last executing test programs: 1m34.463743132s ago: executing program 0 (id=246): socket$kcm(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m34.2842742s ago: executing program 0 (id=249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r1 = gettid() r2 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) getegid() stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./file1\x00', r3, r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x1, 0x5, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x2f, 0x0, @remote, @rand_addr=0x64010100}}}}) creat(&(0x7f0000000080)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0xfffff399, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r6 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000040)=@v3={0x3000000, [{0x5, 0x4000000}]}, 0x18, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc95, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) mount$9p_tcp(0x0, 0x0, &(0x7f00000004c0), 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB]) write$rfkill(r6, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1, 0x1}, 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000100bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000003244d9919094d78cdd198833d3257e3c505796e48f9135aba6dab873e8fe45cf2c4e057eb6b44336b44af50b8b3f14773b3b756062cfa55573cf17"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m34.22693897s ago: executing program 0 (id=252): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x1000404, &(0x7f0000000280)={[{@resgid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r3}, 0x18) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xd, 0x13, r1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000700)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$selinux_user(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t ', @ANYRESDEC=r5], 0x27) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000800007020000f8ffffffb703000008000000b704000000000000850000590000009500"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") chdir(&(0x7f0000000380)='./file0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xfffffffffffffec1, &(0x7f0000000600)}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0xc, 0x16, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @map_fd={0x18, 0x7, 0x1, 0x0, r1}]}, &(0x7f0000000400)='syzkaller\x00', 0x8, 0xfb, &(0x7f0000000740)=""/251, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x8, &(0x7f00000006c0)=[r6, r2, 0xffffffffffffffff], &(0x7f0000000840)=[{0x1, 0x5, 0x1, 0x1}, {0x2, 0x5, 0x9, 0xc}, {0x4, 0x4, 0x9, 0x3}, {0x3, 0x5, 0x7, 0x7}, {0x3, 0x3, 0xd, 0xc}, {0x2, 0x4, 0x3, 0xa}, {0x3, 0x1, 0xc, 0x4}, {0x2, 0x3, 0x3, 0x2}], 0x10, 0x7fff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) 1m34.05419424s ago: executing program 0 (id=254): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000001c0)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6t\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x28, 0x3a, 0xff, @private0, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x13) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001080)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x6c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) ioctl$TUNSETLINK(r2, 0x400454cd, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xe, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x4c784b26e149c345, &(0x7f0000000040)}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="7fb6744ece9394b77d4f3263", @ANYBLOB="0000000000000000b7080000000000007be1c952b5b1aec88af8ff00000000bfa200000000000007020000f8f208e9a3ea8fa3ffffffb703000008000000b704000000000000850000000100000095cceb0c0c2de09cf4c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) mlockall(0x3) 1m32.939394774s ago: executing program 0 (id=268): r0 = semget$private(0x0, 0x4000000009, 0x42a) semop(r0, &(0x7f00000002c0)=[{0x0, 0xff}], 0x1) semop(r0, &(0x7f0000000200), 0x53) semop(r0, 0x0, 0x0) 1m32.739242813s ago: executing program 0 (id=273): connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 1m32.692035303s ago: executing program 32 (id=273): connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 1m28.478423653s ago: executing program 5 (id=318): r0 = inotify_init() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) 1m27.912725801s ago: executing program 5 (id=326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb96f37538e486dd63724305"], 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x2a8, 0x2a8, 0x2a8, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x10000, 0x0, @loopback}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff000000]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 1m27.74599086s ago: executing program 5 (id=328): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x400000000000112, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000002140)=""/4080, 0xff0}, {&(0x7f0000005680)=""/4100, 0x1004}], 0x3}, 0x0) mremap(&(0x7f0000984000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00001fa000/0x4000)=nil) 1m26.827360996s ago: executing program 5 (id=339): r0 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000d800000004000000fb0000000000000069f059dc590a73d422039956d54692353f3007c2ef996487694cf0c33fd093fb1017bde5cdcc21b76030fdd24d14259bf6f76feb87534d1bf941802b05424d1f8185553088a8e0ed43ce4b90e628eff1c77b2d93d8010453beecef849f97b7d38676f5944c5db35fca0eb6a6cd7b47dd866b5a246b5c9c05da114a8cfbedc5d4923bcdf256093754a62113bf047337f07f379c8883af5800f8ad9d61b769ba0790d05601d1490b565a881f32922ade656901510bbea72e930f54a70d34376d444041acf653610fbabeac5b7ba8f862e91b2365fb9773df11b67d908fb40b00c543f6c4a4bb754150a751bea58b53353a4bbab2a918c1fefb8eca431b2dc509eeb0835b4e0f00301cf3b216ff7cc0996a5271bb797876d9466eadc884bfa0f6a35c12617b9cb053c0ca3c8aeed2fc170fc51f3b49422c4b5d55e53fe7e9b06058bae07a0dc82df87bb06498e3819d20af14c28ea9a95597e584c49d3d3ca5fda332a7049f15c67bc3d56c052a6800"/395, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x32, 0x1, {0x7, 0x0, 0x0, 0x3, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "13119f34dae3c090b3da2c64426a1d777a61e2fad4599fb11a71e149072d265bbcf090bd7bbe0e5d2de66213d88d7e773024ba3482c95f5dc6159186172ae22ed9616876e0ec13f573a7c2f0d185109a8457e43c5390e59a84747ee7b311ecc2f8bac84497d72789b0fa4ab2e321de479655bda89963ae5f37684f73a07ca9d223dfe04aae9e1ff7f8441133075f4355c81d80a33e4907edd482caff0200f27913b8cf68da47ea06d0d14fb5f2b61619e5e3b4b4090c77e69d028f41ab371e8c6bef4485fe557e260ff37e8f6a856e0b686963dcfea9a71953940f9d6ec1de1d4e2221adfd549d529a594013b2dcde2d070f6ba92fcbb700"}]}}]}, 0x14c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000a40)='./file0\x00', 0xcc04, &(0x7f0000000b40)={[{@dots}, {@fat=@gid={'gid', 0x3d, 0xee01}}, {@nodots}, {@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0x2d8}}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@tz_utc}, {@fat=@flush}, {@fat=@dmask={'dmask', 0x3d, 0x7fffffff}}, {@dots}, {@nodots}, {@nodots}, {@fat=@errors_continue}, {@dots}, {@fat=@discard}]}, 0xfd, 0x1f0, &(0x7f0000000240)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x822090, &(0x7f0000000a40)=ANY=[], 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") write$binfmt_script(r7, &(0x7f00000008c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r8, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@nolazytime}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@bsdgroups}, {@errors_remount}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000a500010000000000050003000000000000182b0000faffffff00fd16533b0000009500"/64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r10}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a300000000008004100736977001400330076657468305f746f5f687372"], 0x38}}, 0x0) 1m26.612118355s ago: executing program 5 (id=343): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) close(0xffffffffffffffff) r3 = gettid() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000080)) r4 = syz_open_procfs(r3, &(0x7f0000002a00)='net/fib_trie\x00') preadv(r4, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x37, 0x0) 1m24.822389136s ago: executing program 5 (id=403): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40) clock_nanosleep(0x2, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) 1m24.756711296s ago: executing program 33 (id=403): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40) clock_nanosleep(0x2, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) 40.532598489s ago: executing program 2 (id=1223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0xe4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 40.478377239s ago: executing program 2 (id=1226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x5, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x8000002}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 40.407589048s ago: executing program 2 (id=1230): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x1, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r2, 0x36a0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x10f}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) close(0xffffffffffffffff) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='rootfs\x00', 0x1) 40.283715458s ago: executing program 2 (id=1234): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2, 0x0}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000003000000080000000000000e020000000200000f002e"], &(0x7f0000000640)=""/156, 0x2b, 0x9c, 0x1, 0x4, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0x18, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES16=r3, @ANYRESDEC], &(0x7f0000000700)='GPL\x00', 0x0, 0x56, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000b3180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r6, 0x0, 0x646}, 0x18) creat(&(0x7f0000000200)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file2\x00', 0x80000002328) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) (async) sendfile(r0, r0, 0x0, 0x7a680000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) fcntl$dupfd(r2, 0x0, r2) (async) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000003000000080000000000000e020000000200000f002e"], &(0x7f0000000640)=""/156, 0x2b, 0x9c, 0x1, 0x4, 0x10000, @value}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0x18, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES16=r3, @ANYRESDEC], &(0x7f0000000700)='GPL\x00', 0x0, 0x56, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000b3180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r6, 0x0, 0x646}, 0x18) (async) creat(&(0x7f0000000200)='./file0\x00', 0x2) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) truncate(&(0x7f0000000000)='./file2\x00', 0x80000002328) (async) 40.078701917s ago: executing program 2 (id=1236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0xe4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 38.977209052s ago: executing program 2 (id=1255): syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x20050800) epoll_create(0xa60c) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000"], 0x88}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 38.976860452s ago: executing program 34 (id=1255): syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x20050800) epoll_create(0xa60c) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000"], 0x88}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 4.45470183s ago: executing program 1 (id=1859): r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r2 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x100, 0x82) write$UHID_DESTROY(r2, &(0x7f0000000840), 0x4) io_uring_setup(0x7975, &(0x7f00000002c0)={0x0, 0x659, 0x40, 0x1, 0x328}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa2000000000000f8ffffffb703000008000000b70400000000be57c6f47e48d34f00009500"/72], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x564a0000) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4fe, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}}, {0x800, 0x0, 0x84, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b5710c00", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.738955706s ago: executing program 1 (id=1867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x8000000000000000}, 0x18) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5, 0xffffffffffffffff, {}, 0xfe}, 0x18) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x3, {0x1, 0xf0, 0x2}, 0x2}, 0x18) 3.399170075s ago: executing program 1 (id=1869): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='net/hci\x00') sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bind$bt_hci(r1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) pivot_root(0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff7a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0xbfd1, 0x0) 2.569626921s ago: executing program 1 (id=1884): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/10, 0xa}], 0x1, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x7}, &(0x7f0000000640)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) dup(0xffffffffffffffff) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 2.491180041s ago: executing program 1 (id=1885): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) setreuid(0x0, r1) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x10, &(0x7f0000000c80)={[], [{@obj_role={'obj_role', 0x3d, '/'}}, {@subj_type}, {@uid_lt={'uid<', r1}}, {@uid_lt={'uid<', r1}}]}, 0xea, 0x472, &(0x7f0000000800)="$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") futex(&(0x7f0000000740)=0x4, 0x1, 0x4, 0x0, &(0x7f0000048000)=0x200000, 0x0) futex(&(0x7f000000cffc), 0x8, 0x0, 0x0, &(0x7f0000048000), 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001001000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000780)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20040ffd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000680)="90308e6dd4607b45047fbed3f21ab08b06fd1b6bc3f970c17e6154833e6b419052810e80c48dc8cd1fbb6addb68c490f9fcc74df50549c26119bb863e546dc426a3ecbd2a71f0bc89d2ed8e00b7c0f290d9a2a9b3aa7ab49804471894827d2da70fbd684b8179b6e61b6281258d858fff066be2ef9debda3170e1a76c5dbe51b5760651915eefa23a27e68dbf03778b9a80356f07fae45fdf79e623a9a6911f969eb5faef6154b", 0xa7}, {&(0x7f0000000380)="9c39ab8e33a0e0fdc8558b6294ea89bde49516ee1a82ee4478b0709499137f0e41eaf9726fbb1f3cb5e4b9ee74e9cc915ebd0a246718ec26bcdc7bab4e90", 0x3e}, {&(0x7f0000000500)="e661ef7cb89a7c5e0ec303318d20e8fa6847b2d89db1", 0x16}], 0x3) creat(&(0x7f0000000e00)='./file0\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) getdents(r5, &(0x7f0000000200)=""/76, 0x4c) capget(&(0x7f0000000580)={0x19980330}, &(0x7f00000007c0)={0x4, 0x8, 0x74f8e831, 0x7fffffff, 0x1, 0x7fffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2000000000000092, &(0x7f00000003c0)=[{0x2, 0x0, 0x0, 0x7ffc1ffd}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000200)) epoll_create(0x4) write$P9_RREAD(r6, &(0x7f0000000180)=ANY=[], 0xb) 2.442688261s ago: executing program 1 (id=1889): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "f1a1353fb9f90be6e423ceb0ab491279f6a31854ec98e950cfed21fcad7ff0ffffffffffffff7f8caa52dd8d39af14c31ed56ad500"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='keyring\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', r1}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000002289f8eb6ee39ae2850000005000000095"], &(0x7f0000000340)='syzkaller\x00', 0x9e7a, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000031c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000044000000060a010400000000000000000a0000090c0006400000000000000004080009400000000108000b400000000408000a40000000000c000640000000000000000330000000020a01"], 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) add_key$fscrypt_provisioning(&(0x7f0000001280), &(0x7f00000012c0)={'syz', 0x3}, &(0x7f0000001300)=ANY=[@ANYBLOB="010000000000000020231188322a1e1d"], 0x10, r1) getresuid(&(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write(r6, &(0x7f0000000240)="94", 0x1) vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5", 0x4f}], 0x2, 0x0) tee(r5, r8, 0x8f5, 0x0) 1.761437037s ago: executing program 7 (id=1899): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) 1.616099997s ago: executing program 6 (id=1903): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000010c0)="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", 0xf41}], 0x1, &(0x7f0000000440)=ANY=[], 0x98}}], 0x2, 0xc044) 1.570521626s ago: executing program 3 (id=1904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x5, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x8000002}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, 0x0, 0x0) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.569919276s ago: executing program 6 (id=1905): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000002780)='\x87&/\x16\xe7') futex_waitv(&(0x7f0000001d80)=[{0x1, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x0) (fail_nth: 6) 1.569544756s ago: executing program 3 (id=1906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0xe4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(0x0) close(r3) 1.228715765s ago: executing program 3 (id=1908): r0 = socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000002800)=0x8) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) mknod$loop(0x0, 0x100000000000600d, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.228035445s ago: executing program 7 (id=1909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e2a, @void, @value}, 0x90) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @remote}, 0x10) bind$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) unshare(0x2030180) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 1.209110985s ago: executing program 6 (id=1910): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendfile(r1, r0, 0x0, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xc3) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) sendto(r2, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3a3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x1, @loopback, 0x5}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r3, 0xff, 0x8, 0x4, 0x81, 0xfffffff7}, 0x14) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) bind$l2tp6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x7, @private0, 0xfffffffb, 0x2}, 0x20) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = epoll_create1(0x0) r7 = syz_io_uring_setup(0x6d57, &(0x7f00000002c0)={0x0, 0x1bfd, 0x100, 0x0, 0x3ab}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) unshare(0x400) syz_io_uring_submit(r8, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) 1.146927215s ago: executing program 7 (id=1912): socket$kcm(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.028461184s ago: executing program 4 (id=1913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) 894.164743ms ago: executing program 4 (id=1914): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r2}, 0x46) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (rerun: 32) syz_emit_ethernet(0x112e, &(0x7f0000002080)=ANY=[], 0x0) 766.287713ms ago: executing program 7 (id=1915): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) 615.018372ms ago: executing program 7 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a00000003000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000600)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/153}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x0, 0x3, 0xffff, 0x1, 0x3, 0xfff7fffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10b942) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f00000003c0)=0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRES8=r4], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x1ba7f32}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x34, r8, 0x101, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 570.433402ms ago: executing program 7 (id=1917): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) request_key(0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000005dbc3fa23691f2d8f90fe235be091e90d117d228c3a3e8af6464e77b171e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_setup(0x6779, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x17c}) 532.120942ms ago: executing program 4 (id=1918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0xe4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(0x0) close(r3) 466.957801ms ago: executing program 4 (id=1919): r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r2 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x100, 0x82) write$UHID_DESTROY(r2, &(0x7f0000000840), 0x4) io_uring_setup(0x7975, &(0x7f00000002c0)={0x0, 0x659, 0x40, 0x1, 0x328}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa2000000000000f8ffffffb703000008000000b70400000000be57c6f47e48d34f00009500"/72], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4fe, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}}, {0x800, 0x0, 0x84, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b5710c00", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 376.022551ms ago: executing program 3 (id=1920): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x2a4c0, 0x918d8ecf0d5d0600) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000000000)='di\xbcC\xc65F\\L\xd1\x9e=\xb2\xee\xd9,\tc') bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691077000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0), 0x0, 0xf6, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x408a, 0x8, 0x8, &(0x7f00000004c0)}}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) close(r3) 319.741651ms ago: executing program 3 (id=1921): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x40005080, 0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0) 302.52772ms ago: executing program 6 (id=1922): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e2a, @void, @value}, 0x90) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @remote}, 0x10) bind$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) unshare(0x2030180) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 164.88671ms ago: executing program 6 (id=1923): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x3, 0x7, 0x10000) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r2, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 163.64943ms ago: executing program 4 (id=1924): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r8, 0x0, &(0x7f0000000380)=""/74}, 0x20) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000300)={0x5, &(0x7f0000000280)=[{0xfffb, 0x20, 0x7, 0x7}, {0x401, 0x7, 0x7}, {0x14, 0x3, 0x34, 0x7ab8cafe}, {0x3, 0x9, 0x1, 0x80000000}, {0x1, 0x0, 0xf5, 0x8}]}, 0x10) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r9, &(0x7f0000000580)=[{&(0x7f0000000a00)=""/4111, 0x100f}, {0x0}], 0x2, 0x20000000, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) rename(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r11}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) getxattr(0x0, 0x0, 0x0, 0x0) 35.043609ms ago: executing program 4 (id=1925): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xff, 0x101002) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) (fail_nth: 1) 11.84822ms ago: executing program 6 (id=1926): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x1000404, &(0x7f0000000280)={[{@resgid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r3}, 0x18) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xd, 0x13, r1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$selinux_user(r5, 0x0, 0x27) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") chdir(&(0x7f0000000380)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0xc, 0x16, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @map_fd={0x18, 0x7, 0x1, 0x0, r1}]}, &(0x7f0000000400)='syzkaller\x00', 0x8, 0xfb, &(0x7f0000000740)=""/251, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x8, &(0x7f00000006c0)=[r6, r2, 0xffffffffffffffff], &(0x7f0000000840)=[{0x1, 0x5, 0x1, 0x1}, {0x2, 0x5, 0x9, 0xc}, {0x4, 0x4, 0x9, 0x3}, {0x3, 0x5, 0x7, 0x7}, {0x3, 0x3, 0xd, 0xc}, {0x2, 0x4, 0x3, 0xa}, {0x3, 0x1, 0xc, 0x4}, {0x2, 0x3, 0x3, 0x2}], 0x10, 0x7fff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) 0s ago: executing program 3 (id=1927): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) setreuid(0x0, r1) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x10, &(0x7f0000000c80)={[], [{@obj_role={'obj_role', 0x3d, '/'}}, {@subj_type}, {@uid_lt={'uid<', r1}}, {@uid_lt={'uid<', r1}}]}, 0xea, 0x472, &(0x7f0000000800)="$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") futex(&(0x7f0000000740)=0x4, 0x1, 0x4, 0x0, &(0x7f0000048000)=0x200000, 0x0) futex(&(0x7f000000cffc), 0x8, 0x0, 0x0, &(0x7f0000048000), 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001001000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000780)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20040ffd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000680)="90308e6dd4607b45047fbed3f21ab08b06fd1b6bc3f970c17e6154833e6b419052810e80c48dc8cd1fbb6addb68c490f9fcc74df50549c26119bb863e546dc426a3ecbd2a71f0bc89d2ed8e00b7c0f290d9a2a9b3aa7ab49804471894827d2da70fbd684b8179b6e61b6281258d858fff066be2ef9debda3170e1a76c5dbe51b5760651915eefa23a27e68dbf03778b9a80356f07fae45fdf79e623a9a6911f969eb5faef6154b", 0xa7}, {&(0x7f0000000380)="9c39ab8e33a0e0fdc8558b6294ea89bde49516ee1a82ee4478b0709499137f0e41eaf9726fbb1f3cb5e4b9ee74e9cc915ebd0a246718ec26bcdc7bab4e90", 0x3e}, {&(0x7f0000000500)="e661ef7cb89a7c5e0ec303318d20e8fa6847b2d89db1", 0x16}], 0x3) creat(&(0x7f0000000e00)='./file0\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) getdents(r5, &(0x7f0000000200)=""/76, 0x4c) capget(&(0x7f0000000580)={0x19980330}, &(0x7f00000007c0)={0x4, 0x8, 0x74f8e831, 0x7fffffff, 0x1, 0x7fffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000200)) epoll_create(0x4) write$P9_RREAD(r6, &(0x7f0000000180)=ANY=[], 0xb) kernel console output (not intermixed with test programs): comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 106.412150][ T29] audit: type=1326 audit(106.326:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 106.435135][ T29] audit: type=1326 audit(106.356:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54c0db5d19 code=0x7ffc0000 [ 106.457938][ T29] audit: type=1326 audit(106.356:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c0db5d19 code=0x7ffc0000 [ 106.481151][ T29] audit: type=1326 audit(106.356:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c0db5d19 code=0x7ffc0000 [ 106.504090][ T29] audit: type=1400 audit(106.356:6135): avc: denied { getopt } for pid=7139 comm="syz.3.1200" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.579573][ T7155] xt_hashlimit: size too large, truncated to 1048576 [ 106.589961][ T7158] FAULT_INJECTION: forcing a failure. [ 106.589961][ T7158] name failslab, interval 1, probability 0, space 0, times 0 [ 106.602676][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.4.1207 Not tainted 6.13.0-rc3-syzkaller #0 [ 106.611705][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 106.621787][ T7158] Call Trace: [ 106.625082][ T7158] [ 106.628026][ T7158] dump_stack_lvl+0xf2/0x150 [ 106.632691][ T7158] dump_stack+0x15/0x1a [ 106.636944][ T7158] should_fail_ex+0x223/0x230 [ 106.641648][ T7158] should_failslab+0x8f/0xb0 [ 106.646312][ T7158] __kmalloc_node_noprof+0xad/0x410 [ 106.651552][ T7158] ? __kvmalloc_node_noprof+0x72/0x170 [ 106.657058][ T7158] __kvmalloc_node_noprof+0x72/0x170 [ 106.662446][ T7158] alloc_netdev_mqs+0x5c1/0x9c0 [ 106.667320][ T7158] vti6_locate+0x30a/0x3c0 [ 106.671822][ T7158] vti6_siocdevprivate+0x57b/0x910 [ 106.676998][ T7158] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 106.682712][ T7158] dev_ifsioc+0x84e/0xa10 [ 106.687123][ T7158] dev_ioctl+0x8e9/0xab0 [ 106.691435][ T7158] sock_ioctl+0x57d/0x600 [ 106.695798][ T7158] ? __pfx_sock_ioctl+0x10/0x10 [ 106.700695][ T7158] __se_sys_ioctl+0xc9/0x140 [ 106.705346][ T7158] __x64_sys_ioctl+0x43/0x50 [ 106.709984][ T7158] x64_sys_call+0x1690/0x2dc0 [ 106.714759][ T7158] do_syscall_64+0xc9/0x1c0 [ 106.719330][ T7158] ? clear_bhb_loop+0x55/0xb0 [ 106.724105][ T7158] ? clear_bhb_loop+0x55/0xb0 [ 106.728889][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.734895][ T7158] RIP: 0033:0x7f9172ec5d19 [ 106.739320][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.759113][ T7158] RSP: 002b:00007f9171531038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.767534][ T7158] RAX: ffffffffffffffda RBX: 00007f91730b5fa0 RCX: 00007f9172ec5d19 [ 106.775518][ T7158] RDX: 00000000200000c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 106.783508][ T7158] RBP: 00007f9171531090 R08: 0000000000000000 R09: 0000000000000000 [ 106.791534][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.799570][ T7158] R13: 0000000000000000 R14: 00007f91730b5fa0 R15: 00007ffeea705e48 [ 106.807584][ T7158] [ 106.996892][ T7177] loop1: detected capacity change from 0 to 512 [ 107.004547][ T7173] loop6: detected capacity change from 0 to 1024 [ 107.026294][ T7173] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 107.042457][ T7173] JBD2: no valid journal superblock found [ 107.048238][ T7173] EXT4-fs (loop6): Could not load journal inode [ 107.102818][ T7177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.132210][ T7187] loop6: detected capacity change from 0 to 128 [ 107.161998][ T7184] lo speed is unknown, defaulting to 1000 [ 107.168170][ T7184] lo speed is unknown, defaulting to 1000 [ 107.183822][ T7187] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.224162][ T7189] lo speed is unknown, defaulting to 1000 [ 107.230476][ T7189] lo speed is unknown, defaulting to 1000 [ 107.300975][ T4810] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.340718][ T7203] syz.3.1225[7203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.340806][ T7203] syz.3.1225[7203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.359438][ T7203] syz.3.1225[7203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.440620][ T7214] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 107.459485][ T7214] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.467205][ T7214] vhci_hcd: invalid port number 15 [ 107.472445][ T7214] vhci_hcd: invalid port number 15 [ 107.539323][ T7221] loop2: detected capacity change from 0 to 2048 [ 107.557533][ T7225] netlink: 371 bytes leftover after parsing attributes in process `syz.4.1235'. [ 107.584675][ T7221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.615103][ T7222] lo speed is unknown, defaulting to 1000 [ 107.621422][ T7222] lo speed is unknown, defaulting to 1000 [ 107.712573][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /254/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 107.759213][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3112: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 107.789423][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1237'. [ 107.797453][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 107.811493][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /254/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 107.817821][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1237'. [ 107.837253][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3112: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 107.875820][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 107.875839][ T7243] loop3: detected capacity change from 0 to 1024 [ 107.888046][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.894163][ T7243] EXT4-fs: Ignoring removed nobh option [ 107.906185][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /254/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 107.908406][ T7243] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.939024][ T7245] wireguard0: entered promiscuous mode [ 107.940004][ T7243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.944573][ T7245] wireguard0: entered allmulticast mode [ 107.954341][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3112: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 108.002339][ T7251] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 108.002339][ T7251] The task syz.4.1238 (7251) triggered the difference, watch for misbehavior. [ 108.040377][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 108.055940][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /254/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 108.080240][ T7243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.092980][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3112: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 108.094058][ T7243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.114329][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 108.134108][ T3306] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /254/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 108.137396][ T7256] loop1: detected capacity change from 0 to 256 [ 108.173943][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3112: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 108.195425][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 108.202931][ T7256] FAT-fs (loop1): Directory bread(block 64) failed [ 108.214033][ T7256] FAT-fs (loop1): Directory bread(block 65) failed [ 108.214886][ T7258] loop6: detected capacity change from 0 to 128 [ 108.220826][ T7256] FAT-fs (loop1): Directory bread(block 66) failed [ 108.234862][ T7256] FAT-fs (loop1): Directory bread(block 67) failed [ 108.241457][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 108.241529][ T7256] FAT-fs (loop1): Directory bread(block 68) failed [ 108.260245][ T7256] FAT-fs (loop1): Directory bread(block 69) failed [ 108.261264][ T7258] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.266914][ T7256] FAT-fs (loop1): Directory bread(block 70) failed [ 108.281581][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 108.285534][ T7256] FAT-fs (loop1): Directory bread(block 71) failed [ 108.285572][ T7256] FAT-fs (loop1): Directory bread(block 72) failed [ 108.285595][ T7256] FAT-fs (loop1): Directory bread(block 73) failed [ 108.329146][ T7256] FAULT_INJECTION: forcing a failure. [ 108.329146][ T7256] name failslab, interval 1, probability 0, space 0, times 0 [ 108.341832][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.1.1241 Not tainted 6.13.0-rc3-syzkaller #0 [ 108.349958][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 108.350770][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 108.350788][ T7256] Call Trace: [ 108.362949][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 108.372283][ T7256] [ 108.372294][ T7256] dump_stack_lvl+0xf2/0x150 [ 108.376235][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 108.387331][ T7256] dump_stack+0x15/0x1a [ 108.410666][ T7256] should_fail_ex+0x223/0x230 [ 108.415388][ T7256] should_failslab+0x8f/0xb0 [ 108.420101][ T7256] kmem_cache_alloc_noprof+0x52/0x320 [ 108.425529][ T7256] ? mm_alloc+0x2b/0xa0 [ 108.429740][ T7256] mm_alloc+0x2b/0xa0 [ 108.433784][ T7256] alloc_bprm+0x1c2/0x5d0 [ 108.438142][ T7256] do_execveat_common+0x134/0x800 [ 108.443238][ T7256] __x64_sys_execve+0x5a/0x70 [ 108.447981][ T7256] x64_sys_call+0x1333/0x2dc0 [ 108.452800][ T7256] do_syscall_64+0xc9/0x1c0 [ 108.457319][ T7256] ? clear_bhb_loop+0x55/0xb0 [ 108.462118][ T7256] ? clear_bhb_loop+0x55/0xb0 [ 108.466892][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.473160][ T7256] RIP: 0033:0x7f5f0d465d19 [ 108.477582][ T7256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.497273][ T7256] RSP: 002b:00007f5f0bad1038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 108.505764][ T7256] RAX: ffffffffffffffda RBX: 00007f5f0d655fa0 RCX: 00007f5f0d465d19 [ 108.513744][ T7256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 108.521719][ T7256] RBP: 00007f5f0bad1090 R08: 0000000000000000 R09: 0000000000000000 [ 108.529728][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.537722][ T7256] R13: 0000000000000000 R14: 00007f5f0d655fa0 R15: 00007ffe2565beb8 [ 108.545784][ T7256] [ 108.579063][ T3707] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.617717][ T7266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1245'. [ 108.627879][ T4810] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.707120][ T7279] loop4: detected capacity change from 0 to 512 [ 108.728015][ T7268] lo speed is unknown, defaulting to 1000 [ 108.734651][ T7268] lo speed is unknown, defaulting to 1000 [ 108.740458][ T7279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.789964][ T7288] loop1: detected capacity change from 0 to 1764 [ 108.868558][ T7299] loop3: detected capacity change from 0 to 128 [ 108.878421][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.897039][ T7299] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.939543][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.971984][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.983885][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.993894][ T7309] loop3: detected capacity change from 0 to 164 [ 109.005052][ T7309] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 109.028561][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.043521][ T7309] lo speed is unknown, defaulting to 1000 [ 109.049734][ T7309] lo speed is unknown, defaulting to 1000 [ 109.050330][ T7301] lo speed is unknown, defaulting to 1000 [ 109.080479][ T7312] syz.3.1258: attempt to access beyond end of device [ 109.080479][ T7312] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 109.092056][ T7301] lo speed is unknown, defaulting to 1000 [ 109.095674][ T7312] syz.3.1258: attempt to access beyond end of device [ 109.095674][ T7312] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 109.159839][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.169767][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.179188][ T28] bond0 (unregistering): Released all slaves [ 109.255548][ T7316] loop3: detected capacity change from 0 to 128 [ 109.279334][ T28] hsr_slave_0: left promiscuous mode [ 109.285149][ T28] hsr_slave_1: left promiscuous mode [ 109.290912][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.298424][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.306676][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.314102][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.323562][ T28] veth1_macvtap: left promiscuous mode [ 109.329123][ T28] veth0_macvtap: left promiscuous mode [ 109.334663][ T28] veth1_vlan: left promiscuous mode [ 109.339976][ T28] veth0_vlan: left promiscuous mode [ 109.383742][ T28] infiniband sz1: set down [ 109.422776][ T28] team0 (unregistering): Port device team_slave_1 removed [ 109.433322][ T28] team0 (unregistering): Port device team_slave_0 removed [ 109.468603][ T330] smc: removing ib device sz1 [ 109.480535][ T3361] lo speed is unknown, defaulting to 1000 [ 109.506798][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 109.558098][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.634930][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.642257][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.651297][ T7301] bridge_slave_0: entered allmulticast mode [ 109.658110][ T7301] bridge_slave_0: entered promiscuous mode [ 109.664888][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.672109][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.680648][ T7301] bridge_slave_1: entered allmulticast mode [ 109.695963][ T7301] bridge_slave_1: entered promiscuous mode [ 109.735449][ T7341] loop4: detected capacity change from 0 to 2048 [ 109.742355][ T7341] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.757169][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.784352][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1266'. [ 109.787999][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.811614][ T7338] lo speed is unknown, defaulting to 1000 [ 109.832206][ T7349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1271'. [ 109.841752][ T7350] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1271'. [ 109.859858][ T7341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.888428][ T7301] team0: Port device team_slave_0 added [ 109.898450][ T7301] team0: Port device team_slave_1 added [ 109.930787][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.937851][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.963919][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.976027][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.983107][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.997070][ T7358] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1268: bg 0: block 234: padding at end of block bitmap is not set [ 110.009280][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.039959][ T7358] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1636 with error 117 [ 110.052729][ T7358] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.052729][ T7358] [ 110.081400][ T7356] IPVS: stopping master sync thread 7361 ... [ 110.087443][ T7361] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 110.109345][ T7301] hsr_slave_0: entered promiscuous mode [ 110.116199][ T7301] hsr_slave_1: entered promiscuous mode [ 110.122795][ T7301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.128628][ T7360] loop3: detected capacity change from 0 to 4096 [ 110.130520][ T7301] Cannot create hsr debugfs directory [ 110.139008][ T7360] EXT4-fs: Ignoring removed nobh option [ 110.152714][ T7360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.189507][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.248702][ T6515] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1636 with max blocks 2 with error 28 [ 110.261498][ T6515] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.261498][ T6515] [ 110.271368][ T6515] EXT4-fs (loop4): Total free blocks count 0 [ 110.274232][ T7301] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 110.277384][ T6515] EXT4-fs (loop4): Free/Dirty block details [ 110.277413][ T6515] EXT4-fs (loop4): free_blocks=0 [ 110.294998][ T6515] EXT4-fs (loop4): dirty_blocks=16 [ 110.300227][ T6515] EXT4-fs (loop4): Block reservation details [ 110.311055][ T7301] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 110.320710][ T7301] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 110.338363][ T7301] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 110.371708][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.382572][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.404753][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.411938][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.430849][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.437983][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.478666][ T7384] lo speed is unknown, defaulting to 1000 [ 110.489033][ T7386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1282'. [ 110.539571][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.685362][ T7301] veth0_vlan: entered promiscuous mode [ 110.693324][ T7301] veth1_vlan: entered promiscuous mode [ 110.749257][ T7301] veth0_macvtap: entered promiscuous mode [ 110.756644][ T7301] veth1_macvtap: entered promiscuous mode [ 110.770104][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.782186][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.791744][ T7301] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.800571][ T7301] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.809320][ T7301] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.818137][ T7301] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.854686][ T7415] lo speed is unknown, defaulting to 1000 [ 110.910632][ T7422] loop7: detected capacity change from 0 to 164 [ 110.921907][ T7422] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 110.942874][ T7422] lo speed is unknown, defaulting to 1000 [ 110.982863][ T7427] syz.7.1289: attempt to access beyond end of device [ 110.982863][ T7427] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 110.997020][ T7427] syz.7.1289: attempt to access beyond end of device [ 110.997020][ T7427] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.040753][ T7432] loop7: detected capacity change from 0 to 164 [ 111.052327][ T7432] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 111.087308][ T7432] lo speed is unknown, defaulting to 1000 [ 111.103913][ T7440] blktrace: Concurrent blktraces are not allowed on sg0 [ 111.119013][ T7442] syz.7.1293: attempt to access beyond end of device [ 111.119013][ T7442] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 111.128450][ T7434] lo speed is unknown, defaulting to 1000 [ 111.137185][ T7442] syz.7.1293: attempt to access beyond end of device [ 111.137185][ T7442] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.293489][ T29] kauditd_printk_skb: 627 callbacks suppressed [ 111.293506][ T29] audit: type=1326 audit(111.326:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.6.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 111.350164][ T29] audit: type=1326 audit(111.366:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.6.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 111.368632][ T7459] loop3: detected capacity change from 0 to 128 [ 111.377823][ T29] audit: type=1326 audit(111.396:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5f0d465d19 code=0x7ffc0000 [ 111.421085][ T7462] xt_hashlimit: size too large, truncated to 1048576 [ 111.447390][ T7459] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.478068][ T29] audit: type=1326 audit(111.516:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c0db5d19 code=0x7ffc0000 [ 111.501064][ T29] audit: type=1326 audit(111.516:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54c0db5d19 code=0x7ffc0000 [ 111.523896][ T29] audit: type=1326 audit(111.516:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c0db5d19 code=0x7ffc0000 [ 111.562382][ T7466] loop6: detected capacity change from 0 to 512 [ 111.599835][ T7466] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1305: corrupted in-inode xattr: invalid ea_ino [ 111.614316][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.616559][ T29] audit: type=1326 audit(111.586:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54c0db5d19 code=0x7ffc0000 [ 111.624670][ T7466] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1305: couldn't read orphan inode 15 (err -117) [ 111.646087][ T29] audit: type=1326 audit(111.586:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c0db5d19 code=0x7ffc0000 [ 111.665834][ T7466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.680694][ T29] audit: type=1326 audit(111.586:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c0db5d19 code=0x7ffc0000 [ 111.715668][ T29] audit: type=1326 audit(111.586:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7458 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54c0db5d19 code=0x7ffc0000 [ 111.722981][ T7466] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1305: invalid indirect mapped block 234881024 (level 0) [ 111.801937][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.823694][ T7472] loop3: detected capacity change from 0 to 512 [ 111.834492][ T7472] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.858910][ T7472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.908036][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.933336][ T7480] loop3: detected capacity change from 0 to 512 [ 111.954764][ T7480] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.971904][ T7480] EXT4-fs (loop3): 1 truncate cleaned up [ 111.979402][ T7480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.045093][ T7486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1312'. [ 112.102185][ T7492] loop4: detected capacity change from 0 to 128 [ 112.148761][ T7492] syz.4.1315: attempt to access beyond end of device [ 112.148761][ T7492] loop4: rw=2049, sector=153, nr_sectors = 3 limit=128 [ 112.163643][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.188284][ T7494] loop6: detected capacity change from 0 to 512 [ 112.204343][ T5721] kworker/u8:9: attempt to access beyond end of device [ 112.204343][ T5721] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 112.219151][ T7499] loop7: detected capacity change from 0 to 1764 [ 112.227470][ T7494] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 112.238040][ T7502] FAULT_INJECTION: forcing a failure. [ 112.238040][ T7502] name failslab, interval 1, probability 0, space 0, times 0 [ 112.250761][ T7502] CPU: 1 UID: 0 PID: 7502 Comm: syz.3.1318 Not tainted 6.13.0-rc3-syzkaller #0 [ 112.250791][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 112.250806][ T7502] Call Trace: [ 112.250812][ T7502] [ 112.250821][ T7502] dump_stack_lvl+0xf2/0x150 [ 112.280699][ T7502] dump_stack+0x15/0x1a [ 112.284972][ T7502] should_fail_ex+0x223/0x230 [ 112.289670][ T7502] should_failslab+0x8f/0xb0 [ 112.294362][ T7502] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 112.300258][ T7502] ? __d_alloc+0x3d/0x340 [ 112.304746][ T7502] __d_alloc+0x3d/0x340 [ 112.308914][ T7502] d_alloc_pseudo+0x1e/0x80 [ 112.313491][ T7502] alloc_file_pseudo+0x70/0x140 [ 112.318357][ T7502] __shmem_file_setup+0x1bb/0x1f0 [ 112.323497][ T7502] shmem_file_setup+0x3b/0x50 [ 112.328245][ T7502] __se_sys_memfd_create+0x31d/0x5c0 [ 112.333604][ T7502] __x64_sys_memfd_create+0x31/0x40 [ 112.338818][ T7502] x64_sys_call+0x2d4c/0x2dc0 [ 112.343506][ T7502] do_syscall_64+0xc9/0x1c0 [ 112.348022][ T7502] ? clear_bhb_loop+0x55/0xb0 [ 112.352763][ T7502] ? clear_bhb_loop+0x55/0xb0 [ 112.357483][ T7502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.363409][ T7502] RIP: 0033:0x7f54c0db5d19 [ 112.367830][ T7502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.387597][ T7502] RSP: 002b:00007f54bf420e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 112.396198][ T7502] RAX: ffffffffffffffda RBX: 0000000000000376 RCX: 00007f54c0db5d19 [ 112.404180][ T7502] RDX: 00007f54bf420ef0 RSI: 0000000000000000 RDI: 00007f54c0e32381 [ 112.412163][ T7502] RBP: 0000000020000a00 R08: 00007f54bf420bb7 R09: 00007f54bf420e40 [ 112.420155][ T7502] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000100 [ 112.428143][ T7502] R13: 00007f54bf420ef0 R14: 00007f54bf420eb0 R15: 00000000200001c0 [ 112.436212][ T7502] [ 112.453440][ T7494] EXT4-fs (loop6): 1 truncate cleaned up [ 112.466671][ T7494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.699898][ T7515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1325'. [ 113.081594][ T7525] loop7: detected capacity change from 0 to 512 [ 113.089397][ T7525] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 113.110658][ T7525] EXT4-fs (loop7): 1 truncate cleaned up [ 113.117763][ T7525] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.130611][ T7527] xt_hashlimit: size too large, truncated to 1048576 [ 113.155344][ T7494] syz.6.1316 (7494) used greatest stack depth: 6264 bytes left [ 113.170858][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.194574][ T7531] loop6: detected capacity change from 0 to 256 [ 113.201668][ T7531] FAT-fs (loop6): bogus number of FAT sectors [ 113.207789][ T7531] FAT-fs (loop6): Can't find a valid FAT filesystem [ 113.228893][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.348754][ T7539] loop3: detected capacity change from 0 to 512 [ 113.368190][ T7539] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.407392][ T7539] EXT4-fs (loop3): 1 truncate cleaned up [ 113.429725][ T7539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.452931][ T7542] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 113.463046][ T7543] loop6: detected capacity change from 0 to 128 [ 113.478941][ T7542] loop7: detected capacity change from 0 to 2048 [ 113.518247][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.529286][ T7542] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.561246][ T7547] FAULT_INJECTION: forcing a failure. [ 113.561246][ T7547] name failslab, interval 1, probability 0, space 0, times 0 [ 113.573969][ T7547] CPU: 1 UID: 0 PID: 7547 Comm: syz.3.1335 Not tainted 6.13.0-rc3-syzkaller #0 [ 113.582940][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 113.593040][ T7547] Call Trace: [ 113.596342][ T7547] [ 113.599293][ T7547] dump_stack_lvl+0xf2/0x150 [ 113.603948][ T7547] dump_stack+0x15/0x1a [ 113.608255][ T7547] should_fail_ex+0x223/0x230 [ 113.612963][ T7547] should_failslab+0x8f/0xb0 [ 113.617587][ T7547] __kmalloc_noprof+0xab/0x3f0 [ 113.622371][ T7547] ? sk_prot_alloc+0xab/0x190 [ 113.627076][ T7547] ? should_fail_ex+0xd7/0x230 [ 113.631878][ T7547] sk_prot_alloc+0xab/0x190 [ 113.636458][ T7547] sk_alloc+0x33/0x360 [ 113.639909][ T7538] syz.6.1334: attempt to access beyond end of device [ 113.639909][ T7538] loop6: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 113.640558][ T7547] ? bpf_prog_test_run_skb+0x1da/0xc00 [ 113.659592][ T7547] bpf_prog_test_run_skb+0x244/0xc00 [ 113.665091][ T7547] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 113.671000][ T7547] bpf_prog_test_run+0x20f/0x3a0 [ 113.676000][ T7547] __sys_bpf+0x400/0x7a0 [ 113.680380][ T7547] __x64_sys_bpf+0x43/0x50 [ 113.684868][ T7547] x64_sys_call+0x2914/0x2dc0 [ 113.689567][ T7547] do_syscall_64+0xc9/0x1c0 [ 113.694153][ T7547] ? clear_bhb_loop+0x55/0xb0 [ 113.698935][ T7547] ? clear_bhb_loop+0x55/0xb0 [ 113.703691][ T7547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.709692][ T7547] RIP: 0033:0x7f54c0db5d19 [ 113.714167][ T7547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.733865][ T7547] RSP: 002b:00007f54bf421038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.742358][ T7547] RAX: ffffffffffffffda RBX: 00007f54c0fa5fa0 RCX: 00007f54c0db5d19 [ 113.750351][ T7547] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 113.758359][ T7547] RBP: 00007f54bf421090 R08: 0000000000000000 R09: 0000000000000000 [ 113.766359][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.774408][ T7547] R13: 0000000000000000 R14: 00007f54c0fa5fa0 R15: 00007ffd0a6edd88 [ 113.782405][ T7547] [ 113.792307][ T7551] loop4: detected capacity change from 0 to 164 [ 113.806780][ T7551] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 113.834660][ T7551] lo speed is unknown, defaulting to 1000 [ 113.869052][ T7555] syz.4.1336: attempt to access beyond end of device [ 113.869052][ T7555] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 113.900236][ T7556] syz.3.1338[7556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.900307][ T7556] syz.3.1338[7556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.921400][ T7556] syz.3.1338[7556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.947638][ T7555] syz.4.1336: attempt to access beyond end of device [ 113.947638][ T7555] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 114.020870][ T7560] loop6: detected capacity change from 0 to 1764 [ 114.246213][ T7583] xt_hashlimit: size too large, truncated to 1048576 [ 114.529774][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.570795][ T7590] loop7: detected capacity change from 0 to 164 [ 114.581677][ T7590] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 114.602147][ T7590] lo speed is unknown, defaulting to 1000 [ 114.614382][ T7588] loop1: detected capacity change from 0 to 512 [ 114.637329][ T7588] EXT4-fs (loop1): too many log groups per flexible block group [ 114.639817][ T7590] syz.7.1351: attempt to access beyond end of device [ 114.639817][ T7590] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 114.645054][ T7588] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 114.666942][ T7588] EXT4-fs (loop1): mount failed [ 114.686506][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.695104][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.707640][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.716217][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.727316][ T7594] delete_channel: no stack [ 114.978455][ T7611] lo speed is unknown, defaulting to 1000 [ 115.021697][ T7614] loop4: detected capacity change from 0 to 164 [ 115.033374][ T7614] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 115.055816][ T7614] lo speed is unknown, defaulting to 1000 [ 115.074287][ T7620] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 115.080844][ T7620] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.088519][ T7620] vhci_hcd vhci_hcd.0: Device attached [ 115.097326][ T7621] vhci_hcd: connection closed [ 115.097814][ T5721] vhci_hcd: stop threads [ 115.106801][ T5721] vhci_hcd: release socket [ 115.111399][ T5721] vhci_hcd: disconnect device [ 115.144843][ T7625] loop4: detected capacity change from 0 to 164 [ 115.158637][ T7625] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 115.177763][ T7625] lo speed is unknown, defaulting to 1000 [ 115.234250][ T7628] xt_hashlimit: size too large, truncated to 1048576 [ 115.261427][ T7630] loop7: detected capacity change from 0 to 1764 [ 115.591288][ T7645] lo speed is unknown, defaulting to 1000 [ 115.705667][ T7654] loop1: detected capacity change from 0 to 164 [ 115.719675][ T7654] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 115.752247][ T7654] lo speed is unknown, defaulting to 1000 [ 115.802515][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 115.811484][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 115.820818][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1377'. [ 115.864254][ T7674] loop1: detected capacity change from 0 to 128 [ 115.873864][ T7674] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.881521][ T7678] loop4: detected capacity change from 0 to 128 [ 115.919506][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.921278][ T7678] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.950275][ T7681] loop1: detected capacity change from 0 to 128 [ 115.990520][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.038904][ T7688] lo speed is unknown, defaulting to 1000 [ 116.132503][ T7701] loop4: detected capacity change from 0 to 164 [ 116.140744][ T7700] xt_hashlimit: size too large, truncated to 1048576 [ 116.151044][ T7701] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 116.172270][ T7701] lo speed is unknown, defaulting to 1000 [ 116.219282][ T7703] bio_check_eod: 7 callbacks suppressed [ 116.219299][ T7703] syz.4.1389: attempt to access beyond end of device [ 116.219299][ T7703] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 116.240338][ T7703] syz.4.1389: attempt to access beyond end of device [ 116.240338][ T7703] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 116.358827][ T7708] loop4: detected capacity change from 0 to 1764 [ 116.366438][ T7708] ISOFS: unable to read i-node block [ 116.371788][ T7708] isofs_fill_super: get root inode failed [ 116.557734][ T7719] lo speed is unknown, defaulting to 1000 [ 116.629725][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 116.629742][ T29] audit: type=1326 audit(116.666:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.7.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 116.636420][ T7725] loop6: detected capacity change from 0 to 1764 [ 116.658914][ T29] audit: type=1326 audit(116.666:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.7.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 116.688250][ T29] audit: type=1326 audit(116.726:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.7.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 116.715498][ T29] audit: type=1326 audit(116.726:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.7.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 116.738358][ T29] audit: type=1326 audit(116.726:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.7.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 116.761387][ T29] audit: type=1326 audit(116.726:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.7.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 116.777812][ T7726] lo speed is unknown, defaulting to 1000 [ 116.784281][ T29] audit: type=1326 audit(116.726:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.7.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 116.812823][ T29] audit: type=1326 audit(116.726:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.7.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 116.836000][ T29] audit: type=1326 audit(116.726:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.7.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 116.858927][ T29] audit: type=1326 audit(116.726:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.7.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 117.076791][ T7745] FAULT_INJECTION: forcing a failure. [ 117.076791][ T7745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.089968][ T7745] CPU: 1 UID: 0 PID: 7745 Comm: syz.7.1405 Not tainted 6.13.0-rc3-syzkaller #0 [ 117.099035][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 117.109322][ T7745] Call Trace: [ 117.112630][ T7745] [ 117.115572][ T7745] dump_stack_lvl+0xf2/0x150 [ 117.120273][ T7745] dump_stack+0x15/0x1a [ 117.124466][ T7745] should_fail_ex+0x223/0x230 [ 117.129175][ T7745] should_fail+0xb/0x10 [ 117.133359][ T7745] should_fail_usercopy+0x1a/0x20 [ 117.138410][ T7745] _copy_from_user+0x1e/0xb0 [ 117.143060][ T7745] do_arpt_set_ctl+0x42f/0xa20 [ 117.147907][ T7745] ? tcp_release_cb+0xfe/0x380 [ 117.152750][ T7745] ? _raw_spin_unlock_bh+0x36/0x40 [ 117.157887][ T7745] nf_setsockopt+0x195/0x1b0 [ 117.162495][ T7745] ip_setsockopt+0xea/0x100 [ 117.167081][ T7745] tcp_setsockopt+0x93/0xb0 [ 117.171777][ T7745] sock_common_setsockopt+0x64/0x80 [ 117.177005][ T7745] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 117.183104][ T7745] __sys_setsockopt+0x187/0x200 [ 117.187978][ T7745] __x64_sys_setsockopt+0x66/0x80 [ 117.193011][ T7745] x64_sys_call+0x282e/0x2dc0 [ 117.197748][ T7745] do_syscall_64+0xc9/0x1c0 [ 117.202311][ T7745] ? clear_bhb_loop+0x55/0xb0 [ 117.207002][ T7745] ? clear_bhb_loop+0x55/0xb0 [ 117.211706][ T7745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.217622][ T7745] RIP: 0033:0x7f69d6d05d19 [ 117.222057][ T7745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.241717][ T7745] RSP: 002b:00007f69d5371038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 117.250141][ T7745] RAX: ffffffffffffffda RBX: 00007f69d6ef5fa0 RCX: 00007f69d6d05d19 [ 117.258220][ T7745] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 117.266198][ T7745] RBP: 00007f69d5371090 R08: 0000000000000418 R09: 0000000000000000 [ 117.274175][ T7745] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.282171][ T7745] R13: 0000000000000000 R14: 00007f69d6ef5fa0 R15: 00007ffe0c0d9908 [ 117.290153][ T7745] [ 117.303456][ T7749] lo speed is unknown, defaulting to 1000 [ 117.333513][ T7749] lo speed is unknown, defaulting to 1000 [ 117.356193][ T7749] lo speed is unknown, defaulting to 1000 [ 117.377832][ T7757] loop4: detected capacity change from 0 to 1024 [ 117.406371][ T7757] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.418376][ T7764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1408'. [ 117.429316][ T7757] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 117.439676][ T7757] EXT4-fs (loop4): orphan cleanup on readonly fs [ 117.449554][ T7757] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 117.458405][ T7749] infiniband sz1: set active [ 117.463669][ T7749] infiniband sz1: added lo [ 117.469325][ T35] lo speed is unknown, defaulting to 1000 [ 117.484221][ T7757] EXT4-fs (loop4): Remounting filesystem read-only [ 117.491188][ T7757] EXT4-fs (loop4): 1 orphan inode deleted [ 117.508537][ T7757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 117.523149][ T7757] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 117.534199][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1406'. [ 117.541470][ T7749] RDS/IB: sz1: added [ 117.543194][ T7757] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1406'. [ 117.543242][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 117.569013][ T7749] smc: adding ib device sz1 with port count 1 [ 117.572008][ T7774] loop6: detected capacity change from 0 to 512 [ 117.581907][ T7749] smc: ib device sz1 port 1 has pnetid [ 117.588005][ T3550] lo speed is unknown, defaulting to 1000 [ 117.596547][ T7774] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 117.622422][ T7774] EXT4-fs (loop6): 1 truncate cleaned up [ 117.653977][ T7749] lo speed is unknown, defaulting to 1000 [ 117.666613][ T7778] loop4: detected capacity change from 0 to 512 [ 117.683790][ T7778] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.748033][ T7778] EXT4-fs (loop4): 1 truncate cleaned up [ 117.861984][ T7749] lo speed is unknown, defaulting to 1000 [ 117.870110][ T7784] xt_hashlimit: size too large, truncated to 1048576 [ 118.061435][ T7749] lo speed is unknown, defaulting to 1000 [ 118.147206][ T7749] lo speed is unknown, defaulting to 1000 [ 118.279549][ T7749] lo speed is unknown, defaulting to 1000 [ 118.385564][ T7785] rdma_rxe: rxe_newlink: failed to add lo [ 118.555382][ T7799] blktrace: Concurrent blktraces are not allowed on sg0 [ 118.619853][ T7803] loop6: detected capacity change from 0 to 1764 [ 118.722054][ T35] kernel write not supported for file /uhid (pid: 35 comm: kworker/1:1) [ 118.776465][ T7814] loop3: detected capacity change from 0 to 512 [ 118.793444][ T7814] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.815000][ T7814] EXT4-fs (loop3): 1 truncate cleaned up [ 118.904386][ T7817] devtmpfs: Unknown parameter 'di¼CÆ5F\LÑž' [ 119.011102][ T7819] lo speed is unknown, defaulting to 1000 [ 119.025680][ T7819] lo speed is unknown, defaulting to 1000 [ 119.512929][ T7827] FAULT_INJECTION: forcing a failure. [ 119.512929][ T7827] name failslab, interval 1, probability 0, space 0, times 0 [ 119.525662][ T7827] CPU: 0 UID: 0 PID: 7827 Comm: syz.3.1425 Not tainted 6.13.0-rc3-syzkaller #0 [ 119.534664][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 119.544794][ T7827] Call Trace: [ 119.548088][ T7827] [ 119.551033][ T7827] dump_stack_lvl+0xf2/0x150 [ 119.555732][ T7827] dump_stack+0x15/0x1a [ 119.559915][ T7827] should_fail_ex+0x223/0x230 [ 119.564638][ T7827] ? tipc_group_create_member+0x43/0x260 [ 119.570347][ T7827] should_failslab+0x8f/0xb0 [ 119.574958][ T7827] __kmalloc_cache_noprof+0x4e/0x320 [ 119.580267][ T7827] tipc_group_create_member+0x43/0x260 [ 119.585781][ T7827] tipc_group_add_member+0x30/0x40 [ 119.590991][ T7827] tipc_nametbl_build_group+0x19d/0x220 [ 119.596606][ T7827] tipc_sk_join+0x239/0x2e0 [ 119.601163][ T7827] tipc_setsockopt+0x5dd/0x660 [ 119.606003][ T7827] ? __pfx_tipc_setsockopt+0x10/0x10 [ 119.611320][ T7827] __sys_setsockopt+0x187/0x200 [ 119.616207][ T7827] __x64_sys_setsockopt+0x66/0x80 [ 119.621283][ T7827] x64_sys_call+0x282e/0x2dc0 [ 119.625974][ T7827] do_syscall_64+0xc9/0x1c0 [ 119.630555][ T7827] ? clear_bhb_loop+0x55/0xb0 [ 119.635245][ T7827] ? clear_bhb_loop+0x55/0xb0 [ 119.639946][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.645924][ T7827] RIP: 0033:0x7f54c0db5d19 [ 119.650366][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.670000][ T7827] RSP: 002b:00007f54bf400038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.678429][ T7827] RAX: ffffffffffffffda RBX: 00007f54c0fa6080 RCX: 00007f54c0db5d19 [ 119.686414][ T7827] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 119.694472][ T7827] RBP: 00007f54bf400090 R08: 0000000000000010 R09: 0000000000000000 [ 119.702466][ T7827] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 119.710494][ T7827] R13: 0000000000000000 R14: 00007f54c0fa6080 R15: 00007ffd0a6edd88 [ 119.718573][ T7827] [ 120.146090][ T7843] blktrace: Concurrent blktraces are not allowed on sg0 [ 120.207556][ T7847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1435'. [ 120.238956][ T7849] loop6: detected capacity change from 0 to 1764 [ 120.522693][ T7864] lo speed is unknown, defaulting to 1000 [ 120.534525][ T7864] lo speed is unknown, defaulting to 1000 [ 120.580258][ T7872] loop1: detected capacity change from 0 to 164 [ 120.622122][ T7872] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 120.663068][ T7872] lo speed is unknown, defaulting to 1000 [ 120.677602][ T7872] lo speed is unknown, defaulting to 1000 [ 120.690432][ T7876] syz.1.1446: attempt to access beyond end of device [ 120.690432][ T7876] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 120.755011][ T7876] syz.1.1446: attempt to access beyond end of device [ 120.755011][ T7876] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 120.860487][ T7881] loop3: detected capacity change from 0 to 164 [ 120.871481][ T7881] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 120.909848][ T7881] lo speed is unknown, defaulting to 1000 [ 120.912410][ T7887] syz.7.1451[7887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.916111][ T7887] syz.7.1451[7887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.925707][ T7881] lo speed is unknown, defaulting to 1000 [ 120.928462][ T7887] syz.7.1451[7887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.976002][ T7890] syz.3.1449: attempt to access beyond end of device [ 120.976002][ T7890] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 121.025063][ T7890] syz.3.1449: attempt to access beyond end of device [ 121.025063][ T7890] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.098226][ T7899] pim6reg: entered allmulticast mode [ 121.105744][ T7899] pim6reg: left allmulticast mode [ 121.119739][ T7903] loop7: detected capacity change from 0 to 512 [ 121.137091][ T7903] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 121.151693][ T7903] EXT4-fs (loop7): 1 truncate cleaned up [ 121.155766][ T7908] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 121.166918][ T7911] xt_hashlimit: size too large, truncated to 1048576 [ 121.171910][ T7908] loop3: detected capacity change from 0 to 1024 [ 121.181468][ T7908] EXT4-fs: Ignoring removed nobh option [ 121.248269][ T7915] syz.1.1459 (7915): attempted to duplicate a private mapping with mremap. This is not supported. [ 121.585587][ T7926] pim6reg: entered allmulticast mode [ 121.591930][ T7925] pim6reg: left allmulticast mode [ 121.665691][ T7928] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 121.698907][ T7930] loop3: detected capacity change from 0 to 1764 [ 121.721130][ T7932] lo speed is unknown, defaulting to 1000 [ 121.727594][ T7932] lo speed is unknown, defaulting to 1000 [ 121.877085][ T7938] loop7: detected capacity change from 0 to 164 [ 121.887753][ T7938] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 121.908115][ T7938] lo speed is unknown, defaulting to 1000 [ 121.914382][ T7938] lo speed is unknown, defaulting to 1000 [ 121.951731][ T7939] syz.7.1468: attempt to access beyond end of device [ 121.951731][ T7939] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 121.966101][ T7939] syz.7.1468: attempt to access beyond end of device [ 121.966101][ T7939] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 122.022911][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 122.022925][ T29] audit: type=1400 audit(122.056:7394): avc: denied { write } for pid=7944 comm="syz.6.1471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 122.052608][ T7948] netlink: 'syz.4.1472': attribute type 4 has an invalid length. [ 122.056235][ T7945] FAULT_INJECTION: forcing a failure. [ 122.056235][ T7945] name failslab, interval 1, probability 0, space 0, times 0 [ 122.065009][ T7949] netlink: 'syz.4.1472': attribute type 4 has an invalid length. [ 122.073058][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.6.1471 Not tainted 6.13.0-rc3-syzkaller #0 [ 122.073087][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 122.073103][ T7945] Call Trace: [ 122.103089][ T7945] [ 122.106031][ T7945] dump_stack_lvl+0xf2/0x150 [ 122.110706][ T7945] dump_stack+0x15/0x1a [ 122.114892][ T7945] should_fail_ex+0x223/0x230 [ 122.119614][ T7945] should_failslab+0x8f/0xb0 [ 122.124263][ T7945] kmem_cache_alloc_noprof+0x52/0x320 [ 122.129672][ T7945] ? security_file_alloc+0x32/0x100 [ 122.134881][ T7945] security_file_alloc+0x32/0x100 [ 122.139947][ T7945] init_file+0x5b/0x1b0 [ 122.144163][ T7945] alloc_empty_file+0xea/0x200 [ 122.148936][ T7945] path_openat+0x6a/0x1fa0 [ 122.153388][ T7945] ? _parse_integer_limit+0x167/0x180 [ 122.158767][ T7945] ? _parse_integer+0x27/0x30 [ 122.163466][ T7945] ? kstrtoull+0x110/0x140 [ 122.167901][ T7945] ? kstrtouint+0x77/0xc0 [ 122.172269][ T7945] ? kstrtouint_from_user+0xb0/0xe0 [ 122.177481][ T7945] do_filp_open+0x107/0x230 [ 122.182009][ T7945] do_sys_openat2+0xab/0x120 [ 122.186605][ T7945] __x64_sys_openat+0xf3/0x120 [ 122.191379][ T7945] x64_sys_call+0x2b30/0x2dc0 [ 122.196061][ T7945] do_syscall_64+0xc9/0x1c0 [ 122.200574][ T7945] ? clear_bhb_loop+0x55/0xb0 [ 122.205254][ T7945] ? clear_bhb_loop+0x55/0xb0 [ 122.209947][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.215864][ T7945] RIP: 0033:0x7f767db94680 [ 122.220287][ T7945] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 122.239950][ T7945] RSP: 002b:00007f767c206b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 122.248374][ T7945] RAX: ffffffffffffffda RBX: 0000000000127081 RCX: 00007f767db94680 [ 122.256349][ T7945] RDX: 0000000000127081 RSI: 00007f767c206c10 RDI: 00000000ffffff9c [ 122.264321][ T7945] RBP: 00007f767c206c10 R08: 0000000000000000 R09: 002367732f766564 [ 122.272337][ T7945] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 122.280312][ T7945] R13: 0000000000000000 R14: 00007f767dd85fa0 R15: 00007ffc36dedce8 [ 122.288295][ T7945] [ 122.305960][ T29] audit: type=1400 audit(122.066:7395): avc: denied { create } for pid=7946 comm="syz.4.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.324970][ T29] audit: type=1400 audit(122.066:7396): avc: denied { write } for pid=7946 comm="syz.4.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.387224][ T1079] lo speed is unknown, defaulting to 1000 [ 122.458170][ T7958] loop7: detected capacity change from 0 to 512 [ 122.476513][ T7958] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.1475: casefold flag without casefold feature [ 122.492134][ T7965] sch_tbf: burst 6269 is lower than device lo mtu (65550) ! [ 122.499865][ T7958] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1475: couldn't read orphan inode 15 (err -117) [ 122.526313][ T29] audit: type=1400 audit(122.556:7397): avc: denied { create } for pid=7957 comm="syz.7.1475" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 122.546008][ T29] audit: type=1400 audit(122.556:7398): avc: denied { setattr } for pid=7957 comm="syz.7.1475" name="file0" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 122.646863][ T7982] loop3: detected capacity change from 0 to 512 [ 122.669468][ T7978] pimreg: entered allmulticast mode [ 122.678264][ T29] audit: type=1400 audit(122.716:7399): avc: denied { create } for pid=7977 comm="syz.1.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 122.682417][ T7988] loop7: detected capacity change from 0 to 164 [ 122.710549][ T7988] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 122.733723][ T7982] bridge0: entered promiscuous mode [ 122.739118][ T7982] macvlan2: entered promiscuous mode [ 122.746102][ T7982] bridge0: port 3(macvlan2) entered blocking state [ 122.752691][ T7982] bridge0: port 3(macvlan2) entered disabled state [ 122.759998][ T7982] macvlan2: entered allmulticast mode [ 122.765513][ T7992] No such timeout policy "syz0" [ 122.770393][ T7982] bridge0: entered allmulticast mode [ 122.771418][ T7993] syz.7.1486: attempt to access beyond end of device [ 122.771418][ T7993] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 122.791862][ T7993] syz.7.1486: attempt to access beyond end of device [ 122.791862][ T7993] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 122.807615][ T7982] macvlan2: left allmulticast mode [ 122.812791][ T7982] bridge0: left allmulticast mode [ 122.820770][ T7982] bridge0: left promiscuous mode [ 122.847334][ T7988] lo speed is unknown, defaulting to 1000 [ 122.853431][ T7988] lo speed is unknown, defaulting to 1000 [ 122.853636][ T8002] xt_hashlimit: size too large, truncated to 1048576 [ 123.160166][ T29] audit: type=1400 audit(123.186:7400): avc: denied { shutdown } for pid=8016 comm="syz.6.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.193129][ T8017] loop6: detected capacity change from 0 to 512 [ 123.201422][ T8017] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 123.212260][ T29] audit: type=1400 audit(123.216:7401): avc: denied { write } for pid=8016 comm="syz.6.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.243771][ T8017] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 123.259308][ T8017] EXT4-fs (loop6): 1 truncate cleaned up [ 123.292879][ T8025] dvmrp0: entered allmulticast mode [ 123.307548][ T29] audit: type=1326 audit(123.346:7402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 123.330475][ T29] audit: type=1326 audit(123.346:7403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 123.356448][ T8025] Cannot find set identified by id 632 to match [ 123.407700][ T8028] lo speed is unknown, defaulting to 1000 [ 123.416888][ T8028] lo speed is unknown, defaulting to 1000 [ 123.437307][ T8030] blktrace: Concurrent blktraces are not allowed on sg0 [ 123.446502][ T8031] blktrace: Concurrent blktraces are not allowed on sg0 [ 123.494729][ T8035] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.784983][ T8059] xt_hashlimit: size too large, truncated to 1048576 [ 123.797221][ T8064] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 123.872904][ T8070] xt_hashlimit: size too large, truncated to 1048576 [ 123.978562][ T8073] FAULT_INJECTION: forcing a failure. [ 123.978562][ T8073] name failslab, interval 1, probability 0, space 0, times 0 [ 123.991390][ T8073] CPU: 0 UID: 0 PID: 8073 Comm: syz.3.1519 Not tainted 6.13.0-rc3-syzkaller #0 [ 124.000515][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 124.010710][ T8073] Call Trace: [ 124.014035][ T8073] [ 124.016990][ T8073] dump_stack_lvl+0xf2/0x150 [ 124.021713][ T8073] dump_stack+0x15/0x1a [ 124.025978][ T8073] should_fail_ex+0x223/0x230 [ 124.030749][ T8073] ? cap_convert_nscap+0x292/0x340 [ 124.035923][ T8073] should_failslab+0x8f/0xb0 [ 124.040634][ T8073] __kmalloc_cache_noprof+0x4e/0x320 [ 124.045962][ T8073] ? from_kuid+0xf0/0x340 [ 124.050389][ T8073] cap_convert_nscap+0x292/0x340 [ 124.055352][ T8073] vfs_setxattr+0xde/0x290 [ 124.059831][ T8073] file_setxattr+0x139/0x1b0 [ 124.064476][ T8073] path_setxattrat+0x2c2/0x310 [ 124.069448][ T8073] __x64_sys_fsetxattr+0x6d/0x80 [ 124.074427][ T8073] x64_sys_call+0x29d2/0x2dc0 [ 124.079126][ T8073] do_syscall_64+0xc9/0x1c0 [ 124.083651][ T8073] ? clear_bhb_loop+0x55/0xb0 [ 124.088379][ T8073] ? clear_bhb_loop+0x55/0xb0 [ 124.093095][ T8073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.099027][ T8073] RIP: 0033:0x7f54c0db5d19 [ 124.103455][ T8073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.123094][ T8073] RSP: 002b:00007f54bf400038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 124.131613][ T8073] RAX: ffffffffffffffda RBX: 00007f54c0fa6080 RCX: 00007f54c0db5d19 [ 124.139604][ T8073] RDX: 0000000020000280 RSI: 0000000020000240 RDI: 0000000000000009 [ 124.147586][ T8073] RBP: 00007f54bf400090 R08: 0000000000000000 R09: 0000000000000000 [ 124.155620][ T8073] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 124.163602][ T8073] R13: 0000000000000000 R14: 00007f54c0fa6080 R15: 00007ffd0a6edd88 [ 124.171657][ T8073] [ 124.317227][ T8080] xt_hashlimit: size too large, truncated to 1048576 [ 124.478874][ T8083] rdma_rxe: rxe_newlink: failed to add lo [ 124.745606][ T8092] lo speed is unknown, defaulting to 1000 [ 124.780940][ T8092] lo speed is unknown, defaulting to 1000 [ 125.118076][ T8110] loop6: detected capacity change from 0 to 512 [ 125.135342][ T8110] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 125.212496][ T8110] EXT4-fs (loop6): 1 truncate cleaned up [ 125.250213][ T8121] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 125.291011][ T8125] loop1: detected capacity change from 0 to 128 [ 125.498615][ T8144] xt_hashlimit: size too large, truncated to 1048576 [ 125.593765][ T8148] xt_hashlimit: size too large, truncated to 1048576 [ 125.607521][ T8146] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 125.893345][ T8154] loop3: detected capacity change from 0 to 512 [ 125.921189][ T8154] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.056675][ T8154] EXT4-fs (loop3): 1 truncate cleaned up [ 126.189104][ T8168] loop1: detected capacity change from 0 to 128 [ 126.221301][ T8169] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.230089][ T8169] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.238876][ T8169] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.247623][ T8169] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.258377][ T8169] vxlan0: entered promiscuous mode [ 126.263515][ T8169] vxlan0: entered allmulticast mode [ 126.272003][ T8169] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.281002][ T8169] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.289922][ T8169] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.298824][ T8169] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.341649][ T8172] loop7: detected capacity change from 0 to 164 [ 126.374819][ T8172] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 126.418454][ T8172] lo speed is unknown, defaulting to 1000 [ 126.424549][ T8172] lo speed is unknown, defaulting to 1000 [ 126.449669][ T8162] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1551'. [ 126.460677][ T8174] syz.7.1553: attempt to access beyond end of device [ 126.460677][ T8174] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 126.490290][ T8174] syz.7.1553: attempt to access beyond end of device [ 126.490290][ T8174] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 126.583482][ T8179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1555'. [ 126.602912][ T8181] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 126.618955][ T8183] loop7: detected capacity change from 0 to 512 [ 126.625648][ T8183] ext2: Unknown parameter 'obj_role' [ 126.646318][ T8183] capability: warning: `syz.7.1556' uses 32-bit capabilities (legacy support in use) [ 126.718551][ T8189] dvmrp0: entered allmulticast mode [ 126.729970][ T8185] lo speed is unknown, defaulting to 1000 [ 126.734216][ T8192] blktrace: Concurrent blktraces are not allowed on sg0 [ 126.736322][ T8185] lo speed is unknown, defaulting to 1000 [ 126.751625][ T8193] blktrace: Concurrent blktraces are not allowed on sg0 [ 126.774463][ T8189] Cannot find set identified by id 632 to match [ 126.778113][ T8187] lo speed is unknown, defaulting to 1000 [ 126.809943][ T8187] lo speed is unknown, defaulting to 1000 [ 126.896232][ T8206] loop4: detected capacity change from 0 to 164 [ 126.910797][ T8206] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 126.912138][ T8209] loop7: detected capacity change from 0 to 164 [ 126.928885][ T8209] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 126.955971][ T8209] lo speed is unknown, defaulting to 1000 [ 126.962117][ T8206] lo speed is unknown, defaulting to 1000 [ 126.968349][ T8206] lo speed is unknown, defaulting to 1000 [ 126.978702][ T8212] syz.4.1566: attempt to access beyond end of device [ 126.978702][ T8212] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 126.999650][ T8215] syz.7.1567: attempt to access beyond end of device [ 126.999650][ T8215] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 127.013915][ T8215] syz.7.1567: attempt to access beyond end of device [ 127.013915][ T8215] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 127.040130][ T8212] syz.4.1566: attempt to access beyond end of device [ 127.040130][ T8212] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 127.065424][ T8209] lo speed is unknown, defaulting to 1000 [ 127.084661][ T8217] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1569'. [ 127.240946][ T8225] loop1: detected capacity change from 0 to 512 [ 127.242427][ T8221] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 127.255552][ T8225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.283674][ T8225] EXT4-fs (loop1): 1 truncate cleaned up [ 127.333480][ T8229] rdma_rxe: rxe_newlink: failed to add lo [ 127.420814][ T8240] dvmrp0: entered allmulticast mode [ 127.460155][ T8244] xt_hashlimit: size too large, truncated to 1048576 [ 127.593905][ T8252] blktrace: Concurrent blktraces are not allowed on sg0 [ 127.620277][ T8248] lo speed is unknown, defaulting to 1000 [ 127.652923][ T8248] lo speed is unknown, defaulting to 1000 [ 127.734991][ T8254] lo speed is unknown, defaulting to 1000 [ 127.755593][ T8255] blktrace: Concurrent blktraces are not allowed on sg0 [ 127.814591][ T8254] lo speed is unknown, defaulting to 1000 [ 128.086771][ T8264] loop6: detected capacity change from 0 to 128 [ 128.118989][ T8266] loop4: detected capacity change from 0 to 512 [ 128.128723][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 128.128740][ T29] audit: type=1326 audit(128.166:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 128.167500][ T8266] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.237757][ T8266] EXT4-fs (loop4): 1 truncate cleaned up [ 128.245948][ T29] audit: type=1326 audit(128.196:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 128.268981][ T29] audit: type=1326 audit(128.196:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 128.291972][ T29] audit: type=1326 audit(128.196:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 128.314846][ T29] audit: type=1326 audit(128.196:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 128.337640][ T29] audit: type=1326 audit(128.196:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 128.360784][ T29] audit: type=1326 audit(128.226:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 128.383581][ T29] audit: type=1326 audit(128.226:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 128.406453][ T29] audit: type=1326 audit(128.226:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 128.429423][ T29] audit: type=1326 audit(128.226:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767db95d19 code=0x7ffc0000 [ 128.599569][ T8278] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 128.671808][ T8284] loop7: detected capacity change from 0 to 1024 [ 128.715108][ T8284] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 128.716382][ T8292] xt_hashlimit: size too large, truncated to 1048576 [ 128.746922][ T8284] JBD2: no valid journal superblock found [ 128.752767][ T8284] EXT4-fs (loop7): Could not load journal inode [ 128.767945][ T8293] lo speed is unknown, defaulting to 1000 [ 128.790370][ T8295] blktrace: Concurrent blktraces are not allowed on sg0 [ 128.806907][ T8293] lo speed is unknown, defaulting to 1000 [ 128.901985][ T8299] loop7: detected capacity change from 0 to 128 [ 128.938314][ T8297] lo speed is unknown, defaulting to 1000 [ 128.959740][ T8299] EXT4-fs mount: 31 callbacks suppressed [ 128.959757][ T8299] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.991268][ T8297] lo speed is unknown, defaulting to 1000 [ 129.098685][ T7301] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.174438][ T8305] syz.7.1600[8305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.174546][ T8305] syz.7.1600[8305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.214598][ T8305] syz.7.1600[8305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.290624][ T8313] loop1: detected capacity change from 0 to 512 [ 129.332875][ T8313] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.346392][ T8313] EXT4-fs (loop1): 1 truncate cleaned up [ 129.347763][ T8315] lo speed is unknown, defaulting to 1000 [ 129.352441][ T8313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.391617][ T8315] lo speed is unknown, defaulting to 1000 [ 129.440469][ T8318] blktrace: Concurrent blktraces are not allowed on sg0 [ 129.460888][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.483166][ T8323] xt_hashlimit: size too large, truncated to 1048576 [ 129.956673][ T8332] loop1: detected capacity change from 0 to 512 [ 129.958976][ T8334] loop3: detected capacity change from 0 to 128 [ 129.963338][ T8332] ext2: Unknown parameter 'obj_role' [ 129.977342][ T8334] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.037092][ T8337] lo speed is unknown, defaulting to 1000 [ 130.044524][ T8337] lo speed is unknown, defaulting to 1000 [ 130.082777][ T8340] blktrace: Concurrent blktraces are not allowed on sg0 [ 130.119430][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.279614][ T8353] loop3: detected capacity change from 0 to 1764 [ 130.291154][ T8354] netlink: 'syz.4.1615': attribute type 10 has an invalid length. [ 130.306671][ T8354] veth0_macvtap: left promiscuous mode [ 130.333266][ T8354] veth0_macvtap: entered promiscuous mode [ 130.357547][ T8354] team0: Device macvtap0 failed to register rx_handler [ 130.366634][ T8354] veth0_macvtap: left promiscuous mode [ 130.463014][ T8366] loop6: detected capacity change from 0 to 164 [ 130.477247][ T8354] loop4: detected capacity change from 0 to 1024 [ 130.483819][ T8354] ext3: Unknown parameter 'euid<00000000000000000000' [ 130.509505][ T8366] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 130.535028][ T8366] lo speed is unknown, defaulting to 1000 [ 130.541439][ T8366] lo speed is unknown, defaulting to 1000 [ 130.573635][ T8368] syz.6.1621: attempt to access beyond end of device [ 130.573635][ T8368] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 130.588159][ T8369] sz1: rxe_newlink: already configured on lo [ 130.611827][ T8368] syz.6.1621: attempt to access beyond end of device [ 130.611827][ T8368] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 131.116888][ T8392] xt_hashlimit: size too large, truncated to 1048576 [ 131.398200][ T8399] lo speed is unknown, defaulting to 1000 [ 131.406338][ T8399] lo speed is unknown, defaulting to 1000 [ 131.461133][ T8406] loop6: detected capacity change from 0 to 512 [ 131.488944][ T8406] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 131.540718][ T8406] EXT4-fs (loop6): 1 truncate cleaned up [ 131.554717][ T8406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.739212][ T8411] xt_hashlimit: size too large, truncated to 1048576 [ 131.777062][ T8414] loop7: detected capacity change from 0 to 164 [ 131.834085][ T8414] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 131.864293][ T8414] lo speed is unknown, defaulting to 1000 [ 131.872291][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.881828][ T8414] lo speed is unknown, defaulting to 1000 [ 131.911709][ T8418] syz.7.1634: attempt to access beyond end of device [ 131.911709][ T8418] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 131.945302][ T8418] syz.7.1634: attempt to access beyond end of device [ 131.945302][ T8418] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.098016][ T8424] loop3: detected capacity change from 0 to 512 [ 132.113274][ T8424] ext2: Unknown parameter 'obj_role' [ 132.168652][ T8429] loop3: detected capacity change from 0 to 128 [ 132.186433][ T8429] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.289067][ T8437] syzkaller1: entered promiscuous mode [ 132.294820][ T8437] syzkaller1: entered allmulticast mode [ 132.338042][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.407444][ T8439] blktrace: Concurrent blktraces are not allowed on sg0 [ 132.556961][ T8450] loop4: detected capacity change from 0 to 128 [ 132.566384][ T8450] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.575750][ T8452] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 132.584932][ T8452] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.592529][ T8452] vhci_hcd vhci_hcd.0: Device attached [ 132.618574][ T8456] vhci_hcd: connection closed [ 132.618827][ T11] vhci_hcd: stop threads [ 132.627863][ T11] vhci_hcd: release socket [ 132.632292][ T11] vhci_hcd: disconnect device [ 132.666728][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.720644][ T8462] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 132.793018][ T8468] loop4: detected capacity change from 0 to 164 [ 132.816839][ T8468] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 132.842384][ T8468] lo speed is unknown, defaulting to 1000 [ 132.852907][ T8468] lo speed is unknown, defaulting to 1000 [ 132.883579][ T8471] syz.4.1654: attempt to access beyond end of device [ 132.883579][ T8471] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 132.927764][ T8471] syz.4.1654: attempt to access beyond end of device [ 132.927764][ T8471] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 133.014755][ T8476] xt_hashlimit: size too large, truncated to 1048576 [ 133.165881][ T8478] loop4: detected capacity change from 0 to 1024 [ 133.288241][ T8493] dvmrp0: entered allmulticast mode [ 133.308014][ T8484] lo speed is unknown, defaulting to 1000 [ 133.325899][ T8484] lo speed is unknown, defaulting to 1000 [ 133.435132][ T8505] loop3: detected capacity change from 0 to 512 [ 133.455642][ T8505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.486929][ T8505] EXT4-fs (loop3): 1 truncate cleaned up [ 133.493104][ T8505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.573598][ T8518] loop4: detected capacity change from 0 to 512 [ 133.580376][ T8518] ext2: Unknown parameter 'obj_role' [ 133.625672][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.665600][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 133.665619][ T29] audit: type=1326 audit(133.696:8131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.7.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 133.694952][ T29] audit: type=1326 audit(133.696:8132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.7.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 133.717946][ T29] audit: type=1326 audit(133.696:8133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.7.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 133.741226][ T29] audit: type=1326 audit(133.696:8134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.7.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 133.764205][ T29] audit: type=1326 audit(133.696:8135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.7.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 133.787028][ T29] audit: type=1326 audit(133.696:8136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.7.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 133.809965][ T29] audit: type=1326 audit(133.696:8137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.7.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 133.832964][ T29] audit: type=1326 audit(133.696:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.7.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 133.855852][ T29] audit: type=1326 audit(133.696:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.7.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 133.861068][ T8529] rdma_rxe: rxe_newlink: failed to add lo [ 133.878742][ T29] audit: type=1326 audit(133.696:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.7.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d6d05d19 code=0x7ffc0000 [ 133.961787][ T8535] loop4: detected capacity change from 0 to 512 [ 133.987285][ T8530] syzkaller0: entered allmulticast mode [ 133.998937][ T8535] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.003483][ T8528] syzkaller0: left allmulticast mode [ 134.088070][ T8535] EXT4-fs (loop4): 1 truncate cleaned up [ 134.105046][ T8535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.213165][ T8547] netlink: 'syz.3.1677': attribute type 39 has an invalid length. [ 134.296262][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.342621][ T8553] loop4: detected capacity change from 0 to 128 [ 134.368123][ T8553] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.454227][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.509847][ T8560] xt_hashlimit: size too large, truncated to 1048576 [ 134.543984][ T8558] lo speed is unknown, defaulting to 1000 [ 134.616083][ T8558] lo speed is unknown, defaulting to 1000 [ 135.066479][ T8585] loop1: detected capacity change from 0 to 128 [ 135.083044][ T8585] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.223736][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.323615][ T8599] lo speed is unknown, defaulting to 1000 [ 135.334015][ T8599] lo speed is unknown, defaulting to 1000 [ 135.393400][ T8597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1695'. [ 135.438809][ T8607] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 135.445382][ T8607] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.452933][ T8607] vhci_hcd vhci_hcd.0: Device attached [ 135.482952][ T8609] vhci_hcd: connection closed [ 135.483108][ T11] vhci_hcd: stop threads [ 135.492208][ T11] vhci_hcd: release socket [ 135.496656][ T11] vhci_hcd: disconnect device [ 136.039183][ T8619] xt_hashlimit: size too large, truncated to 1048576 [ 136.246282][ T8624] xt_hashlimit: size too large, truncated to 1048576 [ 136.454244][ T8627] loop3: detected capacity change from 0 to 512 [ 136.474555][ T8627] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.497245][ T8627] EXT4-fs (loop3): 1 truncate cleaned up [ 136.530656][ T8627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.649567][ T8636] lo speed is unknown, defaulting to 1000 [ 136.660375][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.670757][ T8636] lo speed is unknown, defaulting to 1000 [ 136.712336][ T8638] syzkaller1: entered promiscuous mode [ 136.717962][ T8638] syzkaller1: entered allmulticast mode [ 136.736458][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1710'. [ 136.810651][ T8648] loop7: detected capacity change from 0 to 512 [ 136.813821][ T8646] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 136.826312][ T8648] ext2: Unknown parameter 'obj_role' [ 136.880104][ T8654] loop6: detected capacity change from 0 to 128 [ 136.901957][ T8654] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.957268][ T8664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1718'. [ 136.977957][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1721'. [ 136.987800][ T4810] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.018844][ T8668] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 137.034941][ T8670] xt_hashlimit: size too large, truncated to 1048576 [ 137.054202][ T8672] loop7: detected capacity change from 0 to 512 [ 137.077164][ T8672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.451846][ T8677] loop6: detected capacity change from 0 to 512 [ 137.459011][ T8677] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 137.470877][ T8677] EXT4-fs (loop6): 1 truncate cleaned up [ 137.477400][ T8677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.557096][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.576937][ T8680] loop6: detected capacity change from 0 to 512 [ 137.583763][ T8680] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 137.606184][ T8680] EXT4-fs (loop6): 1 truncate cleaned up [ 137.612353][ T8680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.614772][ T8683] loop3: detected capacity change from 0 to 164 [ 137.635061][ T8683] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 137.654785][ T8683] lo speed is unknown, defaulting to 1000 [ 137.660918][ T8683] lo speed is unknown, defaulting to 1000 [ 137.695177][ T8684] syz.3.1727: attempt to access beyond end of device [ 137.695177][ T8684] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 137.716218][ T8684] syz.3.1727: attempt to access beyond end of device [ 137.716218][ T8684] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 137.733686][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.780156][ T8690] loop4: detected capacity change from 0 to 512 [ 137.790276][ T8690] ext2: Unknown parameter 'obj_role' [ 137.842930][ T8699] loop4: detected capacity change from 0 to 164 [ 137.852500][ T8699] syz.4.1734: attempt to access beyond end of device [ 137.852500][ T8699] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 137.868584][ T8699] syz.4.1734: attempt to access beyond end of device [ 137.868584][ T8699] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 137.911618][ T8705] loop4: detected capacity change from 0 to 164 [ 137.919278][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.939901][ T8707] loop7: detected capacity change from 0 to 164 [ 137.950765][ T8705] lo speed is unknown, defaulting to 1000 [ 137.961113][ T8707] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 137.972885][ T8705] lo speed is unknown, defaulting to 1000 [ 137.979427][ T8703] lo speed is unknown, defaulting to 1000 [ 137.994525][ T8707] lo speed is unknown, defaulting to 1000 [ 137.995402][ T8711] syz.4.1737: attempt to access beyond end of device [ 137.995402][ T8711] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 138.015659][ T8711] syz.4.1737: attempt to access beyond end of device [ 138.015659][ T8711] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.028147][ T8714] syz.7.1738: attempt to access beyond end of device [ 138.028147][ T8714] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 138.035633][ T8703] lo speed is unknown, defaulting to 1000 [ 138.043118][ T8714] syz.7.1738: attempt to access beyond end of device [ 138.043118][ T8714] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.138389][ T8707] lo speed is unknown, defaulting to 1000 [ 138.208395][ T8718] loop6: detected capacity change from 0 to 164 [ 138.238712][ T8718] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 138.287179][ T8723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1742'. [ 138.303845][ T8718] lo speed is unknown, defaulting to 1000 [ 138.323378][ T8718] lo speed is unknown, defaulting to 1000 [ 138.356725][ T8726] syz.6.1741: attempt to access beyond end of device [ 138.356725][ T8726] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 138.374059][ T8729] loop1: detected capacity change from 0 to 512 [ 138.380665][ T8729] ext2: Unknown parameter 'obj_role' [ 138.422063][ T8726] syz.6.1741: attempt to access beyond end of device [ 138.422063][ T8726] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.491831][ T8742] xt_hashlimit: size too large, truncated to 1048576 [ 138.714364][ T8754] loop6: detected capacity change from 0 to 512 [ 138.757130][ T8756] lo speed is unknown, defaulting to 1000 [ 138.763287][ T8756] lo speed is unknown, defaulting to 1000 [ 138.807418][ T8754] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 138.848405][ T8754] EXT4-fs (loop6): 1 truncate cleaned up [ 138.868891][ T8754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.927079][ T8760] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 139.044881][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.076514][ T8771] loop7: detected capacity change from 0 to 512 [ 139.083458][ T8771] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 139.096027][ T8771] EXT4-fs (loop7): 1 truncate cleaned up [ 139.102168][ T8771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.180207][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.193367][ T8776] loop4: detected capacity change from 0 to 128 [ 139.203014][ T8776] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.216719][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 139.216735][ T29] audit: type=1326 audit(139.256:8319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 139.242312][ T8780] devtmpfs: Unknown parameter 'di¼CÆ5F\LÑž' [ 139.246085][ T29] audit: type=1326 audit(139.256:8320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 139.274394][ T29] audit: type=1326 audit(139.256:8321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 139.297225][ T29] audit: type=1326 audit(139.256:8322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 139.319944][ T29] audit: type=1326 audit(139.256:8323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 139.342776][ T29] audit: type=1326 audit(139.256:8324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 139.365567][ T29] audit: type=1326 audit(139.256:8325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 139.388372][ T29] audit: type=1326 audit(139.256:8326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 139.411147][ T29] audit: type=1326 audit(139.256:8327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 139.433913][ T29] audit: type=1326 audit(139.256:8328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 139.518987][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.532851][ T8789] loop1: detected capacity change from 0 to 512 [ 139.552582][ T8789] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.564653][ T8791] xt_hashlimit: size too large, truncated to 1048576 [ 139.565517][ T8789] EXT4-fs (loop1): 1 truncate cleaned up [ 139.580946][ T8789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.765573][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.784609][ T8808] blktrace: Concurrent blktraces are not allowed on sg0 [ 139.853659][ T8814] loop1: detected capacity change from 0 to 164 [ 139.881458][ T8814] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 139.920882][ T8814] lo speed is unknown, defaulting to 1000 [ 139.927286][ T8814] lo speed is unknown, defaulting to 1000 [ 139.947393][ T8823] syz.1.1779: attempt to access beyond end of device [ 139.947393][ T8823] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 139.979295][ T8823] syz.1.1779: attempt to access beyond end of device [ 139.979295][ T8823] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 140.016374][ T8828] lo speed is unknown, defaulting to 1000 [ 140.037325][ T8828] lo speed is unknown, defaulting to 1000 [ 140.095391][ T8833] lo speed is unknown, defaulting to 1000 [ 140.123798][ T8833] lo speed is unknown, defaulting to 1000 [ 140.272088][ T8844] loop3: detected capacity change from 0 to 512 [ 140.279043][ T8844] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.293043][ T8844] EXT4-fs (loop3): 1 truncate cleaned up [ 140.299176][ T8844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.334925][ T8849] loop1: detected capacity change from 0 to 164 [ 140.352417][ T8849] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 140.364901][ T8851] raw_sendmsg: syz.6.1794 forgot to set AF_INET. Fix it! [ 140.376819][ T8849] lo speed is unknown, defaulting to 1000 [ 140.383064][ T8849] lo speed is unknown, defaulting to 1000 [ 140.390095][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.413775][ T8852] syz.1.1793: attempt to access beyond end of device [ 140.413775][ T8852] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 140.433158][ T8851] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1794'. [ 140.439256][ T8852] syz.1.1793: attempt to access beyond end of device [ 140.439256][ T8852] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 140.457897][ T8851] FAULT_INJECTION: forcing a failure. [ 140.457897][ T8851] name failslab, interval 1, probability 0, space 0, times 0 [ 140.470671][ T8851] CPU: 0 UID: 0 PID: 8851 Comm: syz.6.1794 Not tainted 6.13.0-rc3-syzkaller #0 [ 140.479808][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 140.489971][ T8851] Call Trace: [ 140.493271][ T8851] [ 140.496294][ T8851] dump_stack_lvl+0xf2/0x150 [ 140.500948][ T8851] dump_stack+0x15/0x1a [ 140.505142][ T8851] should_fail_ex+0x223/0x230 [ 140.509876][ T8851] should_failslab+0x8f/0xb0 [ 140.514541][ T8851] __kmalloc_noprof+0xab/0x3f0 [ 140.519375][ T8851] ? pneigh_lookup+0x196/0x3d0 [ 140.524163][ T8851] pneigh_lookup+0x196/0x3d0 [ 140.528783][ T8851] neigh_add+0x4b4/0x8e0 [ 140.533051][ T8851] ? __pfx_neigh_add+0x10/0x10 [ 140.537885][ T8851] rtnetlink_rcv_msg+0x6aa/0x710 [ 140.542898][ T8851] ? ref_tracker_free+0x3a5/0x410 [ 140.547952][ T8851] ? __dev_queue_xmit+0x186/0x2090 [ 140.553075][ T8851] netlink_rcv_skb+0x12c/0x230 [ 140.557849][ T8851] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.563329][ T8851] rtnetlink_rcv+0x1c/0x30 [ 140.567752][ T8851] netlink_unicast+0x599/0x670 [ 140.572524][ T8851] netlink_sendmsg+0x5cc/0x6e0 [ 140.577322][ T8851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.582691][ T8851] __sock_sendmsg+0x140/0x180 [ 140.587496][ T8851] ____sys_sendmsg+0x312/0x410 [ 140.592282][ T8851] __sys_sendmsg+0x19d/0x230 [ 140.596901][ T8851] __x64_sys_sendmsg+0x46/0x50 [ 140.601818][ T8851] x64_sys_call+0x2734/0x2dc0 [ 140.606503][ T8851] do_syscall_64+0xc9/0x1c0 [ 140.611084][ T8851] ? clear_bhb_loop+0x55/0xb0 [ 140.615773][ T8851] ? clear_bhb_loop+0x55/0xb0 [ 140.620634][ T8851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.626594][ T8851] RIP: 0033:0x7f767db95d19 [ 140.631067][ T8851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.650719][ T8851] RSP: 002b:00007f767c207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.659140][ T8851] RAX: ffffffffffffffda RBX: 00007f767dd85fa0 RCX: 00007f767db95d19 [ 140.667116][ T8851] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000006 [ 140.675153][ T8851] RBP: 00007f767c207090 R08: 0000000000000000 R09: 0000000000000000 [ 140.683373][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.691353][ T8851] R13: 0000000000000000 R14: 00007f767dd85fa0 R15: 00007ffc36dedce8 [ 140.699511][ T8851] [ 140.734922][ T8859] xt_hashlimit: size too large, truncated to 1048576 [ 140.864334][ T8868] loop7: detected capacity change from 0 to 256 [ 140.891302][ T8866] lo speed is unknown, defaulting to 1000 [ 140.918223][ T8874] blktrace: Concurrent blktraces are not allowed on sg0 [ 140.935669][ T8866] lo speed is unknown, defaulting to 1000 [ 141.036342][ T8882] loop1: detected capacity change from 0 to 512 [ 141.063453][ T8882] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.092840][ T8864] loop7: detected capacity change from 0 to 1024 [ 141.126788][ T8882] EXT4-fs (loop1): 1 truncate cleaned up [ 141.151837][ T8864] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 141.161827][ T8864] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 141.177302][ T8882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.189849][ T8864] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.208106][ T8890] syz.6.1806[8890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.208205][ T8890] syz.6.1806[8890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.223684][ T8890] syz.6.1806[8890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.251796][ T8864] EXT4-fs error (device loop7): ext4_get_journal_inode:5809: inode #5: comm syz.7.1800: unexpected bad inode w/o EXT4_IGET_BAD [ 141.342848][ T8864] EXT4-fs (loop7): no journal found [ 141.408459][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.435930][ T8897] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1810'. [ 141.459330][ T8902] loop1: detected capacity change from 0 to 1024 [ 141.474744][ T8902] EXT4-fs: Ignoring removed bh option [ 141.480308][ T8902] EXT4-fs: Ignoring removed orlov option [ 141.488277][ T8904] loop7: detected capacity change from 0 to 512 [ 141.494746][ T8904] ext2: Unknown parameter 'obj_role' [ 141.522302][ T8902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 141.550493][ T8902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.579196][ T8902] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.597165][ T8921] loop7: detected capacity change from 0 to 512 [ 141.604814][ T8921] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 141.619166][ T8921] EXT4-fs (loop7): 1 truncate cleaned up [ 141.625160][ T8921] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.639427][ T8902] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 141.647695][ T8902] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 141.679676][ T8919] lo speed is unknown, defaulting to 1000 [ 141.686184][ T8919] lo speed is unknown, defaulting to 1000 [ 141.729349][ T8929] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 141.754436][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.776586][ T8933] FAULT_INJECTION: forcing a failure. [ 141.776586][ T8933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.785443][ T8936] xt_hashlimit: size too large, truncated to 1048576 [ 141.789780][ T8933] CPU: 0 UID: 0 PID: 8933 Comm: syz.1.1822 Not tainted 6.13.0-rc3-syzkaller #0 [ 141.805327][ T8933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 141.815444][ T8933] Call Trace: [ 141.818738][ T8933] [ 141.821698][ T8933] dump_stack_lvl+0xf2/0x150 [ 141.826398][ T8933] dump_stack+0x15/0x1a [ 141.830582][ T8933] should_fail_ex+0x223/0x230 [ 141.835291][ T8933] should_fail+0xb/0x10 [ 141.839496][ T8933] should_fail_usercopy+0x1a/0x20 [ 141.844631][ T8933] _copy_from_iter+0xd5/0xd00 [ 141.849471][ T8933] ? kmalloc_reserve+0x16e/0x190 [ 141.854428][ T8933] ? __build_skb_around+0x196/0x1f0 [ 141.859644][ T8933] ? __alloc_skb+0x21f/0x310 [ 141.864308][ T8933] ? __virt_addr_valid+0x1ed/0x250 [ 141.869455][ T8933] ? __check_object_size+0x364/0x520 [ 141.874757][ T8933] netlink_sendmsg+0x460/0x6e0 [ 141.879547][ T8933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.884881][ T8933] __sock_sendmsg+0x140/0x180 [ 141.889595][ T8933] ____sys_sendmsg+0x312/0x410 [ 141.894436][ T8933] __sys_sendmsg+0x19d/0x230 [ 141.899103][ T8933] __x64_sys_sendmsg+0x46/0x50 [ 141.903898][ T8933] x64_sys_call+0x2734/0x2dc0 [ 141.908604][ T8933] do_syscall_64+0xc9/0x1c0 [ 141.913121][ T8933] ? clear_bhb_loop+0x55/0xb0 [ 141.917824][ T8933] ? clear_bhb_loop+0x55/0xb0 [ 141.922561][ T8933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.928492][ T8933] RIP: 0033:0x7f5f0d465d19 [ 141.932944][ T8933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.952627][ T8933] RSP: 002b:00007f5f0bad1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.961049][ T8933] RAX: ffffffffffffffda RBX: 00007f5f0d655fa0 RCX: 00007f5f0d465d19 [ 141.969104][ T8933] RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000000000006 [ 141.977085][ T8933] RBP: 00007f5f0bad1090 R08: 0000000000000000 R09: 0000000000000000 [ 141.985073][ T8933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.993046][ T8933] R13: 0000000000000000 R14: 00007f5f0d655fa0 R15: 00007ffe2565beb8 [ 142.001090][ T8933] [ 142.092725][ T8947] netlink: 'syz.4.1828': attribute type 21 has an invalid length. [ 142.100642][ T8947] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1828'. [ 142.124654][ T1079] hid (null): unknown global tag 0xd [ 142.130088][ T1079] hid (null): unknown global tag 0xd [ 142.135482][ T1079] hid (null): bogus close delimiter [ 142.143024][ T1079] hid-generic 0004:0740:80000000.0002: unknown main item tag 0xe [ 142.150909][ T1079] hid-generic 0004:0740:80000000.0002: unknown main item tag 0xe [ 142.158733][ T1079] hid-generic 0004:0740:80000000.0002: unknown global tag 0xd [ 142.166384][ T1079] hid-generic 0004:0740:80000000.0002: item 0 4 1 13 parsing failed [ 142.194856][ T1079] hid-generic 0004:0740:80000000.0002: probe with driver hid-generic failed with error -22 [ 142.215404][ T8947] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1828'. [ 142.421296][ T8969] loop3: detected capacity change from 0 to 512 [ 142.446907][ T8969] ext2: Unknown parameter 'obj_role' [ 142.453047][ T8971] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 142.523096][ T8979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8979 comm=syz.7.1840 [ 142.550197][ T8987] loop3: detected capacity change from 0 to 164 [ 142.561938][ T8979] loop7: detected capacity change from 0 to 1024 [ 142.570435][ T8979] EXT4-fs (loop7): Can't support bigalloc feature without extents feature [ 142.570435][ T8979] [ 142.571256][ T8987] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 142.581236][ T8979] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 142.614301][ T8987] lo speed is unknown, defaulting to 1000 [ 142.623756][ T8987] lo speed is unknown, defaulting to 1000 [ 142.721573][ T9001] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 142.728173][ T9001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.736004][ T9001] vhci_hcd vhci_hcd.0: Device attached [ 142.742856][ T9003] vhci_hcd: connection closed [ 142.743116][ T11] vhci_hcd: stop threads [ 142.752371][ T11] vhci_hcd: release socket [ 142.752574][ T9006] loop3: detected capacity change from 0 to 512 [ 142.756947][ T11] vhci_hcd: disconnect device [ 142.764000][ T9006] ext2: Unknown parameter 'obj_role' [ 142.799984][ T9009] xt_hashlimit: size too large, truncated to 1048576 [ 143.062867][ T9012] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 143.106511][ T9016] xt_hashlimit: size too large, truncated to 1048576 [ 143.384860][ T9034] loop1: detected capacity change from 0 to 164 [ 143.399092][ T9034] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 143.444123][ T9034] lo speed is unknown, defaulting to 1000 [ 143.450546][ T9034] lo speed is unknown, defaulting to 1000 [ 143.460933][ T9040] xt_hashlimit: size too large, truncated to 1048576 [ 143.468027][ T9038] FAULT_INJECTION: forcing a failure. [ 143.468027][ T9038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.469547][ T9043] bio_check_eod: 2 callbacks suppressed [ 143.469563][ T9043] syz.1.1859: attempt to access beyond end of device [ 143.469563][ T9043] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 143.481300][ T9038] CPU: 1 UID: 0 PID: 9038 Comm: syz.6.1860 Not tainted 6.13.0-rc3-syzkaller #0 [ 143.509589][ T9038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 143.519662][ T9038] Call Trace: [ 143.523000][ T9038] [ 143.525941][ T9038] dump_stack_lvl+0xf2/0x150 [ 143.530570][ T9038] dump_stack+0x15/0x1a [ 143.534754][ T9038] should_fail_ex+0x223/0x230 [ 143.539463][ T9038] should_fail+0xb/0x10 [ 143.543663][ T9038] should_fail_usercopy+0x1a/0x20 [ 143.548842][ T9038] _copy_from_user+0x1e/0xb0 [ 143.553478][ T9038] copy_msghdr_from_user+0x54/0x2a0 [ 143.558737][ T9038] ? __fget_files+0x17c/0x1c0 [ 143.563454][ T9038] __sys_sendmsg+0x13e/0x230 [ 143.568154][ T9038] __x64_sys_sendmsg+0x46/0x50 [ 143.572934][ T9038] x64_sys_call+0x2734/0x2dc0 [ 143.577756][ T9038] do_syscall_64+0xc9/0x1c0 [ 143.582311][ T9038] ? clear_bhb_loop+0x55/0xb0 [ 143.587064][ T9038] ? clear_bhb_loop+0x55/0xb0 [ 143.591821][ T9038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.597759][ T9038] RIP: 0033:0x7f767db95d19 [ 143.602243][ T9038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.621876][ T9038] RSP: 002b:00007f767c207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.626684][ T9043] syz.1.1859: attempt to access beyond end of device [ 143.626684][ T9043] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.630342][ T9038] RAX: ffffffffffffffda RBX: 00007f767dd85fa0 RCX: 00007f767db95d19 [ 143.651758][ T9038] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000008 [ 143.659751][ T9038] RBP: 00007f767c207090 R08: 0000000000000000 R09: 0000000000000000 [ 143.667806][ T9038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.675803][ T9038] R13: 0000000000000000 R14: 00007f767dd85fa0 R15: 00007ffc36dedce8 [ 143.683811][ T9038] [ 143.823546][ T9049] loop4: detected capacity change from 0 to 512 [ 143.859352][ T9049] EXT4-fs (loop4): orphan cleanup on readonly fs [ 144.019440][ T9049] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1865: bg 0: block 248: padding at end of block bitmap is not set [ 144.044998][ T9049] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1865: Failed to acquire dquot type 1 [ 144.081960][ T9049] EXT4-fs (loop4): 1 truncate cleaned up [ 144.100832][ T9056] loop6: detected capacity change from 0 to 512 [ 144.145865][ T9056] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 144.206237][ T9056] EXT4-fs (loop6): 1 truncate cleaned up [ 144.212371][ T9056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.240201][ T9049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.254019][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 144.254036][ T29] audit: type=1326 audit(144.286:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9172ec4680 code=0x7ffc0000 [ 144.283190][ T29] audit: type=1326 audit(144.286:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9172ec4a67 code=0x7ffc0000 [ 144.306476][ T29] audit: type=1326 audit(144.286:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9172ec4680 code=0x7ffc0000 [ 144.329345][ T29] audit: type=1326 audit(144.286:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 144.362217][ T29] audit: type=1326 audit(144.386:8667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 144.391323][ T29] audit: type=1326 audit(144.426:8668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 144.414273][ T29] audit: type=1326 audit(144.426:8669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 144.437247][ T29] audit: type=1326 audit(144.426:8670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9048 comm="syz.4.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9172ec5d19 code=0x7ffc0000 [ 144.460857][ T29] audit: type=1400 audit(144.466:8671): avc: denied { read } for pid=9054 comm="syz.7.1868" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 144.483119][ T29] audit: type=1400 audit(144.466:8672): avc: denied { open } for pid=9054 comm="syz.7.1868" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 144.516890][ T9060] loop7: detected capacity change from 0 to 512 [ 144.528012][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.548596][ T9060] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.564144][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.607063][ T9078] xt_hashlimit: size too large, truncated to 1048576 [ 144.612550][ T9080] loop6: detected capacity change from 0 to 512 [ 144.620611][ T9080] ext2: Unknown parameter 'obj_role' [ 144.656342][ T9082] loop6: detected capacity change from 0 to 512 [ 144.662953][ T9082] EXT4-fs: Ignoring removed nobh option [ 144.688153][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.699039][ T9082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.715978][ T9082] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1875: bg 0: block 224: padding at end of block bitmap is not set [ 144.731271][ T9082] EXT4-fs (loop6): Remounting filesystem read-only [ 144.738364][ T9082] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 144.747286][ T9082] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 144.788721][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.836369][ T9091] loop6: detected capacity change from 0 to 512 [ 144.843535][ T9091] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 144.857484][ T9093] netlink: 'syz.7.1879': attribute type 1 has an invalid length. [ 144.867124][ T9091] EXT4-fs (loop6): 1 truncate cleaned up [ 144.873213][ T9091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.891531][ T9093] loop7: detected capacity change from 0 to 1024 [ 144.898320][ T9093] EXT4-fs: Ignoring removed nobh option [ 144.918560][ T9093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.006782][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.019031][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.039299][ T9098] xt_hashlimit: size too large, truncated to 1048576 [ 145.120291][ T9103] loop6: detected capacity change from 0 to 512 [ 145.127881][ T9103] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 145.184913][ T9103] EXT4-fs (loop6): 1 truncate cleaned up [ 145.191147][ T9103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.309532][ T9109] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 145.347939][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.353455][ T9111] loop1: detected capacity change from 0 to 512 [ 145.364505][ T9111] ext2: Unknown parameter 'obj_role' [ 145.580290][ T9130] loop7: detected capacity change from 0 to 164 [ 145.601186][ T9132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1889'. [ 145.685117][ T9130] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 145.701256][ T9125] loop4: detected capacity change from 0 to 2048 [ 145.818811][ T9125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.831697][ T9136] syz.7.1891: attempt to access beyond end of device [ 145.831697][ T9136] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 145.880914][ T9130] lo speed is unknown, defaulting to 1000 [ 145.887198][ T9130] lo speed is unknown, defaulting to 1000 [ 145.900241][ T9125] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 145.912616][ T9125] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.912616][ T9125] [ 145.922311][ T9125] EXT4-fs (loop4): Total free blocks count 0 [ 145.928460][ T9125] EXT4-fs (loop4): Free/Dirty block details [ 145.934396][ T9125] EXT4-fs (loop4): free_blocks=0 [ 145.939390][ T9125] EXT4-fs (loop4): dirty_blocks=0 [ 145.944505][ T9125] EXT4-fs (loop4): Block reservation details [ 145.950558][ T9125] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 145.954271][ T9141] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 145.965681][ T9136] syz.7.1891: attempt to access beyond end of device [ 145.965681][ T9136] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.062685][ T9150] xt_hashlimit: size too large, truncated to 1048576 [ 146.107585][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.163948][ T9154] loop6: detected capacity change from 0 to 512 [ 146.170663][ T9154] ext2: Unknown parameter 'obj_role' [ 146.284423][ T9165] lo speed is unknown, defaulting to 1000 [ 146.293440][ T9165] lo speed is unknown, defaulting to 1000 [ 146.352598][ T9167] FAULT_INJECTION: forcing a failure. [ 146.352598][ T9167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.365849][ T9167] CPU: 1 UID: 0 PID: 9167 Comm: ‡&/ç Not tainted 6.13.0-rc3-syzkaller #0 [ 146.374379][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 146.384538][ T9167] Call Trace: [ 146.387826][ T9167] [ 146.390778][ T9167] dump_stack_lvl+0xf2/0x150 [ 146.395402][ T9167] dump_stack+0x15/0x1a [ 146.399675][ T9167] should_fail_ex+0x223/0x230 [ 146.404461][ T9167] should_fail+0xb/0x10 [ 146.408647][ T9167] should_fail_usercopy+0x1a/0x20 [ 146.413694][ T9167] _copy_to_user+0x20/0xa0 [ 146.418144][ T9167] simple_read_from_buffer+0xa0/0x110 [ 146.423605][ T9167] proc_fail_nth_read+0xf9/0x140 [ 146.428582][ T9167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.434203][ T9167] vfs_read+0x1a2/0x700 [ 146.438546][ T9167] ? __rcu_read_unlock+0x4e/0x70 [ 146.443518][ T9167] ? __fget_files+0x17c/0x1c0 [ 146.448296][ T9167] ksys_read+0xe8/0x1b0 [ 146.452598][ T9167] __x64_sys_read+0x42/0x50 [ 146.457163][ T9167] x64_sys_call+0x2874/0x2dc0 [ 146.461860][ T9167] do_syscall_64+0xc9/0x1c0 [ 146.466385][ T9167] ? clear_bhb_loop+0x55/0xb0 [ 146.471080][ T9167] ? clear_bhb_loop+0x55/0xb0 [ 146.475779][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.481752][ T9167] RIP: 0033:0x7f767db9472c [ 146.486288][ T9167] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 146.506037][ T9167] RSP: 002b:00007f767c207030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.514470][ T9167] RAX: ffffffffffffffda RBX: 00007f767dd85fa0 RCX: 00007f767db9472c [ 146.522520][ T9167] RDX: 000000000000000f RSI: 00007f767c2070a0 RDI: 0000000000000005 [ 146.530547][ T9167] RBP: 00007f767c207090 R08: 0000000000000000 R09: 0000000000000000 [ 146.538536][ T9167] R10: 0000000020001100 R11: 0000000000000246 R12: 0000000000000001 [ 146.546630][ T9167] R13: 0000000000000000 R14: 00007f767dd85fa0 R15: 00007ffc36dedce8 [ 146.554653][ T9167] [ 147.331797][ T9199] loop4: detected capacity change from 0 to 164 [ 147.344119][ T9199] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 147.369565][ T9199] lo speed is unknown, defaulting to 1000 [ 147.375858][ T9199] lo speed is unknown, defaulting to 1000 [ 147.408549][ T9201] syz.4.1919: attempt to access beyond end of device [ 147.408549][ T9201] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 147.423066][ T9201] syz.4.1919: attempt to access beyond end of device [ 147.423066][ T9201] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.461567][ T9204] devtmpfs: Unknown parameter 'di¼CÆ5F\LÑž' [ 147.475073][ T9205] rdma_rxe: rxe_newlink: failed to add lo [ 147.566651][ T9209] lo speed is unknown, defaulting to 1000 [ 147.572735][ T9209] lo speed is unknown, defaulting to 1000 [ 147.826058][ T9220] FAULT_INJECTION: forcing a failure. [ 147.826058][ T9220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.839210][ T9220] CPU: 0 UID: 0 PID: 9220 Comm: syz.4.1925 Not tainted 6.13.0-rc3-syzkaller #0 [ 147.848163][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 147.858307][ T9220] Call Trace: [ 147.861597][ T9220] [ 147.864541][ T9220] dump_stack_lvl+0xf2/0x150 [ 147.869248][ T9220] dump_stack+0x15/0x1a [ 147.873558][ T9220] should_fail_ex+0x223/0x230 [ 147.878402][ T9220] should_fail+0xb/0x10 [ 147.882584][ T9220] should_fail_usercopy+0x1a/0x20 [ 147.887641][ T9220] _copy_to_user+0x20/0xa0 [ 147.892209][ T9220] simple_read_from_buffer+0xa0/0x110 [ 147.897695][ T9220] proc_fail_nth_read+0xf9/0x140 [ 147.902732][ T9220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.908328][ T9220] vfs_read+0x1a2/0x700 [ 147.912517][ T9220] ? __rcu_read_unlock+0x4e/0x70 [ 147.917508][ T9220] ? __fget_files+0x17c/0x1c0 [ 147.922343][ T9220] ksys_read+0xe8/0x1b0 [ 147.926549][ T9220] __x64_sys_read+0x42/0x50 [ 147.931192][ T9220] x64_sys_call+0x2874/0x2dc0 [ 147.935890][ T9220] do_syscall_64+0xc9/0x1c0 [ 147.940409][ T9220] ? clear_bhb_loop+0x55/0xb0 [ 147.945117][ T9220] ? clear_bhb_loop+0x55/0xb0 [ 147.949888][ T9220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.955823][ T9220] RIP: 0033:0x7f9172ec472c [ 147.960266][ T9220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 147.979910][ T9220] RSP: 002b:00007f9171531030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 147.988527][ T9220] RAX: ffffffffffffffda RBX: 00007f91730b5fa0 RCX: 00007f9172ec472c [ 147.996549][ T9220] RDX: 000000000000000f RSI: 00007f91715310a0 RDI: 0000000000000004 [ 148.004565][ T9220] RBP: 00007f9171531090 R08: 0000000000000000 R09: 0000000000000000 [ 148.012555][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.020543][ T9220] R13: 0000000000000000 R14: 00007f91730b5fa0 R15: 00007ffeea705e48 [ 148.028604][ T9220] [ 148.039701][ T9224] loop3: detected capacity change from 0 to 512 [ 148.048819][ T9223] loop6: detected capacity change from 0 to 512 [ 148.055825][ T9223] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 148.065961][ T9224] ext2: Unknown parameter 'obj_role' [ 148.083875][ T9220] ================================================================== [ 148.091986][ T9220] BUG: KCSAN: data-race in __dentry_kill / shrink_dentry_list [ 148.099455][ T9220] [ 148.101806][ T9220] read-write to 0xffff88810048f540 of 4 bytes by task 3301 on cpu 1: [ 148.109865][ T9220] shrink_dentry_list+0x19f/0x3e0 [ 148.114904][ T9220] shrink_dcache_parent+0x43/0x1b0 [ 148.120013][ T9220] d_invalidate+0xa9/0x1c0 [ 148.124430][ T9220] proc_invalidate_siblings_dcache+0x1db/0x2b0 [ 148.130679][ T9220] proc_flush_pid+0x1d/0x30 [ 148.135182][ T9220] release_task+0xad9/0xc20 [ 148.139686][ T9220] wait_consider_task+0x116e/0x1680 [ 148.144925][ T9220] __do_wait+0x100/0x500 [ 148.149168][ T9220] do_wait+0xaf/0x270 [ 148.153154][ T9220] kernel_wait4+0x164/0x1d0 [ 148.157664][ T9220] __x64_sys_wait4+0x94/0x120 [ 148.162369][ T9220] x64_sys_call+0x25a2/0x2dc0 [ 148.167051][ T9220] do_syscall_64+0xc9/0x1c0 [ 148.171557][ T9220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.177464][ T9220] [ 148.179804][ T9220] read to 0xffff88810048f540 of 4 bytes by task 9220 on cpu 0: [ 148.187349][ T9220] __dentry_kill+0x2af/0x4c0 [ 148.191946][ T9220] dput+0x5c/0xd0 [ 148.195581][ T9220] proc_invalidate_siblings_dcache+0x1e3/0x2b0 [ 148.201756][ T9220] proc_flush_pid+0x1d/0x30 [ 148.206266][ T9220] release_task+0xb7f/0xc20 [ 148.210777][ T9220] do_exit+0xf62/0x17f0 [ 148.215017][ T9220] do_group_exit+0x142/0x150 [ 148.219613][ T9220] __x64_sys_exit_group+0x1f/0x20 [ 148.224638][ T9220] x64_sys_call+0x2db8/0x2dc0 [ 148.229315][ T9220] do_syscall_64+0xc9/0x1c0 [ 148.233814][ T9220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.239740][ T9220] [ 148.242055][ T9220] value changed: 0x0048040c -> 0x0000000c [ 148.247777][ T9220] [ 148.250107][ T9220] Reported by Kernel Concurrency Sanitizer on: [ 148.256256][ T9220] CPU: 0 UID: 0 PID: 9220 Comm: syz.4.1925 Not tainted 6.13.0-rc3-syzkaller #0 [ 148.265295][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 148.275376][ T9220] ================================================================== [ 148.320699][ T9223] EXT4-fs (loop6): 1 truncate cleaned up [ 148.358255][ T9223] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.447385][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.385436][ T1079] page_pool_release_retry() stalled pool shutdown: id 64, 50 inflight 60 sec