hid-generic 0005:0007:0005.0051: unexpected long global item [ 343.706723][T24497] 9pnet: Could not find request transport: f [ 343.714694][ T3376] hid-generic 0005:0007:0005.0051: probe with driver hid-generic failed with error -22 [ 343.760939][T24502] loop7: detected capacity change from 0 to 512 [ 343.767504][T24502] ext4: Unknown parameter 'uid' [ 343.840928][T24506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7472'. [ 343.924105][T24508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7473'. [ 343.937918][T24505] lo speed is unknown, defaulting to 1000 [ 344.024847][T24509] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 344.088735][T24515] loop5: detected capacity change from 0 to 256 [ 344.095588][T24515] vfat: Bad value for 'time_offset' [ 344.226017][T24488] syz.6.7466 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 344.237017][T24488] CPU: 1 UID: 0 PID: 24488 Comm: syz.6.7466 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 344.249290][T24488] Tainted: [W]=WARN [ 344.253100][T24488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.263232][T24488] Call Trace: [ 344.266509][T24488] [ 344.269441][T24488] dump_stack_lvl+0xf2/0x150 [ 344.274055][T24488] dump_stack+0x15/0x1a [ 344.278309][T24488] dump_header+0x83/0x2d0 [ 344.282644][T24488] oom_kill_process+0x341/0x4c0 [ 344.287497][T24488] out_of_memory+0x9af/0xbe0 [ 344.292179][T24488] ? css_next_descendant_pre+0x11c/0x140 [ 344.297883][T24488] mem_cgroup_out_of_memory+0x13e/0x190 [ 344.303473][T24488] try_charge_memcg+0x508/0x7f0 [ 344.308332][T24488] charge_memcg+0x50/0xc0 [ 344.312745][T24488] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 344.318761][T24488] __read_swap_cache_async+0x236/0x480 [ 344.324297][T24488] swap_cluster_readahead+0x279/0x3f0 [ 344.329785][T24488] swapin_readahead+0xe4/0x6f0 [ 344.334627][T24488] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 344.340180][T24488] ? swap_cache_get_folio+0x77/0x210 [ 344.345461][T24488] do_swap_page+0x31b/0x2550 [ 344.350132][T24488] ? __rcu_read_lock+0x36/0x50 [ 344.354965][T24488] ? __pfx_default_wake_function+0x10/0x10 [ 344.360762][T24488] handle_mm_fault+0x8e4/0x2ac0 [ 344.365695][T24488] exc_page_fault+0x3b9/0x650 [ 344.370370][T24488] asm_exc_page_fault+0x26/0x30 [ 344.375283][T24488] RIP: 0033:0x7f687ef528ac [ 344.379691][T24488] Code: 72 64 0f 1f 40 00 69 3d 06 2e e2 00 e8 03 00 00 48 8d 1d 07 37 2f 00 e8 d2 d5 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 344.399361][T24488] RSP: 002b:00007fff71cfb020 EFLAGS: 00010206 [ 344.405525][T24488] RAX: 0000000000000000 RBX: 00007f687f245fa0 RCX: 0000000000000000 [ 344.413487][T24488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557354f808 [ 344.421495][T24488] RBP: 00007f687f247ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 344.429456][T24488] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000542f9 [ 344.437477][T24488] R13: 00007f687f246080 R14: 0000000000000032 R15: ffffffffffffffff [ 344.445443][T24488] [ 344.448725][T24488] memory: usage 307200kB, limit 307200kB, failcnt 320 [ 344.455618][T24488] memory+swap: usage 308068kB, limit 9007199254740988kB, failcnt 0 [ 344.463581][T24488] kmem: usage 306352kB, limit 9007199254740988kB, failcnt 0 [ 344.470897][T24488] Memory cgroup stats for /syz6: [ 344.471792][T24488] cache 0 [ 344.479677][T24488] rss 4096 [ 344.482692][T24488] shmem 0 [ 344.485655][T24488] mapped_file 0 [ 344.489094][T24488] dirty 0 [ 344.492042][T24488] writeback 12288 [ 344.495668][T24488] workingset_refault_anon 27968 [ 344.500546][T24488] workingset_refault_file 0 [ 344.505042][T24488] swap 892928 [ 344.508366][T24488] swapcached 16384 [ 344.512105][T24488] pgpgin 244094 [ 344.515560][T24488] pgpgout 244090 [ 344.519089][T24488] pgfault 204041 [ 344.522634][T24488] pgmajfault 3673 [ 344.526253][T24488] inactive_anon 0 [ 344.529973][T24488] active_anon 16384 [ 344.533764][T24488] inactive_file 0 [ 344.537384][T24488] active_file 0 [ 344.540848][T24488] unevictable 0 [ 344.544300][T24488] hierarchical_memory_limit 314572800 [ 344.549682][T24488] hierarchical_memsw_limit 9223372036854771712 [ 344.555870][T24488] total_cache 0 [ 344.559322][T24488] total_rss 4096 [ 344.562881][T24488] total_shmem 0 [ 344.566399][T24488] total_mapped_file 0 [ 344.570458][T24488] total_dirty 0 [ 344.573904][T24488] total_writeback 12288 [ 344.578047][T24488] total_workingset_refault_anon 27968 [ 344.583466][T24488] total_workingset_refault_file 0 [ 344.588499][T24488] total_swap 892928 [ 344.592338][T24488] total_swapcached 16384 [ 344.596570][T24488] total_pgpgin 244097 [ 344.600563][T24488] total_pgpgout 244093 [ 344.604660][T24488] total_pgfault 204065 [ 344.608721][T24488] total_pgmajfault 3673 [ 344.612890][T24488] total_inactive_anon 0 [ 344.617041][T24488] total_active_anon 16384 [ 344.621381][T24488] total_inactive_file 0 [ 344.625522][T24488] total_active_file 0 [ 344.629571][T24488] total_unevictable 0 [ 344.633572][T24488] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.7466,pid=24488,uid=0 [ 344.648397][T24488] Memory cgroup out of memory: Killed process 24488 (syz.6.7466) total-vm:93280kB, anon-rss:588kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 344.849450][T24536] rdma_rxe: rxe_newlink: failed to add bond0 [ 344.861197][ T24] hid (null): unknown global tag 0x11 [ 344.867338][ T24] hid-generic 0005:0007:0005.0052: ignoring exceeding usage max [ 344.890680][ T24] hid-generic 0005:0007:0005.0052: unexpected long global item [ 344.898447][ T24] hid-generic 0005:0007:0005.0052: probe with driver hid-generic failed with error -22 [ 344.915901][T24536] 9pnet: Could not find request transport: f [ 345.067345][T24552] loop7: detected capacity change from 0 to 512 [ 345.091871][T24552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.112173][T24552] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.148427][T23673] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.176506][T24562] netlink: 'syz.6.7493': attribute type 13 has an invalid length. [ 345.184438][T24562] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7493'. [ 345.217441][T24562] syz_tun: refused to change device tx_queue_len [ 345.223854][T24562] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 345.255945][T24565] lo speed is unknown, defaulting to 1000 [ 345.273772][ T3175] hid (null): unknown global tag 0x11 [ 345.280028][ T3175] hid-generic 0005:0007:0005.0053: ignoring exceeding usage max [ 345.293167][ T3175] hid-generic 0005:0007:0005.0053: unexpected long global item [ 345.305725][ T3175] hid-generic 0005:0007:0005.0053: probe with driver hid-generic failed with error -22 [ 345.321945][T24570] 9pnet: Could not find request transport: f [ 345.341080][T24567] rdma_rxe: rxe_newlink: failed to add bond0 [ 345.381050][T24555] 9pnet_fd: Insufficient options for proto=fd [ 345.514588][T24547] syz.4.7487 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 345.525625][T24547] CPU: 1 UID: 0 PID: 24547 Comm: syz.4.7487 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 345.537942][T24547] Tainted: [W]=WARN [ 345.541742][T24547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 345.551799][T24547] Call Trace: [ 345.555111][T24547] [ 345.558039][T24547] dump_stack_lvl+0xf2/0x150 [ 345.562679][T24547] dump_stack+0x15/0x1a [ 345.566857][T24547] dump_header+0x83/0x2d0 [ 345.571194][T24547] oom_kill_process+0x341/0x4c0 [ 345.576200][T24547] out_of_memory+0x9af/0xbe0 [ 345.580813][T24547] ? css_next_descendant_pre+0x11c/0x140 [ 345.586543][T24547] mem_cgroup_out_of_memory+0x13e/0x190 [ 345.592158][T24547] try_charge_memcg+0x508/0x7f0 [ 345.597097][T24547] charge_memcg+0x50/0xc0 [ 345.601437][T24547] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 345.607498][T24547] __read_swap_cache_async+0x236/0x480 [ 345.612968][T24547] swap_cluster_readahead+0x279/0x3f0 [ 345.618500][T24547] swapin_readahead+0xe4/0x6f0 [ 345.623283][T24547] ? __rcu_read_unlock+0x34/0x70 [ 345.628272][T24547] ? swap_cache_get_folio+0x77/0x210 [ 345.633569][T24547] do_swap_page+0x31b/0x2550 [ 345.638217][T24547] ? __rcu_read_lock+0x36/0x50 [ 345.643049][T24547] ? __pfx_default_wake_function+0x10/0x10 [ 345.648900][T24547] handle_mm_fault+0x8e4/0x2ac0 [ 345.653757][T24547] exc_page_fault+0x3b9/0x650 [ 345.658477][T24547] asm_exc_page_fault+0x26/0x30 [ 345.663339][T24547] RIP: 0033:0x7fcaec822773 [ 345.667743][T24547] Code: 8f 07 00 48 8d 3d b6 8f 07 00 e8 28 49 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d be ed 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 345.687344][T24547] RSP: 002b:00007fff56403118 EFLAGS: 00010293 [ 345.693401][T24547] RAX: 00000000fffffffa RBX: 00007fcaec9b5fa0 RCX: 0000000000000000 [ 345.701371][T24547] RDX: 00007fff56403130 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.709373][T24547] RBP: 00007fcaec9b7ba0 R08: 0000000037dd9889 R09: 7fffffffffffffff [ 345.717334][T24547] R10: 0000000000000000 R11: 0000000000000010 R12: 00000000000548c8 [ 345.725299][T24547] R13: 00007fcaec9b6080 R14: 0000000000000032 R15: ffffffffffffffff [ 345.733263][T24547] [ 345.736509][T24547] memory: usage 307200kB, limit 307200kB, failcnt 3466 [ 345.743707][T24547] memory+swap: usage 308552kB, limit 9007199254740988kB, failcnt 0 [ 345.750512][T24581] block device autoloading is deprecated and will be removed. [ 345.751618][T24547] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 345.766322][T24547] Memory cgroup stats for /syz4: [ 345.843402][T24547] cache 0 [ 345.851383][T24547] rss 0 [ 345.854145][T24547] shmem 0 [ 345.857070][T24547] mapped_file 0 [ 345.860621][T24547] dirty 0 [ 345.863554][T24547] writeback 8192 [ 345.867085][T24547] workingset_refault_anon 68814 [ 345.872029][T24547] workingset_refault_file 281 [ 345.876728][T24547] swap 1384448 [ 345.880150][T24547] swapcached 24576 [ 345.883863][T24547] pgpgin 604094 [ 345.887313][T24547] pgpgout 604088 [ 345.890958][T24547] pgfault 703415 [ 345.894513][T24547] pgmajfault 9056 [ 345.898263][T24547] inactive_anon 0 [ 345.902000][T24547] active_anon 24576 [ 345.905807][T24547] inactive_file 0 [ 345.909434][T24547] active_file 0 [ 345.912986][T24547] unevictable 0 [ 345.916433][T24547] hierarchical_memory_limit 314572800 [ 345.921836][T24547] hierarchical_memsw_limit 9223372036854771712 [ 345.928167][T24547] total_cache 0 [ 345.931664][T24547] total_rss 0 [ 345.935015][T24547] total_shmem 0 [ 345.938479][T24547] total_mapped_file 0 [ 345.942483][T24547] total_dirty 0 [ 345.945941][T24547] total_writeback 8192 [ 345.950092][T24547] total_workingset_refault_anon 68814 [ 345.955455][T24547] total_workingset_refault_file 281 [ 345.960672][T24547] total_swap 1384448 [ 345.964564][T24547] total_swapcached 24576 [ 345.968934][T24547] total_pgpgin 604095 [ 345.972947][T24547] total_pgpgout 604089 [ 345.977084][T24547] total_pgfault 703417 [ 345.981196][T24547] total_pgmajfault 9056 [ 345.985367][T24547] total_inactive_anon 0 [ 345.989546][T24547] total_active_anon 24576 [ 345.994010][T24547] total_inactive_file 0 [ 345.998225][T24547] total_active_file 0 [ 346.002260][T24547] total_unevictable 0 [ 346.006253][T24547] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7487,pid=24547,uid=0 [ 346.021199][T24547] Memory cgroup out of memory: Killed process 24547 (syz.4.7487) total-vm:93280kB, anon-rss:740kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 346.181288][T24599] blktrace: Concurrent blktraces are not allowed on sg0 [ 346.224030][T24604] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.277760][T24595] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7501'. [ 346.357691][T24617] loop5: detected capacity change from 0 to 512 [ 346.374675][T24617] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 346.411182][T24623] 9pnet_fd: Insufficient options for proto=fd [ 346.416770][T24617] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 346.449380][T24623] netlink: 'syz.7.7513': attribute type 13 has an invalid length. [ 346.457300][T24623] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7513'. [ 346.494032][T24623] syz_tun: refused to change device tx_queue_len [ 346.500549][T24623] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 346.520066][T24633] blktrace: Concurrent blktraces are not allowed on sg0 [ 346.528710][T24631] netlink: 'syz.2.7516': attribute type 13 has an invalid length. [ 346.536730][T24631] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7516'. [ 346.550263][T24631] syz_tun: refused to change device tx_queue_len [ 346.556622][T24631] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 346.911345][T24644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.926771][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 346.926786][ T29] audit: type=1326 audit(1733205188.525:28295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.7.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 347.028021][T24649] lo speed is unknown, defaulting to 1000 [ 347.033893][ T29] audit: type=1326 audit(1733205188.575:28296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.7.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 347.057521][ T29] audit: type=1326 audit(1733205188.575:28297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.7.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 347.081314][ T29] audit: type=1326 audit(1733205188.575:28298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.7.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 347.104808][ T29] audit: type=1326 audit(1733205188.575:28299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.7.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 347.128474][ T29] audit: type=1326 audit(1733205188.575:28300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.7.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 347.152080][ T29] audit: type=1326 audit(1733205188.575:28301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.7.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 347.175665][ T29] audit: type=1326 audit(1733205188.575:28302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.7.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 347.199300][ T29] audit: type=1326 audit(1733205188.575:28303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.7.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 347.223053][ T29] audit: type=1326 audit(1733205188.575:28304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.7.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 347.254727][T24657] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 347.426862][T24661] loop7: detected capacity change from 0 to 164 [ 347.484753][T24661] bio_check_eod: 29865 callbacks suppressed [ 347.484768][T24661] syz.7.7523: attempt to access beyond end of device [ 347.484768][T24661] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 347.521963][T24656] lo speed is unknown, defaulting to 1000 [ 347.687994][T24661] syz.7.7523: attempt to access beyond end of device [ 347.687994][T24661] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 347.730784][T24661] syz.7.7523: attempt to access beyond end of device [ 347.730784][T24661] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 347.744390][T24661] syz.7.7523: attempt to access beyond end of device [ 347.744390][T24661] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 347.757838][T24661] syz.7.7523: attempt to access beyond end of device [ 347.757838][T24661] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 347.781754][T24675] rdma_rxe: rxe_newlink: failed to add bond0 [ 347.791090][T24661] syz.7.7523: attempt to access beyond end of device [ 347.791090][T24661] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 347.815616][T24661] syz.7.7523: attempt to access beyond end of device [ 347.815616][T24661] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 347.829559][T24661] syz.7.7523: attempt to access beyond end of device [ 347.829559][T24661] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 347.845543][T24661] syz.7.7523: attempt to access beyond end of device [ 347.845543][T24661] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 347.859231][T24661] syz.7.7523: attempt to access beyond end of device [ 347.859231][T24661] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 347.880808][ T3175] hid (null): unknown global tag 0x11 [ 347.903492][ T3175] hid-generic 0005:0007:0005.0054: ignoring exceeding usage max [ 347.915415][T24675] 9pnet: Could not find request transport: f [ 347.925172][ T3175] hid-generic 0005:0007:0005.0054: unexpected long global item [ 347.954576][ T3175] hid-generic 0005:0007:0005.0054: probe with driver hid-generic failed with error -22 [ 347.973578][T24682] loop5: detected capacity change from 0 to 256 [ 347.994668][T24682] vfat: Bad value for 'time_offset' [ 348.056209][T24689] 9pnet_fd: Insufficient options for proto=fd [ 348.084778][T24689] netlink: 'syz.4.7531': attribute type 13 has an invalid length. [ 348.092774][T24689] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7531'. [ 348.126904][T24689] syz_tun: refused to change device tx_queue_len [ 348.133306][T24689] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 348.368535][T24697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.578055][T24704] netlink: 'syz.7.7535': attribute type 13 has an invalid length. [ 348.594160][T24704] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7535'. [ 348.709131][T24704] syz_tun: refused to change device tx_queue_len [ 348.715560][T24704] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 349.394686][T24715] loop5: detected capacity change from 0 to 512 [ 349.408411][T24715] ext4: Unknown parameter 'uid' [ 349.551082][T24718] lo speed is unknown, defaulting to 1000 [ 349.642626][T24715] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 349.676536][T24722] netlink: 'syz.4.7542': attribute type 13 has an invalid length. [ 349.684429][T24722] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7542'. [ 349.705930][T24722] syz_tun: refused to change device tx_queue_len [ 349.712350][T24722] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 349.731981][T24730] blktrace: Concurrent blktraces are not allowed on sg0 [ 349.775184][T24732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.813490][T24738] loop7: detected capacity change from 0 to 512 [ 349.882931][T24738] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.933584][T24736] lo speed is unknown, defaulting to 1000 [ 349.939435][T24738] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.970930][T24743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.979531][T24743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.071806][T24748] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7551'. [ 350.106580][T23673] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.234801][T24765] netlink: 'syz.5.7558': attribute type 13 has an invalid length. [ 350.242664][T24765] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7558'. [ 350.291115][T24765] syz_tun: refused to change device tx_queue_len [ 350.297589][T24765] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 350.539637][T24796] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.785834][T24817] lo speed is unknown, defaulting to 1000 [ 350.831489][ T24] hid (null): unknown global tag 0x11 [ 350.838294][ T24] hid-generic 0005:0007:0005.0055: ignoring exceeding usage max [ 350.854607][T24821] rdma_rxe: rxe_newlink: failed to add bond0 [ 350.869688][ T24] hid-generic 0005:0007:0005.0055: unexpected long global item [ 350.879646][T24824] 9pnet: Could not find request transport: f [ 350.890564][ T24] hid-generic 0005:0007:0005.0055: probe with driver hid-generic failed with error -22 [ 350.923555][T24819] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 350.938142][T24823] lo speed is unknown, defaulting to 1000 [ 350.948688][T24834] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.967571][T24836] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7586'. [ 351.074079][T24839] lo speed is unknown, defaulting to 1000 [ 351.245745][T24831] 9pnet_fd: Insufficient options for proto=fd [ 351.555420][T24866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.644244][T24872] rdma_rxe: rxe_newlink: failed to add bond0 [ 351.695656][ T9] hid (null): unknown global tag 0x11 [ 351.703060][ T9] hid-generic 0005:0007:0005.0056: ignoring exceeding usage max [ 351.717572][ T9] hid-generic 0005:0007:0005.0056: unexpected long global item [ 351.725406][ T9] hid-generic 0005:0007:0005.0056: probe with driver hid-generic failed with error -22 [ 351.737448][T24872] 9pnet: Could not find request transport: f [ 351.756214][T24879] loop7: detected capacity change from 0 to 512 [ 351.763101][T24879] EXT4-fs: Ignoring removed oldalloc option [ 351.913317][T24879] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.7601: Parent and EA inode have the same ino 15 [ 351.929087][T24879] EXT4-fs (loop7): Remounting filesystem read-only [ 351.935653][T24879] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 351.947889][T24879] EXT4-fs (loop7): 1 orphan inode deleted [ 351.979855][T24879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.032844][T24879] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 352.057755][T24879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.174013][T24886] netlink: 'syz.7.7603': attribute type 13 has an invalid length. [ 352.181978][T24886] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7603'. [ 352.191721][T24886] syz_tun: refused to change device tx_queue_len [ 352.193388][ T29] kauditd_printk_skb: 612 callbacks suppressed [ 352.193401][ T29] audit: type=1326 audit(1733205193.774:28917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24883 comm="syz.5.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 352.198240][T24886] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 352.204394][ T29] audit: type=1326 audit(1733205193.774:28918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24883 comm="syz.5.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 352.204420][ T29] audit: type=1326 audit(1733205193.774:28919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24883 comm="syz.5.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 352.204442][ T29] audit: type=1326 audit(1733205193.774:28920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24883 comm="syz.5.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 352.314836][ T29] audit: type=1326 audit(1733205193.774:28921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24883 comm="syz.5.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 352.338485][ T29] audit: type=1326 audit(1733205193.774:28922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24883 comm="syz.5.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 352.362329][ T29] audit: type=1326 audit(1733205193.774:28923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24883 comm="syz.5.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 352.385945][ T29] audit: type=1326 audit(1733205193.774:28924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24883 comm="syz.5.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 352.409627][ T29] audit: type=1326 audit(1733205193.774:28925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24883 comm="syz.5.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 352.433283][ T29] audit: type=1326 audit(1733205193.784:28926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24883 comm="syz.5.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fd88ff19 code=0x7ffc0000 [ 352.585377][T24905] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7610'. [ 352.598922][T24901] blktrace: Concurrent blktraces are not allowed on sg0 [ 352.843891][T24914] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7614'. [ 352.971717][T24931] netlink: 'syz.2.7621': attribute type 13 has an invalid length. [ 352.978992][T24922] lo speed is unknown, defaulting to 1000 [ 352.979548][T24931] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7621'. [ 353.004233][T24931] syz_tun: refused to change device tx_queue_len [ 353.010795][T24931] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 353.095116][T24940] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7623'. [ 353.284562][T24950] rdma_rxe: rxe_newlink: failed to add bond0 [ 353.304848][ T35] hid (null): unknown global tag 0x11 [ 353.312515][ T35] hid-generic 0005:0007:0005.0057: ignoring exceeding usage max [ 353.340804][T24950] 9pnet: Could not find request transport: f [ 353.346935][ T35] hid-generic 0005:0007:0005.0057: unexpected long global item [ 353.369099][ T35] hid-generic 0005:0007:0005.0057: probe with driver hid-generic failed with error -22 [ 353.415303][T24960] loop5: detected capacity change from 0 to 512 [ 353.448700][T24960] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 353.482467][T24964] loop7: detected capacity change from 0 to 512 [ 353.483323][T24960] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 353.513478][T24964] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.535876][T24964] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.623604][T23673] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.698047][T24991] blktrace: Concurrent blktraces are not allowed on sg0 [ 353.703631][T24993] loop7: detected capacity change from 0 to 512 [ 353.713477][T24993] EXT4-fs: Ignoring removed oldalloc option [ 353.719096][T24995] loop5: detected capacity change from 0 to 512 [ 353.730358][T24993] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.7643: Parent and EA inode have the same ino 15 [ 353.743522][T24995] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 353.755571][T24993] EXT4-fs (loop7): Remounting filesystem read-only [ 353.762189][T24993] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 353.778475][T24993] EXT4-fs (loop7): 1 orphan inode deleted [ 353.784729][T24993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.800629][T24995] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 353.800856][T24993] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 353.817803][T25003] netlink: 'syz.6.7630': attribute type 1 has an invalid length. [ 353.864727][T24993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.017684][T25010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.080529][T25014] loop7: detected capacity change from 0 to 512 [ 354.126367][T25014] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.7651: Failed to acquire dquot type 1 [ 354.163130][T25014] EXT4-fs (loop7): 1 truncate cleaned up [ 354.181791][T25014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.196270][T25014] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.218967][T25014] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7651'. [ 354.341393][T25024] netlink: 'syz.5.7650': attribute type 1 has an invalid length. [ 354.402854][T23673] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.594476][T25033] loop7: detected capacity change from 0 to 256 [ 354.618085][T25033] vfat: Bad value for 'time_offset' [ 354.629744][T25042] netlink: 'syz.6.7661': attribute type 13 has an invalid length. [ 354.638691][T25042] syz_tun: refused to change device tx_queue_len [ 354.645059][T25042] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 354.761169][T25043] lo speed is unknown, defaulting to 1000 [ 355.462574][T25057] loop7: detected capacity change from 0 to 512 [ 355.500613][T25057] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.7665: Failed to acquire dquot type 1 [ 355.537906][T25057] EXT4-fs (loop7): 1 truncate cleaned up [ 355.545083][T25057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.597362][T25057] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.640725][T25057] __nla_validate_parse: 1 callbacks suppressed [ 355.640743][T25057] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7665'. [ 355.844388][T23673] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.092730][T25080] 9pnet_fd: Insufficient options for proto=fd [ 356.103695][T25080] netlink: 'syz.5.7673': attribute type 13 has an invalid length. [ 356.111563][T25080] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7673'. [ 356.460407][T25080] syz_tun: refused to change device tx_queue_len [ 356.466908][T25080] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 356.950816][T25089] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7675'. [ 356.953492][T25094] loop7: detected capacity change from 0 to 512 [ 356.968756][T25094] EXT4-fs: Ignoring removed oldalloc option [ 357.024945][T25094] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.7671: Parent and EA inode have the same ino 15 [ 357.049086][T25094] EXT4-fs (loop7): Remounting filesystem read-only [ 357.055668][T25094] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 357.065948][T25094] EXT4-fs (loop7): 1 orphan inode deleted [ 357.072145][T25094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.084333][T25094] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 357.096356][T25094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.289186][T25113] lo speed is unknown, defaulting to 1000 [ 357.332704][T25132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.341420][T25132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.403693][T25139] loop7: detected capacity change from 0 to 512 [ 357.410486][T25139] EXT4-fs: Ignoring removed oldalloc option [ 357.418148][T25139] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.7694: Parent and EA inode have the same ino 15 [ 357.430893][T25139] EXT4-fs (loop7): Remounting filesystem read-only [ 357.437522][T25139] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 357.447768][T25139] EXT4-fs (loop7): 1 orphan inode deleted [ 357.453809][T25139] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.466350][T25139] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 357.477028][T25139] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.489144][T25141] lo speed is unknown, defaulting to 1000 [ 357.537952][ T29] kauditd_printk_skb: 466 callbacks suppressed [ 357.537968][ T29] audit: type=1326 audit(1733205199.133:29389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25145 comm="syz.6.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 357.583378][ T29] audit: type=1326 audit(1733205199.143:29390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25145 comm="syz.6.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 357.607128][ T29] audit: type=1326 audit(1733205199.143:29391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25145 comm="syz.6.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 357.631114][ T29] audit: type=1326 audit(1733205199.143:29392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25145 comm="syz.6.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 357.654765][ T29] audit: type=1326 audit(1733205199.143:29393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25145 comm="syz.6.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 357.678602][ T29] audit: type=1326 audit(1733205199.143:29394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25145 comm="syz.6.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 357.702252][ T29] audit: type=1326 audit(1733205199.143:29395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25145 comm="syz.6.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 357.725975][ T29] audit: type=1326 audit(1733205199.143:29396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25145 comm="syz.6.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 357.735023][T25174] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7705'. [ 357.749585][ T29] audit: type=1326 audit(1733205199.143:29397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25145 comm="syz.6.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 357.749649][ T29] audit: type=1326 audit(1733205199.143:29398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25145 comm="syz.6.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687f07ff19 code=0x7ffc0000 [ 357.943291][T25185] rdma_rxe: rxe_newlink: failed to add bond0 [ 357.955597][ T3175] hid (null): unknown global tag 0x11 [ 357.961840][ T3175] hid-generic 0005:0007:0005.0058: ignoring exceeding usage max [ 357.967721][T25185] 9pnet: Could not find request transport: f [ 357.974416][ T3175] hid-generic 0005:0007:0005.0058: unexpected long global item [ 357.983354][ T3175] hid-generic 0005:0007:0005.0058: probe with driver hid-generic failed with error -22 [ 358.080247][T25200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7718'. [ 358.246272][T25212] loop5: detected capacity change from 0 to 512 [ 358.253203][T25212] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 358.289664][T25218] rdma_rxe: rxe_newlink: failed to add bond0 [ 358.301692][ T3175] hid (null): unknown global tag 0x11 [ 358.306227][T25218] 9pnet: Could not find request transport: f [ 358.307793][ T3175] hid-generic 0005:0007:0005.0059: ignoring exceeding usage max [ 358.325635][ T3175] hid-generic 0005:0007:0005.0059: unexpected long global item [ 358.334841][ T3175] hid-generic 0005:0007:0005.0059: probe with driver hid-generic failed with error -22 [ 358.358490][T25220] lo speed is unknown, defaulting to 1000 [ 358.462500][T25233] lo speed is unknown, defaulting to 1000 [ 358.569398][T25240] loop5: detected capacity change from 0 to 512 [ 358.611725][T25240] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.7731: Failed to acquire dquot type 1 [ 358.665969][T25240] EXT4-fs (loop5): 1 truncate cleaned up [ 358.672420][T25240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.691660][T25240] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.718461][T25240] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7731'. [ 358.777041][T25251] loop7: detected capacity change from 0 to 512 [ 358.790572][T25251] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 358.831856][T25256] rdma_rxe: rxe_newlink: failed to add bond0 [ 358.846593][ T3372] hid (null): unknown global tag 0x11 [ 358.850553][T25256] 9pnet: Could not find request transport: f [ 358.852864][ T3372] hid-generic 0005:0007:0005.005A: ignoring exceeding usage max [ 358.869467][ T3372] hid-generic 0005:0007:0005.005A: unexpected long global item [ 358.877162][ T3372] hid-generic 0005:0007:0005.005A: probe with driver hid-generic failed with error -22 [ 358.925741][T18434] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.946480][T25262] loop7: detected capacity change from 0 to 512 [ 358.980323][T25262] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.7738: Failed to acquire dquot type 1 [ 358.998238][T25262] EXT4-fs (loop7): 1 truncate cleaned up [ 359.012406][T25264] lo speed is unknown, defaulting to 1000 [ 359.039946][T25262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.061056][T25262] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.082182][T25278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.094010][T25278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.096662][T25262] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7738'. [ 359.166128][T25286] loop5: detected capacity change from 0 to 512 [ 359.173191][T25286] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 359.265303][T25291] rdma_rxe: rxe_newlink: failed to add bond0 [ 359.278002][ T3175] hid (null): unknown global tag 0x11 [ 359.282150][T25291] 9pnet: Could not find request transport: f [ 359.284147][ T3175] hid-generic 0005:0007:0005.005B: ignoring exceeding usage max [ 359.301266][ T3175] hid-generic 0005:0007:0005.005B: unexpected long global item [ 359.308899][ T3175] hid-generic 0005:0007:0005.005B: probe with driver hid-generic failed with error -22 [ 359.346529][T23673] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.445036][T25305] lo speed is unknown, defaulting to 1000 [ 359.476218][T25312] loop7: detected capacity change from 0 to 512 [ 359.506290][T25312] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.7756: Failed to acquire dquot type 1 [ 359.527653][T25312] EXT4-fs (loop7): 1 truncate cleaned up [ 359.536147][T25312] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.549352][T25312] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.561427][T25320] loop5: detected capacity change from 0 to 512 [ 359.568278][T25320] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 359.594079][T25312] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7756'. [ 359.595996][T25322] rdma_rxe: rxe_newlink: failed to add bond0 [ 359.622175][ T3175] hid (null): unknown global tag 0x11 [ 359.643647][T25322] 9pnet: Could not find request transport: f [ 359.650948][ T3175] hid-generic 0005:0007:0005.005C: ignoring exceeding usage max [ 359.667161][ T3175] hid-generic 0005:0007:0005.005C: unexpected long global item [ 359.677809][ T3175] hid-generic 0005:0007:0005.005C: probe with driver hid-generic failed with error -22 [ 359.689327][T25324] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7762'. [ 359.690033][T23673] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.734669][T25328] loop7: detected capacity change from 0 to 164 [ 359.741302][T25328] /dev/loop7: Can't open blockdev [ 359.793180][T25339] netlink: 'syz.7.7767': attribute type 13 has an invalid length. [ 359.801098][T25339] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7767'. [ 359.812923][T25339] syz_tun: refused to change device tx_queue_len [ 359.814547][T25326] blk_print_req_error: 284 callbacks suppressed [ 359.814607][T25326] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 41 prio class 0 [ 359.819265][T25339] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 359.825553][T25326] buffer_io_error: 1588 callbacks suppressed [ 359.825565][T25326] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 359.865044][T25326] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 359.873382][T25326] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 359.881773][T25326] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 359.890126][T25326] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 359.898676][T25326] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 359.898881][T25343] blktrace: Concurrent blktraces are not allowed on sg0 [ 359.907075][T25326] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 359.907093][T25326] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 359.907110][T25326] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 359.939263][T25326] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 360.004664][T25349] loop5: detected capacity change from 0 to 512 [ 360.011396][T25349] ext4: Unknown parameter 'uid' [ 360.074549][T25353] blktrace: Concurrent blktraces are not allowed on sg0 [ 360.086481][T25349] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 360.098904][T25355] blktrace: Concurrent blktraces are not allowed on sg0 [ 360.220611][T25357] loop7: detected capacity change from 0 to 256 [ 360.231868][T25357] vfat: Bad value for 'time_offset' [ 360.427995][T25365] loop5: detected capacity change from 0 to 512 [ 360.654924][T25365] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.7777: Failed to acquire dquot type 1 [ 360.677612][T25365] EXT4-fs (loop5): 1 truncate cleaned up [ 360.701613][T25371] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7778'. [ 360.713646][T25365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.825116][T25365] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.870649][T25365] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7777'. [ 360.959578][T18434] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.992596][T25380] loop5: detected capacity change from 0 to 256 [ 360.999172][T25380] vfat: Bad value for 'time_offset' [ 361.166998][T25385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.368665][T25395] loop7: detected capacity change from 0 to 512 [ 361.446193][T25398] netlink: 'syz.6.7783': attribute type 1 has an invalid length. [ 361.457593][T25393] lo speed is unknown, defaulting to 1000 [ 361.465805][T25395] ext4: Unknown parameter 'uid' [ 361.598643][T25395] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 362.167720][T25438] loop5: detected capacity change from 0 to 512 [ 362.189846][T25438] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 362.291512][T25438] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 362.292448][T25445] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7805'. [ 362.303680][T25447] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7805'. [ 362.545555][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 362.545571][ T29] audit: type=1326 audit(1733205204.133:29864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25452 comm="syz.7.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 362.629628][T25458] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7810'. [ 362.672648][T25445] lo speed is unknown, defaulting to 1000 [ 362.693470][ T29] audit: type=1326 audit(1733205204.173:29865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25452 comm="syz.7.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 362.717599][ T29] audit: type=1326 audit(1733205204.173:29866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25452 comm="syz.7.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e8fff19 code=0x7ffc0000 [ 362.741342][ T29] audit: type=1400 audit(1733205204.213:29867): avc: denied { read } for pid=25455 comm="syz.4.7809" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 362.764852][ T29] audit: type=1400 audit(1733205204.213:29868): avc: denied { open } for pid=25455 comm="syz.4.7809" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 362.789125][ T29] audit: type=1326 audit(1733205204.243:29869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25455 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaec7eff19 code=0x7ffc0000 [ 362.812694][ T29] audit: type=1326 audit(1733205204.243:29870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25455 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaec7eff19 code=0x7ffc0000 [ 362.836284][ T29] audit: type=1326 audit(1733205204.243:29871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25455 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaec7eff19 code=0x7ffc0000 [ 362.859883][ T29] audit: type=1326 audit(1733205204.243:29872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25455 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaec7eff19 code=0x7ffc0000 [ 362.883510][ T29] audit: type=1326 audit(1733205204.243:29873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25455 comm="syz.4.7809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaec7eff19 code=0x7ffc0000 [ 362.907468][T25463] ================================================================== [ 362.915562][T25463] BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk [ 362.923115][T25463] [ 362.925430][T25463] write to 0xffff888104997100 of 8 bytes by task 25459 on cpu 1: [ 362.933135][T25463] mas_replace_node+0x1b8/0x430 [ 362.937980][T25463] mas_wr_store_entry+0x1fbf/0x2d10 [ 362.943179][T25463] mas_store_prealloc+0x6bf/0x960 [ 362.948201][T25463] vma_complete+0x3a7/0x760 [ 362.952696][T25463] __split_vma+0x620/0x6a0 [ 362.957107][T25463] vma_modify+0x17d/0x1e0 [ 362.961424][T25463] vma_modify_flags+0xf1/0x120 [ 362.966180][T25463] mprotect_fixup+0x31a/0x5e0 [ 362.970847][T25463] do_mprotect_pkey+0x653/0x960 [ 362.975689][T25463] __x64_sys_mprotect+0x48/0x60 [ 362.980531][T25463] x64_sys_call+0x2770/0x2dc0 [ 362.985200][T25463] do_syscall_64+0xc9/0x1c0 [ 362.989693][T25463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.995589][T25463] [ 362.997900][T25463] read to 0xffff888104997100 of 8 bytes by task 25463 on cpu 0: [ 363.005526][T25463] mtree_range_walk+0x33d/0x460 [ 363.010374][T25463] mas_walk+0x16e/0x320 [ 363.014530][T25463] lock_vma_under_rcu+0x95/0x260 [ 363.019517][T25463] exc_page_fault+0x150/0x650 [ 363.024193][T25463] asm_exc_page_fault+0x26/0x30 [ 363.029043][T25463] [ 363.031353][T25463] value changed: 0xffff888104997406 -> 0xffff888104997100 [ 363.038442][T25463] [ 363.040751][T25463] Reported by Kernel Concurrency Sanitizer on: [ 363.046888][T25463] CPU: 0 UID: 0 PID: 25463 Comm: syz.7.7811 Tainted: G W 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 363.059131][T25463] Tainted: [W]=WARN [ 363.062925][T25463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 363.072978][T25463] ================================================================== [ 363.088222][T25468] loop5: detected capacity change from 0 to 512 [ 363.140961][T25468] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.7813: Failed to acquire dquot type 1 [ 363.156868][T25468] EXT4-fs (loop5): 1 truncate cleaned up [ 363.163228][T25468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.175889][T25468] ext4 filesystem being mounted at /477/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.198994][T25465] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7813'. [ 363.330648][T18434] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.