last executing test programs: 41.853524997s ago: executing program 4 (id=32): r0 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f00006f5000/0xc000)=nil, 0xc000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffd000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 41.825572617s ago: executing program 4 (id=33): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00040000e2d100000000fb000000000000001000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="1400"], &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0xfffffffc}], 0x1c) sendto$inet6(r1, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 41.693735537s ago: executing program 4 (id=35): pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xea8a}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000540)) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) (async) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x23, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xfffffe81, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (async) close(r6) fdatasync(r6) 41.612235666s ago: executing program 4 (id=36): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x244400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r2 = getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x5, @local, 0xfff}], 0x3c) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)="9e0862ade86521293702e5ca02ade2d3e8f2164d1f4f455ab545", 0x1a}, {&(0x7f0000000140)="085d89cdc599878d7c5b59944a83b915b80da4c729d76d396479ace29e3d26c986df8d8894fbcddea1c586038062fdc19d475ce602dda1646039009be2c800c3d708d29fb6230f1acd4c5a3aed85175699c74565bea1f0d015009adfa4fabd937d12e9242e6f260f7061a5246f2cf5c974834a31dd512d6df0a6d6a2889d1f216ad6f6e6f3d83e9a8c49d5d0ad720bb44dcf7ef53e02254707a930bc3c76ff72ab9bb096d6ebd18c4719e0e34548ec4e9d380f55204fb58a9a06322125eb2888", 0xc0}, {&(0x7f0000000200)="6005a0419ef24452b6bbc6c9ee934b187a812b695931929c70702a24630caec53ea080f37a3236ae06305e1f0922a9a40a3a7f7c0cef51557ef850", 0x3b}, {&(0x7f0000000240)="a329d1ea57a2618cd60da4635bb4ad534559e07edf1026d191b0edc5a85f72518a93d46d6df430bbee5134623e13a7f1e711b8d7a289e5188185877cb487940f0eb0b867453520db8dd02170229f9ea55ca41b0cea1dc171ad80f233f3e3188ca542885bb278842f9fb9d6872b81df06a0c02fc7813f6e4bc444950a24019d011dae8641db68b0229f37bf5a54a35fc870fbd78a17674ae08262d5baff83d3576a2309161b4b1978edd4ff807502572b0cd6c004135afded7e3e5d550bc51a", 0xbf}, {&(0x7f0000000300)="d7f9615b5e6a7b5fdd07c6a20ace7af5", 0x10}, {&(0x7f0000000340)="9db947c19cb2fe6300c2f3f1a14f707440a55e6398233271249ef11c788319a901d747db9206130046927335a3d17851d128fff7e14efa554812b2adf9fcfe68d5fe159863e49b683aa0ad8a61b5e867be489bbdd00891160106683d97da3eb50e45c1e87e1baf118e889a0c861a1a858aee0641b9876c47b73476e2f7a3cfb4658466354215aeefe2a8fb2e2a6ab494779a1dca41ca75ec089c25316c6b5fc8ecddfddc815714adf407be9429542b9560e034d1c7c5f707e59fe45e04b064e33fc9e9223a19875b177a689b10b1fb993235963bbc4f5ad1561c9a9dd0", 0xdd}, {&(0x7f0000000440)="eb611a12cc78", 0x6}, {&(0x7f0000000480)="7f69153004302a23cb", 0x9}, {&(0x7f00000004c0)="ae894bd4399ddcf9ee2926ce4c05401ee87b26e80ce1c461e97ae87729021c924a240a184d9171e6e05195bb484e8f1fd49931e3d039a2b24e6fea3548f127bed84eff4fe3ca838ac3212edb6c2e3218073922de2878ed0eff9c3f06c843684e1faa6456cdecc604e2e051c0efdb372e4033b6790db42e7c375a312f417b6fefae7ace1ab1313e17c199969179405bbfb1d76fa176d89fb4e1fa7116f15b74daa670", 0xa2}], 0x9) alarm(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000640)='autogroup\x00') r4 = dup(r3) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000680)=""/230) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000780)={0x0, 0xbd, "d60db61c9b195aa3e2162eef423ee9e2c2dc252b94238b1b01d3e953a47b1d10202945f8866f996f8fa428acd28be8d6574c623bc991d7f0eb3cff783d1e86b07ddc9ceb01e23258ab64f24c49a8dd6fb8b57bfdfb9dae3435238f9f4a9c880fdc1063b662cae822c7308413e31419e2abdb5a83257c8d45e88e101fcddc2caca36e90b8dc3af84e89df1b4d82aa264abf8e15755621f61f52735b60b158546b2a2cb195e15c09761c0d7602afc1608ee6d50f90126bbe917122aab907"}, &(0x7f0000000880)=0xc5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000008c0)={r5, 0x3ff}, &(0x7f0000000900)=0x8) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000940)=0x5f267a47) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000980)) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f00000009c0)='ext4_read_block_bitmap_load\x00', r4, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000a40)='ext4_es_insert_delayed_block\x00', r3, 0x0, 0x8000000000000001}, 0x18) alarm(0x3) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000ac0)={"6920b4b82bcc345bfdc61f095bc01326", 0x0, 0x0, {0x5, 0x2}, {0x6, 0x8}, 0x40000000, [0x80000001, 0x5, 0x1, 0x8bd2, 0x100000001, 0x8, 0x7, 0x4, 0x8, 0x4, 0x9, 0x8, 0x6, 0x7, 0x7, 0x40]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000bc0)={{r1}, r7, 0xc, @unused=[0x7, 0x6, 0x1c000000000000], @subvolid=0x23}) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000001cc0)={0x3, 0x4c, "7525075fb2879a9ce3a04fadd9614bc7f45f2324b27a57d190adcc126ffc02a929b1e0d6f9dfc258f78b0782875532b52b498f03009c30554004fc633c1c6a069b027bf525ecde16b09a478e"}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001d80)={0x6, &(0x7f0000001d40)=[{0x5, 0x5, 0xf5, 0x7f}, {0x8, 0x63, 0xd8, 0x8}, {0x2, 0x1, 0xa, 0x8}, {0x8, 0x10, 0x3, 0x4}, {0x3, 0x8, 0xfb, 0x8}, {0x8, 0x9, 0x40, 0xfff}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001dc0)={0x0, 0x62, "d83837a150eb5982130d52f2bbc93ec264da1b7047c955023dbf5b5e9a0773a6b91643c95ce7d54572e99657d3f6c98919cdc86028145561857f9932e7507e8e744d49496cae7dc0fd71736d5a3d6458451dc0663443661696b69db8a9ac4a18fa83"}, &(0x7f0000001e40)=0x6a) socket$netlink(0x10, 0x3, 0xf) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001e80)='cachefiles_prep_read\x00', r8, 0x0, 0xc}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001fc0)={r6, 0x4c, &(0x7f0000001f40)=[@in6={0xa, 0x4e20, 0xfffffff8, @empty, 0x4}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000002000)=0x10) 40.714165323s ago: executing program 4 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0xf1ff, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4c814) r5 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1, 0x1}, 0x8) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 40.625032572s ago: executing program 4 (id=54): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x1}, 0xfe}, 0x18) r2 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = timerfd_create(0x0, 0x0) timerfd_gettime(r5, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = io_uring_setup(0x7c91, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x0, 0x397}) unshare(0x24020400) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x0, 0x0, 0x0, 0x2, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYRESDEC, @ANYRES64, @ANYBLOB='\x00'/17, @ANYRES32, @ANYRES32], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1ff) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[], 0x158) close(r9) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r10, 0x5437, 0x2) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r11, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x75e5, &(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r7}) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000035000100000000000000000003ffffffe50000001000", @ANYRES16=r2], 0x28}}, 0x0) 30.281725589s ago: executing program 3 (id=198): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xff7f, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/3, 0x3}, 0xa}], 0x1, 0x2040, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x221f020, 0x0, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x101489, 0x0, 0x0, 0x6, 0x41}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21081e, &(0x7f0000000880), 0xfd, 0x4fa, &(0x7f0000000ac0)="$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") 30.084921068s ago: executing program 3 (id=203): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x63, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x1, 0x2043, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x2}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x43a, &(0x7f0000000a40)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000705000/0x1000)=nil, 0x1000, 0xb, 0x4000010, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x116, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0xb, 0x5, 0x1, {0x22, 0xa64}}, {{{0x9, 0x5, 0x81, 0x3, 0x1b7, 0xf, 0x40, 0xb7}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x1, 0x8, 0xff}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x44, 0x2, 0x18, 0x10, 0xfe}, 0x64, &(0x7f0000000640)=ANY=[@ANYBLOB="050f64000424100a05260000000ff00e000fc00000303f000000000000c00000aa0e0fe3121dc0000000cf000000141004031d6e916584b9cb01000000782f57487d0310c68ecec12bf7be3129953a0b24100a0a06010000000f00080f0000000f7f7f00c00000000f3fff0000807f"], 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x14, &(0x7f0000000180)=@string={0x14, 0x3, "09a7dc0cf6e0153c16b6a127eac284c5b5c7"}}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x1000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) splice(r7, 0x0, r10, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000580)=@buf={0x51, &(0x7f0000000500)="4f6f2eeaea3be9f7cab5d666329d5f3bfed6fcf8f8f27481f0c427a349f03a9fa9ad38a0e4c982d4726b183c07ae38d1cf6d9da53989f3ec744dd2717b41417f34e01ba1c09add76571e0b18dc2d507483"}) 27.066400595s ago: executing program 3 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 26.967384305s ago: executing program 3 (id=252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a31000000000800044000000000"], 0x64}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000180)='%-010d \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) creat(&(0x7f0000000000)='./bus\x00', 0x16) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x400c0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) mq_unlink(0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000000)={0x9, 0x0, 0x7fff, 0x0, 0x4}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000020000000020a01040000000000000000000000000900010073797a3000000000340000001f0a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0xe822, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000400)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 26.705214103s ago: executing program 3 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x95, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{0x3}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x2}, {}, {0xfffffffc}, {0x0, 0xe}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffb1}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {0x0, 0x1000000}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33b}, {0x0, 0x0, 0x0, 0x0, 0xfffff678, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe10}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xefa6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sched_process_wait\x00', r7}, 0x18) syz_clone(0x800100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r9) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 26.388026472s ago: executing program 3 (id=260): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x1fc3, &(0x7f00000002c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close_range(r3, r1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000001c0), &(0x7f0000000300)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40010) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r11, 0x80605414, &(0x7f00000003c0)) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x10000001, 0x0, {0x0, 0x0, 0x0, r14, {0x2, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x1c, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x101}, @TCA_RED_MAX_P={0x8}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x5}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0x1003, 0x0, 0x2, 0x5, 0x6, 0x4}}, {0xc, 0x2, [0x2ed, 0x6, 0x7, 0x8]}}]}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0xf801, 0x4, 0x0, 0xffffffff, 0x2, 0x2}}, {0x8, 0x2, [0x6, 0x5]}}, {{0x1c, 0x1, {0x7f, 0xfb, 0x3, 0x101, 0x0, 0x4, 0x6, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x7, 0xb, 0xa, 0x20000001, 0x1, 0xd33, 0xa0e7, 0x7}}, {0x12, 0x2, [0x8e, 0x8, 0x8001, 0x6, 0x96, 0x6, 0x9]}}, {{0x1c, 0x1, {0x8, 0x4, 0x1, 0x800, 0x2, 0x7ff, 0x4, 0x4}}, {0xc, 0x2, [0x4, 0x80, 0x7, 0x3]}}, {{0x1c, 0x1, {0x3, 0x9, 0x7cb4, 0x6, 0x1, 0x101, 0x7, 0x4}}, {0xc, 0x2, [0x2800, 0x0, 0x4, 0x1ff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa1}]}, 0x148}, 0x1, 0x0, 0x0, 0x8880}, 0x2000c0c1) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0xffff, 0xfff3}, {0x4, 0xb}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20000010) close(r9) 26.387662492s ago: executing program 32 (id=260): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x1fc3, &(0x7f00000002c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close_range(r3, r1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000001c0), &(0x7f0000000300)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40010) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r11, 0x80605414, &(0x7f00000003c0)) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x10000001, 0x0, {0x0, 0x0, 0x0, r14, {0x2, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x1c, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x101}, @TCA_RED_MAX_P={0x8}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x5}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0x1003, 0x0, 0x2, 0x5, 0x6, 0x4}}, {0xc, 0x2, [0x2ed, 0x6, 0x7, 0x8]}}]}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0xf801, 0x4, 0x0, 0xffffffff, 0x2, 0x2}}, {0x8, 0x2, [0x6, 0x5]}}, {{0x1c, 0x1, {0x7f, 0xfb, 0x3, 0x101, 0x0, 0x4, 0x6, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x7, 0xb, 0xa, 0x20000001, 0x1, 0xd33, 0xa0e7, 0x7}}, {0x12, 0x2, [0x8e, 0x8, 0x8001, 0x6, 0x96, 0x6, 0x9]}}, {{0x1c, 0x1, {0x8, 0x4, 0x1, 0x800, 0x2, 0x7ff, 0x4, 0x4}}, {0xc, 0x2, [0x4, 0x80, 0x7, 0x3]}}, {{0x1c, 0x1, {0x3, 0x9, 0x7cb4, 0x6, 0x1, 0x101, 0x7, 0x4}}, {0xc, 0x2, [0x2800, 0x0, 0x4, 0x1ff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa1}]}, 0x148}, 0x1, 0x0, 0x0, 0x8880}, 0x2000c0c1) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0xffff, 0xfff3}, {0x4, 0xb}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20000010) close(r9) 25.565771589s ago: executing program 33 (id=54): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x1}, 0xfe}, 0x18) r2 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = timerfd_create(0x0, 0x0) timerfd_gettime(r5, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = io_uring_setup(0x7c91, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x0, 0x397}) unshare(0x24020400) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x0, 0x0, 0x0, 0x2, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYRESDEC, @ANYRES64, @ANYBLOB='\x00'/17, @ANYRES32, @ANYRES32], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1ff) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[], 0x158) close(r9) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r10, 0x5437, 0x2) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r11, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x75e5, &(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r7}) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000035000100000000000000000003ffffffe50000001000", @ANYRES16=r2], 0x28}}, 0x0) 21.04793187s ago: executing program 6 (id=268): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe0, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) personality(0x60000a) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x1000000, 0x200101, 0x0, 'queue1\x00', 0xffffffff}) 18.463466919s ago: executing program 6 (id=343): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x101) sendmsg$netlink(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc, &(0x7f0000000500)=[{&(0x7f00000003c0)={0x118, 0x3e, 0x800, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x1}, @nested={0x2b, 0xc8, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @ipv4=@local}, @generic="1cf4ad86acbe3971ba214df60129cbb5a92c4335a8e007f2febea3", @nested={0x4, 0x1b}]}, @nested={0xd3, 0x126, 0x0, 0x1, [@generic="23d1855b9e67bfb9fbeee8ebb15e0f9b37725d43ae6e7aa406a4597e7762ada9deca0024a9a3d24ea789c8a2947c30115b66bcb1283682f3d1c6be66edf6d9f69b1a32532b37e567e0fd6f24044d2e6a30aba42d623f5fa0a82841c0d053d2172bd7406578773f7a88fbe89722058b07dd9d17a464d5057c9f1fccd6023dce07aef86d1f55c6a235d66ad14cf82e09731d3efb05198f977891edb59aa9c5bb361031d868dce4146f1b1e6d18645dfca31cb9743b6a5cda7b9dccd7ac83d61291d58031fd49373c67eec46c61f96056"]}]}, 0x118}, {0xfffffffffffffffc}], 0x2, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r3]}}], 0x20, 0x4000}, 0x40) r4 = syz_io_uring_setup(0x5d14, &(0x7f00000000c0)={0x0, 0x2119}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r6, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) (async) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000600)={0x2}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}, 0x40000) syz_io_uring_setup(0x4414, &(0x7f0000000300)={0x0, 0x6fa8, 0x8, 0x1, 0x265, 0x0, r4}, &(0x7f0000000080), &(0x7f0000000180)) (async) socket(0x11, 0x3, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000008af8ff00000000bfa2ffb703000000000000b70400000000000085000000c30000009500000000100000000000000000805fcaf1215eb0d068a3cf3400c283689e77b9d75f9be6f276"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r10}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r11) (async) symlink(0x0, 0x0) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) 18.328217068s ago: executing program 6 (id=346): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='xen_mc_entry\x00', r0, 0x0, 0x7}, 0xffffffffffffffe2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x240400, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x3ffff, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x7, 0x1, 0x8, 0x1d, "246e1fd015c576a8e7d8a8896febfc16eba00dc931f16f4a4ef6739850ea7738034e928461648c1c6e827a2ffd248bd5c7b4bb5e1b988f1af463e3e81ec4ff21", "b4965584cbc6800717f26258f71c36900330f0e0d67ecd36ef6c96da93478586", [0x8001, 0x2]}) dup3(r1, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x5, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xe48a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2400, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24000000) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0xc, 0x8001, 0x1, 0x0, 0x38, "0000000000000100"}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x4000000000021, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x80}, 0x0, 0x0, 0x1}, {{@in, 0x4d5, 0x33}, 0x2, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x81}}, 0xe8) 18.000446347s ago: executing program 6 (id=349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x82, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x2, 0x0, 0x0, 0x0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) (async) r3 = io_uring_setup(0x6584, &(0x7f0000000440)={0x0, 0xd898, 0x1448, 0x1, 0x161}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x10010, r3, 0x8000000) (async, rerun: 32) socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$binfmt_script(r7, 0x0, 0xb) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) splice(r6, 0x0, r9, 0x0, 0x80, 0x4) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) close(r7) syz_io_uring_setup(0x654c, &(0x7f0000000080)={0x0, 0xbc0a, 0x8, 0x0, 0x1eb, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00'}) 17.872194786s ago: executing program 6 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) openat$incfs(r1, &(0x7f0000001040)='.pending_reads\x00', 0x10100, 0x82) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) (async) openat$incfs(r1, &(0x7f0000001040)='.pending_reads\x00', 0x10100, 0x82) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) dup(r5) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) 2.862400033s ago: executing program 34 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) openat$incfs(r1, &(0x7f0000001040)='.pending_reads\x00', 0x10100, 0x82) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) (async) openat$incfs(r1, &(0x7f0000001040)='.pending_reads\x00', 0x10100, 0x82) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) dup(r5) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) 2.759236892s ago: executing program 0 (id=548): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa08344, &(0x7f0000000200)={[{@nojournal_checksum}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@quota}, {@usrjquota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") syz_emit_ethernet(0x6d, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x1d0}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r6, &(0x7f0000001900)=""/4079, 0xfef, 0x66) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x25, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) (async) r9 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) 2.603491692s ago: executing program 0 (id=551): r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$unix(r0, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000010000104893c5f3cf"], 0x20, 0x4040011}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0xe) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x4, 0xbfffffc0}]}, 0x18, 0x0) r7 = syz_clone(0x140e0000, &(0x7f0000000140)="852f3d50a0d8f470391d1e64723352b002d33f3fd9a227ec7561d82bcc4b155c7bfd29725adf7b5a61bac9a653d179", 0x2f, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="4510a34351825a5baee8c3f64708e1a0a3550e6dc4636f853195e2f75b5f42fb7ce159263d26ae52683dd2") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f0000000600), 0x78, 0x101301) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x4, 0xfffe, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x9d, 0x0, 0x2, 0x0, 0x2, 0x80000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x9}, 0x80, 0x3ff, 0x0, 0x0, 0x1000, 0x8, 0x9, 0x0, 0xffffff49, 0x0, 0xfffffffffffffffd}, r7, 0x7, r6, 0x7) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="4ca31c5eadb5dc3d", @ANYRES16=r12, @ANYBLOB="00082dbd7000fddbdf254c00000008000300010000000800030003000000080001007063690011000200303030303a30303a31302e30000000000c00a7000600000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x6000c044}, 0x20040820) 2.422196821s ago: executing program 0 (id=553): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2d) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x74) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r4], 0x1}, 0x58) 2.2906662s ago: executing program 2 (id=555): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)}], 0x2, 0x0, 0x0, 0x8010}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) sendmsg$inet(r3, &(0x7f0000000800)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000040)="53fd5af155717e6976e86abe6eddca96a3ff70b74da2bd36c1ee836b946e3c98db1715d3c414ac19dc4107394495d7a738a6a67730", 0x35}, {&(0x7f0000000440)="b19647e6f4eea6080dd23b8a8e69370fea6d4c38fbfca946db048b976ee06a9e7b6940a6dfee9f2661c47fab91d392328b4ce4e640588f19ddc1a79d4b3980e9d17b08df39e93910c49171178720f39be3cb16eb391bc8664333c1040a387582fdf2b8d960a7158011cd76e410e5b4c321858a3561d01f7cdac6d64d72ffd208f4dcbcef01278ace", 0x88}, {&(0x7f0000000580)="20d1e868ecbb31d00277a451fd8f47546361336399fc0a078f1de66cbe05f080288d88d32ae94ff9518d30b76d6ab08bee8d1c125a9e0ab119fb48741f2a9a1a277d136a7b739a183e725d0f691ad6570dd51d11b4bfe331f8627eea5d26c3d5741040da377004", 0x67}, {&(0x7f0000000280)="0a2ea2b7810bb3e79a60eb5cec5b08764e7009c9d1374026bf2d9f3cdeee13d7e600", 0x22}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000600)="e2811044fd37b6068fef94d440747e5a823d8e33f57682527ec220933505e1fea85dc21ec5c9d6f1cf6ba6f4103df16a416cc96e4412755aadf163d09356a6d5aa6c5575b74f2c75c8a6601f01f64f5a49b5904af27e3bc8e2ca1fdb1cf5719c19557d7223caa1459ca6cc468c26c64ba481d51064d504ece5ae24d69525d0bdcc42882688711e3dde34569966ee21463c44a18280e19de2eeeb49038f551262523a857577603d6ae488df553d6afd79f01380cc280fd75812790afc703ebe5c8b63da918423fc0d8fedf57a3555f0aed21b40ad01fed640e85ba4c63809f3ff6446f744cfc0a58536012f091db7", 0xee}, {&(0x7f0000000700)="6e2aaf81b26a01f914b098b85093e6bfda95c4852d26678a7f8d6329869084dbf5ceeff0df8f3f2e28a11a51f8d09724c5acfd20543097cf4b67b3d71e840ef7ea061a80c4e87fb49bdad0332fe8cfcc6be5da7f33aec66c0ac55f06a5fa42b9ef332add8a86ae2c", 0x68}], 0x7, &(0x7f0000000500)}, 0x44004) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.064024749s ago: executing program 2 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x19f, &(0x7f0000000100), 0x80, 0x550, &(0x7f0000000700)="$eJzs3c9rJFkdAPBvddKz8yOznVUPuuC4uiszi073ZOPuBg/rCKKnBXG9jzHpCWE66ZDu7E7CoJm/QBBRwZNevAj+AYIMePEowoLiRVBYUUQzehBcp6SqK5mmpzvp2e3tziSfD9TUq1dV7/teTb9KV9ejKoBT67mIuB4RD9I0fTEiKkV+qZhitzNl293fu7OUTUmk6Rv/SCIp8vbLSor5hWK3sxHxta9EfDN5NG5re+fWYqNR3yyWa+21jVpre+fq6triSn2lvj4/P/fKwqsLLy9cG0k7L0bEa1/6y/e/89Mvv/bLz7715xt/u/KtrFozxfrudjyG7BBNH7ZBp+nlzrEsZDtsvodgx9V03sLCuX5bpGmaPkgrXTl3x1IzAAB6Zd9LPxQRn4qIF6MSU4d/nQUAAACeQOkXZuLdJL9DE3/8w6W0x5neDAAAAODJU8rHwCalajEWYCZKpWq1M4b3I3G+1Gi22p+52dxaX+6MlZ2NcunmaqN+rRgrPBvlJFuey9MPl1/qWZ6PiGci4nuVc/lydanZWJ70jx8AAABwSlzouf7/d6Vz/Q8AAACcMLOPZpUmUQ8AAADgg9Pn+h8AAAA4YVz/AwAAwIn21ddfz6Z0//3Xy29ub91qvnl1ud66VV3bWqouNTc3qivN5kr+zL61o8prNJsbn4v1rdu1dr3VrrW2d26sNbfW2zdW89eBAwAAABPwzCfu/T6JiN3Pn8unzJlJVwoYi+mDVFLM+/T+Pz3dmb8zpkoBYzE1xDbvPDWGigBjNz3pCgATU550BYCJS45YP3Dwzm+K+SdHWx8AAGD0Ln9s8P3/w98BsOsVAfCEe8+d+KgfDIBjr+f+f1qZVEWAscvv/w874Nc3fjhRykONAAROsvd9//9IafpYFQIAAEZuJp+SUrX4eW8mSqVqNeJi/lqAcnJztVG/FhFPR8TvKuWnsuW5fM/ELUAAAAAAAAAAAAAAAAAAAAAAAAAAGFKaJpEe5vqhawEAAIAnQETpr8mvOs/yv1x5Yab394EzyX/yVwKfiYi3fvTGD24vttubc1n+Pw/y2z8s8l/q2vHd/fIBAACAcdu/Tt+/jgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUbq/d2fp/t6d9L97d5bGGffvX4yI2YP4+dRZMx1n8/nZKEfE+X8lMd21XxIRUyOIv3s3Ij7aL36SVesgZL/45z74+DFbHIV+8S+MID6cZvey88/1vP9FbERX/yvFc/m8q/8lRceLzolhegTxB5//4uD8NzWg/18cMsazb/+8NjD+3Yhnp/uff/bjJwPiPx+loeJ/4+s7O4PWpT+OuBz943fHqrXXNmqt7Z2rq2uLK/WV+vr8/NwrC68uvLxwrXZztVEv/u0b47sf/8WDw9p/fkD82SPa/0JvYQM+EP97+/behzvJcr/4V57vE//XPym2eDR+qfjb9+kina2/vJ/e7aS7XfrZby8d1v7lh+0vP87//5VBhQ55XACAyWht79xabDTqmyc2kV2lv+9ypi6muck3ZySJ3eNRjYknvj3SArMPSNan+qy6FxHDlJPEcTgseWLSZyYAAGDUHn7pn3RNAAAAAAAAAAAAAAAAAAAA4PQax+PEemPuHqQSTwYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6N/wcAAP//eOHkIw==") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x101000, 0x18, 0x4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000004850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0x25, 0x148, 0x0, 0x60, 0x4a8, 0x2a8, 0x2a8, 0x4a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xd, 0x81, 0xf2, 0xffffffff, 'syz1\x00', 'syz1\x00', {0x7}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5ef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5, 0x0, 0x40000}, 0x18) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000940)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000240)={0x60, 0x2, &(0x7f00008b0000/0x3000)=nil, &(0x7f00008e9000/0x4000)=nil, 0x670, 0x0, 0x0, 0x3, 0x40, 0x1, 0x0, 0xa}) 1.565665347s ago: executing program 1 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x8a080, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x11c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xffff5548}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xef}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xcc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xeb}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbf2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f00000009c0)={&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000800)=""/125, 0x7d}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000880)=""/83, 0x53}], 0x3, &(0x7f0000000940)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x3) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x12c) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) (async) r10 = dup(r7) write$P9_RLERRORu(r10, &(0x7f0000000040)=ANY=[@ANYRES32=r9], 0x53) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x6, [@fwd={0x5}, @fwd={0xd}, @union={0x8, 0x6, 0x0, 0x5, 0x1, 0x7, [{0x0, 0x1, 0x8}, {0x4, 0x0, 0x5}, {0x9, 0x4, 0x2}, {0x10, 0x5, 0x4}, {0x0, 0x1, 0xfffffffa}, {0x9, 0x2, 0x2}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xf}, {0xe}, {0xf, 0x3}, {0xa, 0x2}, {0xc, 0x3}]}]}, {0x0, [0x2e, 0x5f, 0x76, 0x2e]}}, &(0x7f00000003c0)=""/171, 0xbe, 0xab, 0x1, 0xfffffff9, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001000800ae17d06fd8b38017", @ANYRES32=r3, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="010000000400"/28], 0x50) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0xe, 0x1, 0xee7, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r13, @ANYRES8], 0x48) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@tcx={@void, @value, @void, @void, r13}}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x11, @val=@tcx={@void, @value=r12, @void, @void, r13}}, 0x1c) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0xffffffffffffffff, r5, 0x0, 0x3, &(0x7f00000004c0)='@\'\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r1, r4, 0x12, 0x30, 0x0, @void, @void, @void, @value=r14, r13}, 0x20) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)='\\\x00', 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0], 0x50}}, 0x0) 1.429370177s ago: executing program 1 (id=559): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000140)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4) 1.429069997s ago: executing program 5 (id=560): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x20, 0x0, 0x7, {[@noop, @timestamp={0x44, 0xc, 0x83, 0x0, 0xf, [0xfffffffc, 0x4]}]}}}], 0x50}}], 0x1, 0x401eb94) 1.410731726s ago: executing program 0 (id=561): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) statfs(&(0x7f00000004c0)='./file0\x00', &(0x7f00000005c0)=""/59) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000040), 0x0) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) (async) statfs(&(0x7f00000004c0)='./file0\x00', &(0x7f00000005c0)=""/59) (async) 1.329348646s ago: executing program 5 (id=562): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x102) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040)) (async) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x52000) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}], 0x1c) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000002c0)={@initdev, 0x0}, &(0x7f0000000300)=0x14) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x50, 0x3, 0x8, 0x24, @private1={0xfc, 0x1, '\x00', 0x4}, @mcast1, 0x8, 0x0, 0x2, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x120, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040800}, 0x48010) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x10, r1}, 0x18) fcntl$getflags(r12, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1a, 0x8001, 0x1, 0x9, 0x10064, r2, 0x6, '\x00', 0x0, r2, 0x3, 0x3, 0x3, 0x0, @void, @value, @value=r2}, 0x50) socket$inet_icmp(0x2, 0x2, 0x1) (async) r13 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r13, 0x84, 0x8, &(0x7f0000000840), &(0x7f0000000880)=0x4) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000008c0), &(0x7f0000000900)={0x0, 0xfb, 0x95, 0x0, 0x1, "3544e21a0b318ac86e85725042046882", "a519e637e4fab726006abeae453287cd4245e73ff30cdfddcd799c66d1bbb702adc4abb15895d2cdbf91d2f556a28f8df41a14b0c943d3265e48bbdcd8718fd12798f67508aefe41e35abaddd02f7c1f31710b5a933a0dc75eb7cd16fc95b5c359ba20ff053dc56a19eb9856e75fd4b7858f14ef5d2ef0f8dffcc5ed199545eb"}, 0x95, 0x3) (async) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000008c0), &(0x7f0000000900)={0x0, 0xfb, 0x95, 0x0, 0x1, "3544e21a0b318ac86e85725042046882", "a519e637e4fab726006abeae453287cd4245e73ff30cdfddcd799c66d1bbb702adc4abb15895d2cdbf91d2f556a28f8df41a14b0c943d3265e48bbdcd8718fd12798f67508aefe41e35abaddd02f7c1f31710b5a933a0dc75eb7cd16fc95b5c359ba20ff053dc56a19eb9856e75fd4b7858f14ef5d2ef0f8dffcc5ed199545eb"}, 0x95, 0x3) getpid() bind$qrtr(r2, &(0x7f00000009c0)={0x2a, 0x1, 0x8000}, 0xc) r14 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)={0x201000, 0x1c8, 0x4}, 0x18) mkdirat(r14, &(0x7f0000000a80)='./file0\x00', 0x1a0) accept4$llc(r2, &(0x7f0000000ac0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000b00)=0x10, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) (async) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000d00)={&(0x7f0000000b40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xec, r15, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x546}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffe00}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x279ba68d}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa6}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x4040095) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000d00)={&(0x7f0000000b40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xec, r15, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x546}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffe00}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x279ba68d}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa6}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x4040095) 1.305852596s ago: executing program 0 (id=563): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x10000000}) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {@stripe={'stripe', 0x3d, 0x20}}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r3 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x25) pwritev2(r3, &(0x7f0000000280)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x2000, 0x0, 0x7) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)) 1.258473226s ago: executing program 0 (id=564): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x5d}], 0x1, 0x40000000, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_names\x00') lseek(r1, 0x2000, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x5, 0x7ffc1ffb}]}) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000002c0)={0x0, 0xfffffffffffffffe, 0x7, 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.184091696s ago: executing program 5 (id=565): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000002a00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="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", @ANYRES32, @ANYRES32], 0xc, 0x302, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141042, 0x2) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x5406, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000a88f00"/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) sendfile(r5, r5, 0x0, 0xfffe80) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x24) fcntl$setlease(r6, 0x400, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1, 0x0, 0x0) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xee00) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r9}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r10, &(0x7f0000000280), 0x0) io_cancel(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0, 0x2}, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x6a0eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0x7c, 0x200}, 0x1016c7, 0x8, 0x0, 0x6, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r11}, &(0x7f0000000240), &(0x7f0000000040)}, 0x20) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.172208265s ago: executing program 2 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = socket(0x33, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="c5", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x16, 0xb, &(0x7f0000000500)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x78f3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000002c0)='GPL\x00', 0x5e000000, 0x1000, &(0x7f0000000840)=""/4096, 0x41000, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001840)={0x2, 0x2, 0x0, 0x1ff}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)={0xe8, r7, 0x800, 0x70bd28, 0x1, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x84b4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1da}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19e}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) syz_open_dev$usbmon(&(0x7f0000000280), 0x7, 0x420101) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff01000000350000005600000225001f0019000a0010", 0x25}], 0x1) write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc) splice(r9, 0x0, r11, 0x0, 0x33fe0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_robust_list(0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32=r5, @ANYBLOB="140002"], 0x34}}, 0x0) 972.250865ms ago: executing program 5 (id=567): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) 556.252793ms ago: executing program 1 (id=568): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40804}, 0x90) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 507.561583ms ago: executing program 1 (id=569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (fail_nth: 1) 275.370892ms ago: executing program 2 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 158.758801ms ago: executing program 1 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 157.662452ms ago: executing program 2 (id=572): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x401eb94) 119.584191ms ago: executing program 2 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgctl$IPC_RMID(0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 119.218571ms ago: executing program 1 (id=574): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x101489, 0x0, 0x0, 0x6, 0x41}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21081e, &(0x7f0000000880), 0xfd, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vW0kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1Xt+Sd3UbqImsaP485Fe38wb19+ZJm+m/ib2BDC0rkbEbkSMRcTdiJjOrueyIz5rH8njnu09XNrfe7iUi1br9r9yaXtyLTr+TuJK9pzFiPjR9yJ+mns5bmN7Z22xWq1sZvXZZm1jtrG9c2O1trhSWamsl8sL8wtzn9z8uHxmY32vNpaVvvr0j7vf+nnSransSuc4zlI+/bNwGCcxGhE/OI9gAzCSjWds0B3htSTfn29HxPvp/T8dI+lXEwC4zFqt6WhNd9YBgMsun+bAcvlSlguYiny+VGrn8N6JyXy13mhev1ffWl9u58pmopC/t1qtzGW5wpko5JL6fFp+Xi8fqd+MiLci4pfjE2m9tFSvLg/yPz4AMMSuHFn//zveXv8BgEuuOOgOAAB9Z/0HgOFj/QeA4WP9B4Dh017/JwbdDQCgj7z+B4DhY/0HgKHyw1u3kqO1n33+9fL97a21+v0by5XGWqm2tVRaqm9ulFbq9ZX0M3tqxz1ftV7fmP8oth7MfHuj0ZxtbO/cqdW31pt30s/1vlMppI/a7cPIAIBe3nrvyV9yyYr86UR6RMdeDoWB9gw4b/lBdwAYmJFBdwAYGLt9wfA6xWt86QG4JLps0fuCYrc3CLVardb5dQk4Z9e+JP8Pw6oj/++3gGHIyP/D8JL/h+HVauVOuud/nPSBAMDFJscP9Pj5/9vZ+XfZDwd+snz0EY/Ps1cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsR3s/1vK9gKfiny+VIp4IyJmopC7t1qtzEXEmxHx5/HCeFKfH3CfAYDTyv89l+3/dW36w6kXmt69clgci4if/fr2rx4sNpubf4oYy/17/OB683F2vdz/3gMAxztYp9Nzxwv5Z3sPlw6OfvbnH9+NiGI7/v7eWOwfxh+N0fRcjEJETP4nl9Xbch25i9PYfRQRX+w2/lxMpTmQ9s6nR+Mnsd/oa/z8C/HzaVv7nPxbfOEM+gLD5kky/3zW7f7Lx9X03P3+L6Yz1Oll81/yVEv76Rz4PP7B/DfSY/67etIYH/3h++3SxMttjyK+PBpxEHu/Y/45iJ/rEf/DE8b/61fefb9XW+s3Edeie/zOWLPN2sZsY3vnxmptcaWyUlkvlxfmF+Y+uflxeTbNUc/2Xg3++en1N3u1JeOf7BG/eMz4v37C8f/2/3d//LVXxP/mB93i5+OdV8RP1sRvnDD+4uTvi73akvjLPcZ/3Nf/+gnjP/3bzkvbhgMAg9PY3llbrFYrmwoKF7+QfMtegG50LXynX7HGonvTLz5o39NHmlqt14rVa8Y4i6wbcBEc3vQR8b9BdwYAAAAAAAAAAAAAAOiqH+9YGvQYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLw+DwAA//9aTc8k") 119.061741ms ago: executing program 7 (id=546): r0 = socket$inet(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2018000, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nogrpid}]}, 0x1, 0x549, &(0x7f0000000900)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x39, &(0x7f00000006c0)={0x0, 0xe7b7, 0x8}, 0x0, &(0x7f0000001880)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000d812beb5e416aee2392d3fc8f4138d73acc6d4770064bef4561d99724d9bc8901425ec4788d22dbd5b754bd78fd0dd0cf732d8536e24a7b4a53f41bfb4fd05a389b71bc8c3c34c4540a627bd9039e8683bb8c2019ac169a0dea7d311fefea5565deaac07926375e535a6a3ad16f51d642db37865a2fe46ff53ac0175fde175b71e"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) syz_open_procfs(r1, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x4, 0x341002) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 77.916011ms ago: executing program 5 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x40801) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0xd3}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 5 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a310000000009000100737903300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024008000000000000000c0001400000000000000003140000001000010000000000000000000084000a076cfb1ab1b82ce77d51e6a6fe1cb3c2a8b201a3791d01e2f1eb44ff2881dd0a5251baa6ed0d6441b351556cf2691af4"], 0x110}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvfrom$unix(r8, &(0x7f00000006c0)=""/244, 0xf4, 0x102, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x2a, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={0x0, 0x58}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r9, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={0x0, 0x58}, 0x1, 0x7}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@dax_inode}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00a19d2b79"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) (async) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): process `syz.1.61'. [ 36.253282][ T3677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.61'. [ 36.278576][ T3681] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.305232][ T3677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.61'. [ 36.345352][ T3677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.61'. [ 36.354271][ T3681] netlink: 200 bytes leftover after parsing attributes in process `syz.0.62'. [ 36.442532][ T3690] loop2: detected capacity change from 0 to 512 [ 36.463623][ T3690] EXT4-fs: Ignoring removed oldalloc option [ 36.489478][ T3692] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 36.522011][ T3700] loop1: detected capacity change from 0 to 1024 [ 36.530720][ T3700] EXT4-fs: Ignoring removed nobh option [ 36.536334][ T3700] EXT4-fs: Ignoring removed bh option [ 36.553890][ T3690] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.64: Parent and EA inode have the same ino 15 [ 36.579107][ T3700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.617815][ T3690] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.64: Parent and EA inode have the same ino 15 [ 36.639774][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.665885][ T3690] EXT4-fs (loop2): 1 orphan inode deleted [ 36.696959][ T3720] loop1: detected capacity change from 0 to 512 [ 36.707660][ T3690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.741471][ T3720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.766936][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.781613][ T3720] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.874068][ T3720] netlink: 'syz.1.69': attribute type 4 has an invalid length. [ 36.954251][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.981019][ T3745] vlan2: entered allmulticast mode [ 37.054736][ T3764] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 37.080660][ T3745] syz.2.74 (3745) used greatest stack depth: 10456 bytes left [ 37.108656][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 37.108672][ T29] audit: type=1400 audit(1736291260.462:438): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file0" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.165447][ T3780] loop2: detected capacity change from 0 to 512 [ 37.185674][ T3780] EXT4-fs: Ignoring removed oldalloc option [ 37.207698][ T3780] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.82: Parent and EA inode have the same ino 15 [ 37.239638][ T3780] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.82: Parent and EA inode have the same ino 15 [ 37.260429][ T3780] EXT4-fs (loop2): 1 orphan inode deleted [ 37.269296][ T3780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.316865][ T29] audit: type=1400 audit(1736291260.672:439): avc: denied { bind } for pid=3797 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.342189][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.393427][ T3807] loop2: detected capacity change from 0 to 512 [ 37.407308][ T3807] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 37.431761][ T29] audit: type=1400 audit(1736291260.782:440): avc: denied { ioctl } for pid=3808 comm="syz.1.85" path="socket:[5358]" dev="sockfs" ino=5358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.457195][ T29] audit: type=1400 audit(1736291260.782:441): avc: denied { setopt } for pid=3808 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.488044][ T3813] netlink: 'syz.0.86': attribute type 4 has an invalid length. [ 37.506786][ T29] audit: type=1400 audit(1736291260.862:442): avc: denied { execute } for pid=3814 comm="syz.1.87" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 37.538489][ T29] audit: type=1326 audit(1736291260.892:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfd1e5d29 code=0x7ffc0000 [ 37.561846][ T29] audit: type=1326 audit(1736291260.892:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fccfd1e5d29 code=0x7ffc0000 [ 37.561878][ T29] audit: type=1326 audit(1736291260.892:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfd1e5d29 code=0x7ffc0000 [ 37.561909][ T29] audit: type=1326 audit(1736291260.892:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccfd1e7c47 code=0x7ffc0000 [ 37.561947][ T29] audit: type=1326 audit(1736291260.892:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fccfd1e7bbc code=0x7ffc0000 [ 37.826309][ T3845] SELinux: Context system_u:object_r:tape_device_t:s0 is not valid (left unmapped). [ 38.003599][ T3854] wireguard0: entered promiscuous mode [ 38.009181][ T3854] wireguard0: entered allmulticast mode [ 38.153123][ T3864] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 38.271329][ T3872] syz.3.103[3872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.271523][ T3872] syz.3.103[3872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.310199][ T3872] syz.3.103[3872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.442555][ T3875] loop3: detected capacity change from 0 to 8192 [ 38.576557][ T3878] loop3: detected capacity change from 0 to 512 [ 38.609128][ T3878] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.647627][ T3878] EXT4-fs (loop3): 1 truncate cleaned up [ 38.655568][ T3878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.677804][ T3881] loop2: detected capacity change from 0 to 512 [ 38.685140][ T3881] EXT4-fs: Ignoring removed oldalloc option [ 38.706345][ T3881] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.106: Parent and EA inode have the same ino 15 [ 38.719950][ T3881] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.106: Parent and EA inode have the same ino 15 [ 38.736258][ T3881] EXT4-fs (loop2): 1 orphan inode deleted [ 38.738808][ T3883] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 3915 (only 1 groups) [ 38.742381][ T3881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.779093][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.830853][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.974934][ T3893] netlink: 'syz.2.109': attribute type 11 has an invalid length. [ 39.106400][ T3898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3898 comm=syz.2.111 [ 39.166885][ T3898] ip6gre1: entered allmulticast mode [ 39.315350][ T3906] wireguard0: entered promiscuous mode [ 39.320908][ T3906] wireguard0: entered allmulticast mode [ 39.364964][ T3910] loop3: detected capacity change from 0 to 512 [ 39.409970][ T3910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.440414][ T3910] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.464397][ T3906] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.113: Failed to acquire dquot type 1 [ 39.499397][ T3906] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.113: Failed to acquire dquot type 1 [ 39.596915][ T3918] loop2: detected capacity change from 0 to 512 [ 39.607816][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.625589][ T3918] EXT4-fs: Ignoring removed oldalloc option [ 39.649673][ T3920] sctp: [Deprecated]: syz.3.118 (pid 3920) Use of int in max_burst socket option. [ 39.649673][ T3920] Use struct sctp_assoc_value instead [ 39.675806][ T3918] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.117: Parent and EA inode have the same ino 15 [ 39.688490][ T3918] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.117: Parent and EA inode have the same ino 15 [ 39.701476][ T3918] EXT4-fs (loop2): 1 orphan inode deleted [ 39.707701][ T3918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.734632][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.771884][ T3926] loop2: detected capacity change from 0 to 2048 [ 39.795715][ T3926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.813236][ T3926] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 39.830460][ T3926] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 39.842697][ T3926] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.842697][ T3926] [ 39.852393][ T3926] EXT4-fs (loop2): Total free blocks count 0 [ 39.858496][ T3926] EXT4-fs (loop2): Free/Dirty block details [ 39.864452][ T3926] EXT4-fs (loop2): free_blocks=66060288 [ 39.870043][ T3926] EXT4-fs (loop2): dirty_blocks=16 [ 39.875240][ T3926] EXT4-fs (loop2): Block reservation details [ 39.881258][ T3926] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 39.938299][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.038761][ T3934] loop2: detected capacity change from 0 to 128 [ 40.295072][ T3940] __nla_validate_parse: 7 callbacks suppressed [ 40.295109][ T3940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 40.312531][ T3942] loop3: detected capacity change from 0 to 1024 [ 40.328370][ T3942] EXT4-fs: Ignoring removed nobh option [ 40.334196][ T3942] EXT4-fs: Ignoring removed bh option [ 40.352671][ T3942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.372461][ T3942] process 'syz.3.124' launched './file1' with NULL argv: empty string added [ 40.400324][ T3952] syz.0.127[3952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.401012][ T3952] syz.0.127[3952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.413272][ T3952] syz.0.127[3952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.421690][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.514766][ T3954] @ÿ: renamed from bond_slave_0 (while UP) [ 40.595442][ T3956] loop3: detected capacity change from 0 to 512 [ 40.602736][ T3956] EXT4-fs: Ignoring removed oldalloc option [ 40.625445][ T3956] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.129: Parent and EA inode have the same ino 15 [ 40.653015][ T3956] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.129: Parent and EA inode have the same ino 15 [ 40.679333][ T3956] EXT4-fs (loop3): 1 orphan inode deleted [ 40.686307][ T3956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.714783][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.744398][ T3964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.131'. [ 40.774704][ T3960] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 40.782404][ T3960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 40.848965][ T3968] netlink: 'syz.0.132': attribute type 4 has an invalid length. [ 40.919143][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 40.932817][ T3976] vlan2: entered allmulticast mode [ 40.938056][ T3976] gretap0: entered allmulticast mode [ 40.946751][ T3976] gretap0: left allmulticast mode [ 41.056473][ T3979] loop2: detected capacity change from 0 to 2048 [ 41.093653][ T3979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.140737][ T3979] EXT4-fs error (device loop2): ext4_ext_precache:631: inode #2: comm syz.2.136: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 41.160406][ T3979] EXT4-fs (loop2): Remounting filesystem read-only [ 41.211164][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.308986][ T3989] syz.0.134[3989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.309050][ T3989] syz.0.134[3989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.322143][ T3989] syz.0.134[3989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.357111][ T3991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.378753][ T3991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.826971][ T4003] loop3: detected capacity change from 0 to 512 [ 41.874205][ T4003] ext4: Unknown parameter 'fsuuid' [ 41.928022][ T4006] loop1: detected capacity change from 0 to 512 [ 41.973179][ T4006] EXT4-fs: Ignoring removed oldalloc option [ 42.027159][ T4006] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.141: Parent and EA inode have the same ino 15 [ 42.044274][ T4006] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.141: Parent and EA inode have the same ino 15 [ 42.057612][ T4006] EXT4-fs (loop1): 1 orphan inode deleted [ 42.066379][ T4006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.110317][ T29] kauditd_printk_skb: 503 callbacks suppressed [ 42.110337][ T29] audit: type=1326 audit(1736291265.452:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d91a5d29 code=0x7ffc0000 [ 42.140001][ T29] audit: type=1326 audit(1736291265.452:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f19d91a5d29 code=0x7ffc0000 [ 42.163302][ T29] audit: type=1326 audit(1736291265.452:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d91a5d29 code=0x7ffc0000 [ 42.186592][ T29] audit: type=1326 audit(1736291265.452:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d91a5d29 code=0x7ffc0000 [ 42.209928][ T29] audit: type=1326 audit(1736291265.452:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f19d91a5d29 code=0x7ffc0000 [ 42.233372][ T29] audit: type=1326 audit(1736291265.452:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19d91a5d63 code=0x7ffc0000 [ 42.307671][ T4008] loop3: detected capacity change from 0 to 2048 [ 42.337229][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.401060][ T29] audit: type=1326 audit(1736291265.652:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f19d91a47df code=0x7ffc0000 [ 42.424258][ T29] audit: type=1326 audit(1736291265.662:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f19d91a5db7 code=0x7ffc0000 [ 42.447416][ T29] audit: type=1326 audit(1736291265.662:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19d91a4690 code=0x7ffc0000 [ 42.470856][ T29] audit: type=1326 audit(1736291265.662:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19d91a592b code=0x7ffc0000 [ 42.501138][ T4010] loop3: p3 < > p4 < > [ 42.505444][ T4010] loop3: partition table partially beyond EOD, truncated [ 42.527490][ T4010] loop3: p3 start 4284289 is beyond EOD, truncated [ 42.544552][ T4008] loop3: p3 < > p4 < > [ 42.548790][ T4008] loop3: partition table partially beyond EOD, truncated [ 42.556643][ T4008] loop3: p3 start 4284289 is beyond EOD, truncated [ 42.572068][ T2999] loop3: p3 < > p4 < > [ 42.576328][ T2999] loop3: partition table partially beyond EOD, truncated [ 42.583673][ T2999] loop3: p3 start 4284289 is beyond EOD, truncated [ 42.601829][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.637631][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.655608][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.673502][ T4041] 9pnet_fd: Insufficient options for proto=fd [ 42.695144][ T4043] loop3: detected capacity change from 0 to 1024 [ 42.714485][ T4043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.847411][ T4052] x_tables: duplicate underflow at hook 2 [ 43.595059][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.686188][ T4075] Illegal XDP return value 717868947 on prog (id 160) dev N/A, expect packet loss! [ 43.693827][ T4071] block device autoloading is deprecated and will be removed. [ 43.705222][ T4071] syz.3.163: attempt to access beyond end of device [ 43.705222][ T4071] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 43.759760][ T4077] loop1: detected capacity change from 0 to 2048 [ 43.766562][ T4077] EXT4-fs: Ignoring removed oldalloc option [ 43.792247][ T4077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.809588][ T4082] loop3: detected capacity change from 0 to 512 [ 43.816785][ T4082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.836887][ T4082] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.844334][ T4082] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.166: Failed to acquire dquot type 1 [ 43.856107][ T4082] EXT4-fs (loop3): 1 truncate cleaned up [ 43.863810][ T4082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.879848][ T4082] team0: Device gtp0 is of different type [ 43.895743][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.963518][ T4085] loop1: detected capacity change from 0 to 512 [ 43.982534][ T4085] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.167: couldn't read orphan inode 26 (err -116) [ 43.995476][ T4085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.008407][ T4085] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.031287][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.068792][ T4094] netlink: 112 bytes leftover after parsing attributes in process `syz.1.170'. [ 44.194576][ T4111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.204664][ T4111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.217052][ T4103] vlan2: entered allmulticast mode [ 44.262316][ T4103] x_tables: duplicate underflow at hook 1 [ 44.339457][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 44.414643][ T4127] loop1: detected capacity change from 0 to 764 [ 44.454080][ T4130] Zero length message leads to an empty skb [ 44.594721][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.793296][ T4140] veth0_virt_wifi: entered promiscuous mode [ 44.808424][ T4140] veth0_virt_wifi: left promiscuous mode [ 44.914452][ T4145] delete_channel: no stack [ 44.973543][ T4148] loop0: detected capacity change from 0 to 512 [ 45.015783][ T4148] capability: warning: `syz.0.187' uses deprecated v2 capabilities in a way that may be insecure [ 45.208206][ T4152] 9pnet: Could not find request transport: r [ 45.426519][ T4129] kexec: Could not allocate control_code_buffer [ 45.450970][ T4155] netlink: 'syz.1.189': attribute type 4 has an invalid length. [ 45.465277][ T4155] netlink: 96 bytes leftover after parsing attributes in process `syz.1.189'. [ 45.482319][ T4155] netlink: 'syz.1.189': attribute type 4 has an invalid length. [ 45.482344][ T4157] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 45.482363][ T4157] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 45.525575][ T4157] loop0: detected capacity change from 0 to 256 [ 45.547739][ T4161] loop2: detected capacity change from 0 to 512 [ 45.565123][ T4163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 45.582120][ T4163] veth0_macvtap: left promiscuous mode [ 45.607903][ T4161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.633087][ T4161] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.648583][ T4168] loop0: detected capacity change from 0 to 1764 [ 45.684722][ T4161] netlink: 'syz.2.192': attribute type 4 has an invalid length. [ 45.724341][ T4171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.734975][ T4171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.755211][ T4163] loop1: detected capacity change from 0 to 512 [ 45.775596][ T4163] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 45.791851][ T4163] System zones: 0-2, 18-18, 34-34 [ 45.797990][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.798440][ T4163] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.193: bg 0: block 248: padding at end of block bitmap is not set [ 45.822133][ T4163] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.193: Failed to acquire dquot type 1 [ 45.835825][ T4163] EXT4-fs (loop1): 1 truncate cleaned up [ 45.842324][ T4163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.854915][ T4163] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.883369][ T4163] syz.1.193 (4163) used greatest stack depth: 9296 bytes left [ 45.919789][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.969615][ T4180] loop1: detected capacity change from 0 to 1024 [ 45.975555][ T4138] syz.3.184 (4138) used greatest stack depth: 7208 bytes left [ 46.012856][ T4180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.032099][ T4180] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.047362][ T4184] loop3: detected capacity change from 0 to 512 [ 46.058036][ T4189] loop2: detected capacity change from 0 to 128 [ 46.065125][ T4184] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 46.081488][ T4189] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.094116][ T4189] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.103116][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.141808][ T4189] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 46.176006][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.193216][ T4197] loop3: detected capacity change from 0 to 512 [ 46.204760][ T4197] EXT4-fs: Ignoring removed i_version option [ 46.215737][ T4200] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.224813][ T4197] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.235905][ T4200] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 46.253504][ T4200] loop1: detected capacity change from 0 to 256 [ 46.270931][ T4197] EXT4-fs (loop3): 1 truncate cleaned up [ 46.277182][ T4197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.331780][ T4197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.340673][ T4197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.466663][ T4215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 46.509969][ T4215] netlink: 268 bytes leftover after parsing attributes in process `syz.2.208'. [ 46.519067][ T4215] unsupported nla_type 65024 [ 46.664022][ T4235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.683366][ T4235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.804343][ T4246] netlink: 'syz.0.220': attribute type 10 has an invalid length. [ 46.823800][ T4246] geneve1: entered promiscuous mode [ 46.840879][ T4246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.849881][ T4246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.858666][ T4246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.867453][ T4246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.879105][ T4251] 9pnet_fd: Insufficient options for proto=fd [ 46.886992][ T4246] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 46.934782][ T4253] loop0: detected capacity change from 0 to 512 [ 46.963813][ T4253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.987246][ T4253] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.009617][ T4253] netlink: 'syz.0.221': attribute type 4 has an invalid length. [ 47.058918][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.099974][ T4247] bridge_slave_0: left allmulticast mode [ 47.105860][ T4247] bridge_slave_0: left promiscuous mode [ 47.112835][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.135256][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 47.135271][ T29] audit: type=1326 audit(1736291270.492:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 47.135711][ T4247] bridge_slave_1: left allmulticast mode [ 47.150283][ T29] audit: type=1326 audit(1736291270.502:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 47.165244][ T4247] bridge_slave_1: left promiscuous mode [ 47.170627][ T29] audit: type=1326 audit(1736291270.502:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 47.194176][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.199833][ T29] audit: type=1326 audit(1736291270.502:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 47.231884][ T29] audit: type=1326 audit(1736291270.592:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 47.277346][ T29] audit: type=1326 audit(1736291270.592:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 47.300697][ T29] audit: type=1326 audit(1736291270.592:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 47.324043][ T29] audit: type=1326 audit(1736291270.592:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 47.347460][ T29] audit: type=1326 audit(1736291270.592:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 47.370787][ T29] audit: type=1326 audit(1736291270.592:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 47.410756][ T4247] bond0: (slave bond_slave_0): Releasing backup interface [ 47.445657][ T4263] Cannot find set identified by id 632 to match [ 47.452348][ T4247] bond0: (slave bond_slave_1): Releasing backup interface [ 47.489780][ T4247] team0: Port device team_slave_0 removed [ 47.514707][ T4247] team0: Port device team_slave_1 removed [ 47.529773][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.537524][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.565547][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.573103][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.948816][ T4238] syz.2.219 (4238) used greatest stack depth: 6360 bytes left [ 48.002219][ T4275] netlink: 72 bytes leftover after parsing attributes in process `syz.2.226'. [ 48.049051][ T4283] loop2: detected capacity change from 0 to 128 [ 48.107607][ T4294] loop0: detected capacity change from 0 to 512 [ 48.133931][ T4294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.160427][ T4294] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.174500][ T4301] loop2: detected capacity change from 0 to 1764 [ 48.177450][ T4294] netlink: 'syz.0.232': attribute type 4 has an invalid length. [ 48.235385][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.341266][ T4307] capability: warning: `syz.0.236' uses 32-bit capabilities (legacy support in use) [ 48.356751][ T4311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.391882][ T4307] loop0: detected capacity change from 0 to 512 [ 48.429077][ T4317] loop2: detected capacity change from 0 to 512 [ 48.436320][ T4317] EXT4-fs: Ignoring removed bh option [ 48.453256][ T4317] EXT4-fs error (device loop2): ext4_quota_enable:7112: comm syz.2.239: inode #33554432: comm syz.2.239: iget: illegal inode # [ 48.478651][ T4317] EXT4-fs (loop2): Remounting filesystem read-only [ 48.485312][ T4317] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 48.505174][ T4317] EXT4-fs (loop2): mount failed [ 48.525257][ T4311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.604801][ T4311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.673873][ T4311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.731694][ T4311] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.740901][ T4333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.244'. [ 48.772282][ T4333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58386 sclass=netlink_route_socket pid=4333 comm=syz.2.244 [ 48.774944][ T4311] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.815286][ T4311] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.835525][ T4311] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.125929][ T4355] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 49.132510][ T4355] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 49.140027][ T4349] loop1: detected capacity change from 0 to 2048 [ 49.140336][ T4355] vhci_hcd vhci_hcd.0: Device attached [ 49.164776][ T4358] vhci_hcd: connection closed [ 49.164961][ T55] vhci_hcd: stop threads [ 49.174096][ T55] vhci_hcd: release socket [ 49.178548][ T55] vhci_hcd: disconnect device [ 49.203095][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.217172][ T4349] Alternate GPT is invalid, using primary GPT. [ 49.223685][ T4349] loop1: p2 p3 p7 [ 49.264996][ T4349] 9pnet_fd: Insufficient options for proto=fd [ 49.315062][ T4363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.252'. [ 49.327559][ T4363] loop3: detected capacity change from 0 to 512 [ 49.334590][ T4363] EXT4-fs: Ignoring removed nobh option [ 49.361722][ T4365] syz.1.248[4365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.361821][ T4365] syz.1.248[4365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.373602][ T4365] syz.1.248[4365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.379219][ T4363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.430434][ T4363] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.454130][ T4363] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.252: bg 0: block 224: padding at end of block bitmap is not set [ 49.474453][ T4363] EXT4-fs (loop3): Remounting filesystem read-only [ 49.504885][ T4363] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 49.527629][ T4363] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 49.561290][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 49.570564][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 49.579635][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 49.588634][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 49.597693][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 49.606627][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 49.616763][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 49.630374][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 49.667656][ T4143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.747157][ T4383] loop0: detected capacity change from 0 to 1764 [ 49.810869][ T4386] loop0: detected capacity change from 0 to 512 [ 49.820468][ T4386] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.861987][ T4386] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.259: bg 0: block 248: padding at end of block bitmap is not set [ 49.925571][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.945609][ T4386] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.259: Failed to acquire dquot type 1 [ 49.980797][ T4386] EXT4-fs (loop0): 1 truncate cleaned up [ 49.987911][ T4395] netlink: 'syz.1.263': attribute type 1 has an invalid length. [ 50.000222][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.015307][ T4386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.036719][ T4386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.063455][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.153313][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.210327][ T4401] SELinux: syz.1.263 (4401) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 50.231080][ T4406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.262687][ T4391] chnl_net:caif_netlink_parms(): no params data found [ 50.307072][ T11] bridge_slave_1: left allmulticast mode [ 50.312849][ T11] bridge_slave_1: left promiscuous mode [ 50.318511][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.326623][ T11] bridge_slave_0: left allmulticast mode [ 50.332412][ T11] bridge_slave_0: left promiscuous mode [ 50.338165][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.416201][ T11] bond0 (unregistering): (slave 0@ÿ): Releasing backup interface [ 50.425832][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.435556][ T11] bond0 (unregistering): Released all slaves [ 50.447886][ T4406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.512069][ T11] hsr_slave_0: left promiscuous mode [ 50.536672][ T11] hsr_slave_1: left promiscuous mode [ 50.551839][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.559383][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.573176][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.580664][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.603249][ T4419] syz.1.266[4419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.603321][ T4419] syz.1.266[4419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.617202][ T11] veth1_macvtap: left promiscuous mode [ 50.623451][ T4419] syz.1.266[4419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.628606][ T11] veth0_macvtap: left promiscuous mode [ 50.651077][ T11] veth1_vlan: left promiscuous mode [ 50.656390][ T11] veth0_vlan: left promiscuous mode [ 50.672085][ T4419] loop1: detected capacity change from 0 to 8192 [ 50.723110][ T4427] futex_wake_op: syz.2.267 tries to shift op by -1; fix this program [ 50.741206][ T4430] syz.1.266: attempt to access beyond end of device [ 50.741206][ T4430] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 50.782151][ T4430] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 50.790129][ T4430] FAT-fs (loop1): Filesystem has been set read-only [ 50.825368][ T4430] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 50.836034][ T4430] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 50.864260][ T11] team0 (unregistering): Port device team_slave_1 removed [ 50.875456][ T11] team0 (unregistering): Port device team_slave_0 removed [ 50.933681][ T4406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.009832][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.010616][ T4448] loop2: detected capacity change from 0 to 512 [ 51.017032][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.031891][ T4448] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 51.042646][ T4391] bridge_slave_0: entered allmulticast mode [ 51.052675][ T4391] bridge_slave_0: entered promiscuous mode [ 51.061588][ T4406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.084912][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.092130][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.099419][ T4391] bridge_slave_1: entered allmulticast mode [ 51.106180][ T4391] bridge_slave_1: entered promiscuous mode [ 51.167566][ T4391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.183834][ T4406] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.205179][ T4406] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.205337][ T4459] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 51.223500][ T4406] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.240177][ T4391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.259136][ T4469] loop1: detected capacity change from 0 to 512 [ 51.276071][ T4469] EXT4-fs: Ignoring removed oldalloc option [ 51.283778][ T4469] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.270: Parent and EA inode have the same ino 15 [ 51.302619][ T4406] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.309144][ T4469] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.270: Parent and EA inode have the same ino 15 [ 51.353257][ T4469] EXT4-fs (loop1): 1 orphan inode deleted [ 51.359434][ T4469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.382976][ T4391] team0: Port device team_slave_0 added [ 51.397248][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.419078][ T4391] team0: Port device team_slave_1 added [ 51.527228][ T4498] loop2: detected capacity change from 0 to 1024 [ 51.535489][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.542610][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.568762][ T4391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.601724][ T4498] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.613644][ T4437] chnl_net:caif_netlink_parms(): no params data found [ 51.624669][ T4498] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 51.633135][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.640093][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.650356][ T4498] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.666048][ T4391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.728501][ T4514] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.737604][ T4498] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 51.750079][ T4498] EXT4-fs (loop2): Remounting filesystem read-only [ 51.776189][ T4514] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 51.785534][ T4498] EXT4-fs (loop2): 1 orphan inode deleted [ 51.799443][ T4498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.824052][ T4514] loop1: detected capacity change from 0 to 256 [ 51.830539][ T4498] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 51.840617][ T4498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.901169][ T4391] hsr_slave_0: entered promiscuous mode [ 51.907656][ T4391] hsr_slave_1: entered promiscuous mode [ 51.916383][ T4391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.950647][ T4391] Cannot create hsr debugfs directory [ 52.003948][ T4538] loop0: detected capacity change from 0 to 512 [ 52.035821][ T4437] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.043069][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.062071][ T4437] bridge_slave_0: entered allmulticast mode [ 52.066529][ T4546] loop1: detected capacity change from 0 to 512 [ 52.074218][ T4437] bridge_slave_0: entered promiscuous mode [ 52.090940][ T4546] ext4: Unknown parameter 'fsmagic' [ 52.128597][ T4547] ipt_REJECT: ECHOREPLY no longer supported. [ 52.135656][ T4437] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.139857][ T4548] loop0: detected capacity change from 0 to 512 [ 52.142857][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.160784][ T4548] EXT4-fs: Ignoring removed oldalloc option [ 52.169764][ T4437] bridge_slave_1: entered allmulticast mode [ 52.171750][ T4547] SELinux: syz.2.285 (4547) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 52.179223][ T4437] bridge_slave_1: entered promiscuous mode [ 52.196285][ T4548] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.286: Parent and EA inode have the same ino 15 [ 52.209901][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 52.210224][ T4548] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.286: Parent and EA inode have the same ino 15 [ 52.218844][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 52.233994][ T4548] EXT4-fs (loop0): 1 orphan inode deleted [ 52.246176][ T4548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.289454][ T4437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.302046][ T4547] vlan2: entered allmulticast mode [ 52.307255][ T4547] syz_tun: entered allmulticast mode [ 52.312431][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.317547][ T4437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.388210][ T4437] team0: Port device team_slave_0 added [ 52.449207][ T4437] team0: Port device team_slave_1 added [ 52.499830][ T4437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.506910][ T4437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.532997][ T4437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.576887][ T4583] loop0: detected capacity change from 0 to 764 [ 52.587044][ T4583] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 52.604351][ T4578] bridge0: port 3(vlan2) entered blocking state [ 52.611105][ T4578] bridge0: port 3(vlan2) entered disabled state [ 52.614275][ T4586] loop2: detected capacity change from 0 to 164 [ 52.624184][ T4578] vlan2: entered allmulticast mode [ 52.630161][ T4578] vlan2: left allmulticast mode [ 52.639303][ T4437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.646387][ T4437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.672441][ T4437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.724321][ T4590] loop2: detected capacity change from 0 to 128 [ 52.764099][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 52.805974][ T4437] hsr_slave_0: entered promiscuous mode [ 52.813477][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 52.813490][ T29] audit: type=1400 audit(1736291276.152:1393): avc: denied { mounton } for pid=4589 comm="syz.2.295" path="/80/bus/file0" dev="loop2" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 52.853419][ T4597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 52.869936][ T4437] hsr_slave_1: entered promiscuous mode [ 52.871967][ T29] audit: type=1326 audit(1736291276.202:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 52.898643][ T29] audit: type=1326 audit(1736291276.202:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 52.921605][ T29] audit: type=1326 audit(1736291276.202:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 52.944499][ T29] audit: type=1326 audit(1736291276.202:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 52.967704][ T29] audit: type=1326 audit(1736291276.202:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 52.990681][ T29] audit: type=1326 audit(1736291276.202:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 53.013673][ T29] audit: type=1326 audit(1736291276.202:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 53.036672][ T29] audit: type=1326 audit(1736291276.202:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 53.036701][ T29] audit: type=1326 audit(1736291276.202:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 53.036886][ T4437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.036903][ T4437] Cannot create hsr debugfs directory [ 53.037442][ T4391] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.105872][ T4391] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.155046][ T4391] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.207619][ T4391] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.223690][ T4623] loop0: detected capacity change from 0 to 128 [ 53.239341][ T4628] loop2: detected capacity change from 0 to 512 [ 53.255561][ T4628] ext3: Unknown parameter 'noacl' [ 53.265046][ T4623] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 53.313654][ T4623] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 53.394895][ T4623] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.304: checksumming directory block 0 [ 53.398018][ T4391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.419265][ T4391] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.475216][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.482387][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.482683][ T4644] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.304: checksumming directory block 0 [ 53.491918][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.508628][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.519998][ T4437] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 53.534173][ T4437] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 53.563715][ T4623] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 53.583123][ T4437] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 53.612526][ T4437] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 53.632490][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.790999][ T4437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.813573][ T4437] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.831977][ T4391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.871289][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 53.889967][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.897121][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.936138][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.936940][ T4674] loop0: detected capacity change from 0 to 512 [ 53.943318][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.960383][ T4674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.973876][ T4674] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.981543][ T4674] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.309: Failed to acquire dquot type 1 [ 53.993364][ T4674] EXT4-fs (loop0): 1 truncate cleaned up [ 54.003750][ T4674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.027056][ T4674] team0: Device gtp0 is of different type [ 54.165555][ T4437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.342344][ T4719] loop2: detected capacity change from 0 to 512 [ 54.388799][ T4391] veth0_vlan: entered promiscuous mode [ 54.404160][ T4719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.425792][ T4391] veth1_vlan: entered promiscuous mode [ 54.444065][ T4719] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.461989][ T4627] syz.1.302 (4627) used greatest stack depth: 6328 bytes left [ 54.470700][ T4391] veth0_macvtap: entered promiscuous mode [ 54.488111][ T4391] veth1_macvtap: entered promiscuous mode [ 54.508462][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.519021][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.528891][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.539347][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.550526][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.558910][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.569650][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.579514][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.589960][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.600637][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.618553][ T4391] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.619640][ T4719] netlink: 'syz.2.313': attribute type 4 has an invalid length. [ 54.627467][ T4391] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.627510][ T4391] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.652878][ T4391] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.671858][ T4437] veth0_vlan: entered promiscuous mode [ 54.686478][ T4437] veth1_vlan: entered promiscuous mode [ 54.726870][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.759654][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.798287][ T4437] veth0_macvtap: entered promiscuous mode [ 54.814747][ T4437] veth1_macvtap: entered promiscuous mode [ 54.849404][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.860010][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.870136][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.880683][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.890677][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.901171][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.912822][ T4437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.921788][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.932343][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.942264][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.952897][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.962837][ T4437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.973423][ T4437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.986374][ T4763] loop0: detected capacity change from 0 to 512 [ 54.994707][ T4763] EXT4-fs: Ignoring removed oldalloc option [ 55.001589][ T4437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.008950][ T4763] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.030078][ T4437] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.038981][ T4437] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.047792][ T4437] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.056644][ T4437] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.067047][ T4766] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 55.081966][ T4763] EXT4-fs (loop0): 1 truncate cleaned up [ 55.088199][ T4763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.162161][ T4756] bond1: entered promiscuous mode [ 55.167276][ T4756] bond1: entered allmulticast mode [ 55.187937][ T4756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.198531][ T4756] bond1 (unregistering): Released all slaves [ 55.296662][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.350904][ T4793] loop5: detected capacity change from 0 to 512 [ 55.381543][ T4793] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 55.644791][ T4809] xt_hashlimit: max too large, truncated to 1048576 [ 55.969618][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.026554][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.274183][ T4828] loop0: detected capacity change from 0 to 1024 [ 56.282571][ T4828] ext4: Unknown parameter 'fowner>00000000000000000000' [ 56.293510][ T4828] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.331'. [ 56.352935][ T4832] loop5: detected capacity change from 0 to 512 [ 56.363957][ T4832] EXT4-fs: Ignoring removed nobh option [ 56.377164][ T4832] ext4: Bad value for 'sb' [ 56.397015][ T4832] netlink: 16 bytes leftover after parsing attributes in process `syz.5.332'. [ 56.777892][ T4809] Cannot find set identified by id 0 to match [ 57.496770][ T4865] loop1: detected capacity change from 0 to 1024 [ 57.530685][ T4865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.764135][ T4873] Invalid ELF header magic: != ELF [ 57.832867][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 57.832887][ T29] audit: type=1400 audit(1736291281.192:1525): avc: denied { ioctl } for pid=4876 comm="syz.6.343" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8154 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.837677][ T4880] loop5: detected capacity change from 0 to 512 [ 57.892718][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.910704][ T4880] EXT4-fs: Ignoring removed oldalloc option [ 57.923724][ T4880] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.344: Parent and EA inode have the same ino 15 [ 57.939306][ T4880] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.344: Parent and EA inode have the same ino 15 [ 57.959538][ T29] audit: type=1326 audit(1736291281.312:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.6.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c6ad5d29 code=0x7ffc0000 [ 57.984845][ T29] audit: type=1326 audit(1736291281.312:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.6.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c6ad5d29 code=0x7ffc0000 [ 58.008569][ T29] audit: type=1326 audit(1736291281.312:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.6.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5c6ad5d29 code=0x7ffc0000 [ 58.010129][ T4880] EXT4-fs (loop5): 1 orphan inode deleted [ 58.031929][ T29] audit: type=1326 audit(1736291281.312:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.6.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c6ad5d29 code=0x7ffc0000 [ 58.032012][ T29] audit: type=1326 audit(1736291281.312:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.6.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c6ad5d29 code=0x7ffc0000 [ 58.032046][ T29] audit: type=1326 audit(1736291281.312:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.6.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5c6ad5d29 code=0x7ffc0000 [ 58.111965][ T29] audit: type=1326 audit(1736291281.442:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.6.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c6ad5d29 code=0x7ffc0000 [ 58.113022][ T4887] loop1: detected capacity change from 0 to 512 [ 58.135343][ T29] audit: type=1326 audit(1736291281.442:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.6.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c6ad5d29 code=0x7ffc0000 [ 58.143782][ T4880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.177853][ T29] audit: type=1326 audit(1736291281.522:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.6.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fb5c6ad5d29 code=0x7ffc0000 [ 58.223136][ T4391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.234774][ T4887] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 58.403928][ T4902] netlink: 'syz.1.351': attribute type 13 has an invalid length. [ 58.411788][ T4902] netlink: 152 bytes leftover after parsing attributes in process `syz.1.351'. [ 58.441177][ T4902] syz_tun: refused to change device tx_queue_len [ 58.447673][ T4902] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 58.996591][ T4930] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 59.017874][ T4930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.311469][ T4937] loop1: detected capacity change from 0 to 512 [ 59.327898][ T4937] EXT4-fs: Ignoring removed oldalloc option [ 59.385392][ T4937] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.358: Parent and EA inode have the same ino 15 [ 59.424241][ T4937] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.358: Parent and EA inode have the same ino 15 [ 59.469312][ T4937] EXT4-fs (loop1): 1 orphan inode deleted [ 59.639408][ T4942] : port 1(team0) entered blocking state [ 59.645299][ T4942] : port 1(team0) entered disabled state [ 59.653530][ T4942] team0: entered allmulticast mode [ 59.658701][ T4942] team_slave_0: entered allmulticast mode [ 59.664526][ T4942] team_slave_1: entered allmulticast mode [ 59.673877][ T4942] team0: entered promiscuous mode [ 59.678968][ T4942] team_slave_0: entered promiscuous mode [ 59.684784][ T4942] team_slave_1: entered promiscuous mode [ 59.837236][ T4952] netlink: 2160 bytes leftover after parsing attributes in process `syz.1.363'. [ 59.846420][ T4952] netlink: 2160 bytes leftover after parsing attributes in process `syz.1.363'. [ 59.890187][ T4956] loop5: detected capacity change from 0 to 128 [ 59.953434][ T4960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.962209][ T4960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.017669][ T50] kworker/u8:3: attempt to access beyond end of device [ 60.017669][ T50] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 60.514069][ T4968] loop5: detected capacity change from 0 to 512 [ 60.521622][ T4968] EXT4-fs: Ignoring removed oldalloc option [ 60.530681][ T4968] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.369: Parent and EA inode have the same ino 15 [ 60.543319][ T4968] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.369: Parent and EA inode have the same ino 15 [ 60.566419][ T4968] EXT4-fs (loop5): 1 orphan inode deleted [ 60.577664][ T4971] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.605982][ T4973] syz.5.371[4973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.606134][ T4973] syz.5.371[4973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.628934][ T4971] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.633282][ T4973] syz.5.371[4973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.684415][ T4971] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.752702][ T4971] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.765654][ T4973] 9pnet_fd: Insufficient options for proto=fd [ 60.780148][ T4973] geneve0: entered allmulticast mode [ 60.813459][ T4971] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.841824][ T4978] loop5: detected capacity change from 0 to 512 [ 60.850158][ T4971] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.860592][ T4978] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (9) [ 60.878099][ T4971] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.900224][ T4971] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.918791][ T4978] loop5: detected capacity change from 0 to 2048 [ 60.980748][ T4978] loop5: p1 < > p2 < > p3 p4 [ 60.985477][ T4978] loop5: partition table partially beyond EOD, truncated [ 60.994487][ T4978] loop5: p1 start 2305 is beyond EOD, truncated [ 61.000848][ T4978] loop5: p2 start 4294902784 is beyond EOD, truncated [ 61.006412][ T4987] loop1: detected capacity change from 0 to 512 [ 61.007712][ T4978] loop5: p3 start 3724543488 is beyond EOD, truncated [ 61.015354][ T4987] EXT4-fs: Ignoring removed nobh option [ 61.021114][ T4978] loop5: p4 size 8192 extends beyond EOD, truncated [ 61.049010][ T4987] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 61.060644][ T4987] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.067465][ T4987] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.375: Failed to acquire dquot type 1 [ 61.079360][ T4987] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.375: bg 0: block 40: padding at end of block bitmap is not set [ 61.094622][ T4987] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 61.103872][ T4987] EXT4-fs (loop1): 1 truncate cleaned up [ 61.214658][ T4999] loop5: detected capacity change from 0 to 128 [ 61.223335][ T4999] vfat: Unknown parameter './file0' [ 61.237828][ T4999] netlink: 64 bytes leftover after parsing attributes in process `syz.5.379'. [ 61.355193][ T5010] loop1: detected capacity change from 0 to 512 [ 61.373092][ T5010] EXT4-fs: Ignoring removed oldalloc option [ 61.396157][ T5010] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.381: Parent and EA inode have the same ino 15 [ 61.408715][ T5010] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.381: Parent and EA inode have the same ino 15 [ 61.423089][ T5010] EXT4-fs (loop1): 1 orphan inode deleted [ 61.445608][ T5015] FAULT_INJECTION: forcing a failure. [ 61.445608][ T5015] name failslab, interval 1, probability 0, space 0, times 1 [ 61.458347][ T5015] CPU: 1 UID: 0 PID: 5015 Comm: syz.0.382 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 61.469020][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.473540][ T5017] loop5: detected capacity change from 0 to 512 [ 61.479084][ T5015] Call Trace: [ 61.488667][ T5015] [ 61.491629][ T5015] dump_stack_lvl+0xf2/0x150 [ 61.496264][ T5015] dump_stack+0x15/0x1a [ 61.500449][ T5015] should_fail_ex+0x223/0x230 [ 61.505191][ T5015] should_failslab+0x8f/0xb0 [ 61.509810][ T5015] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 61.515596][ T5015] ? shmem_alloc_inode+0x34/0x50 [ 61.520573][ T5015] shmem_alloc_inode+0x34/0x50 [ 61.525448][ T5015] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 61.530928][ T5015] alloc_inode+0x3c/0x160 [ 61.535336][ T5015] new_inode+0x1e/0x100 [ 61.539502][ T5015] shmem_get_inode+0x24e/0x730 [ 61.544284][ T5015] __shmem_file_setup+0x127/0x1f0 [ 61.549324][ T5015] shmem_file_setup+0x3b/0x50 [ 61.554017][ T5015] __se_sys_memfd_create+0x31d/0x5c0 [ 61.559372][ T5015] __x64_sys_memfd_create+0x31/0x40 [ 61.564631][ T5015] x64_sys_call+0x2d4c/0x2dc0 [ 61.569327][ T5015] do_syscall_64+0xc9/0x1c0 [ 61.573892][ T5015] ? clear_bhb_loop+0x55/0xb0 [ 61.578585][ T5015] ? clear_bhb_loop+0x55/0xb0 [ 61.583276][ T5015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.589208][ T5015] RIP: 0033:0x7f16a8295d29 [ 61.593637][ T5015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.613261][ T5015] RSP: 002b:00007f16a6900e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 61.621835][ T5015] RAX: ffffffffffffffda RBX: 00000000000004fa RCX: 00007f16a8295d29 [ 61.629831][ T5015] RDX: 00007f16a6900ef0 RSI: 0000000000000000 RDI: 00007f16a8312469 [ 61.637844][ T5015] RBP: 0000000020000ac0 R08: 00007f16a6900bb7 R09: 00007f16a6900e40 [ 61.645858][ T5015] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000400 [ 61.653902][ T5015] R13: 00007f16a6900ef0 R14: 00007f16a6900eb0 R15: 0000000020000880 [ 61.661951][ T5015] [ 61.672729][ T5017] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.681893][ T5017] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 61.708160][ T5017] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 61.723516][ T5017] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 61.731886][ T5017] System zones: 0-2, 18-18, 34-34 [ 61.742260][ T5023] loop1: detected capacity change from 0 to 512 [ 61.748670][ T5017] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 61.770831][ T5025] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 61.775431][ T5023] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 61.782753][ T5017] EXT4-fs (loop5): 1 truncate cleaned up [ 61.803495][ T5025] bond1: entered promiscuous mode [ 61.808617][ T5025] bond1: entered allmulticast mode [ 61.814318][ T5025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.899004][ T5030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.388'. [ 61.907968][ T5030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.388'. [ 61.970424][ T5030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.388'. [ 62.047146][ T5045] loop0: detected capacity change from 0 to 1024 [ 62.076512][ T5030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.388'. [ 62.085505][ T5030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.388'. [ 62.106327][ T5045] IPVS: Error connecting to the multicast addr [ 62.135901][ T5049] netlink: 'syz.2.392': attribute type 4 has an invalid length. [ 62.182473][ T5049] loop2: detected capacity change from 0 to 512 [ 62.206715][ T5049] EXT4-fs: Mount option(s) incompatible with ext2 [ 62.361558][ T5017] Set syz1 is full, maxelem 65536 reached [ 62.364911][ T5053] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.375883][ T5053] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.384349][ T5053] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.392862][ T5053] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.401532][ T5053] geneve1: left promiscuous mode [ 62.472996][ T5066] FAULT_INJECTION: forcing a failure. [ 62.472996][ T5066] name failslab, interval 1, probability 0, space 0, times 0 [ 62.485900][ T5066] CPU: 1 UID: 0 PID: 5066 Comm: syz.1.397 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 62.496617][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.506704][ T5066] Call Trace: [ 62.510022][ T5066] [ 62.513021][ T5066] dump_stack_lvl+0xf2/0x150 [ 62.517731][ T5066] dump_stack+0x15/0x1a [ 62.521933][ T5066] should_fail_ex+0x223/0x230 [ 62.526697][ T5066] should_failslab+0x8f/0xb0 [ 62.531316][ T5066] kmem_cache_alloc_noprof+0x52/0x320 [ 62.536706][ T5066] ? security_inode_alloc+0x37/0x100 [ 62.542023][ T5066] security_inode_alloc+0x37/0x100 [ 62.547235][ T5066] inode_init_always_gfp+0x4a2/0x4f0 [ 62.552576][ T5066] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 62.558165][ T5066] alloc_inode+0x82/0x160 [ 62.562506][ T5066] new_inode+0x1e/0x100 [ 62.566700][ T5066] shmem_get_inode+0x24e/0x730 [ 62.571497][ T5066] __shmem_file_setup+0x127/0x1f0 [ 62.576546][ T5066] shmem_file_setup+0x3b/0x50 [ 62.581247][ T5066] __se_sys_memfd_create+0x31d/0x5c0 [ 62.586637][ T5066] __x64_sys_memfd_create+0x31/0x40 [ 62.591901][ T5066] x64_sys_call+0x2d4c/0x2dc0 [ 62.596615][ T5066] do_syscall_64+0xc9/0x1c0 [ 62.601129][ T5066] ? clear_bhb_loop+0x55/0xb0 [ 62.605862][ T5066] ? clear_bhb_loop+0x55/0xb0 [ 62.610550][ T5066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.616503][ T5066] RIP: 0033:0x7fccfd1e5d29 [ 62.620925][ T5066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.640643][ T5066] RSP: 002b:00007fccfb856e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 62.649071][ T5066] RAX: ffffffffffffffda RBX: 00000000000004fa RCX: 00007fccfd1e5d29 [ 62.657054][ T5066] RDX: 00007fccfb856ef0 RSI: 0000000000000000 RDI: 00007fccfd262469 [ 62.665035][ T5066] RBP: 0000000020000ac0 R08: 00007fccfb856bb7 R09: 00007fccfb856e40 [ 62.673020][ T5066] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000400 [ 62.681070][ T5066] R13: 00007fccfb856ef0 R14: 00007fccfb856eb0 R15: 0000000020000880 [ 62.689059][ T5066] [ 62.754574][ T5072] loop1: detected capacity change from 0 to 512 [ 62.762954][ T5072] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 62.928409][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 62.928428][ T29] audit: type=1400 audit(1736291286.282:1927): avc: denied { write } for pid=5080 comm="syz.1.404" name="vlan0" dev="proc" ino=4026533251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 62.991081][ T5081] @: renamed from vlan0 (while UP) [ 62.996501][ T29] audit: type=1400 audit(1736291286.352:1928): avc: denied { ioctl } for pid=5080 comm="syz.1.404" path="socket:[10486]" dev="sockfs" ino=10486 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.047975][ T29] audit: type=1400 audit(1736291286.402:1929): avc: granted { setsecparam } for pid=5080 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 63.215622][ T5086] tun0: tun_chr_ioctl cmd 1074025692 [ 63.248687][ T29] audit: type=1400 audit(1736291286.602:1930): avc: denied { read write } for pid=5085 comm="syz.2.405" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.284907][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.292791][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.300612][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.308443][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.316234][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.324057][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.331847][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.336749][ T29] audit: type=1400 audit(1736291286.632:1931): avc: denied { open } for pid=5085 comm="syz.2.405" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.339672][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.370688][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.378440][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.386252][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.394042][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.401940][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.409764][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.417738][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.425629][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.433554][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.441366][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.449211][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.450433][ T29] audit: type=1400 audit(1736291286.802:1932): avc: denied { mount } for pid=5087 comm="syz.5.406" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 63.456973][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.486329][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.494173][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.496620][ T29] audit: type=1400 audit(1736291286.852:1933): avc: denied { unmount } for pid=4391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 63.501983][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.529825][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.537689][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.545664][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.553549][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.561344][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.569103][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.576898][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.584704][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.592521][ T3375] hid-generic 0000:200003C0:0000.0001: unknown main item tag 0x0 [ 63.654382][ T3375] hid-generic 0000:200003C0:0000.0001: hidraw0: HID v200000.40 Device [sy] on syz0 [ 63.686680][ T5099] loop0: detected capacity change from 0 to 512 [ 63.696425][ T5097] SELinux: policydb version 0 does not match my version range 15-33 [ 63.706612][ T29] audit: type=1400 audit(1736291287.052:1934): avc: denied { load_policy } for pid=5096 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.725612][ T5097] SELinux: failed to load policy [ 63.726792][ T29] audit: type=1400 audit(1736291287.062:1935): avc: denied { setopt } for pid=5093 comm="syz.5.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.755269][ T5098] loop1: detected capacity change from 0 to 128 [ 63.771459][ T5098] /dev/loop1: Can't open blockdev [ 63.779641][ T5099] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.780826][ T29] audit: type=1400 audit(1736291287.132:1936): avc: denied { setopt } for pid=5096 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.868082][ T5109] loop1: detected capacity change from 0 to 512 [ 63.876685][ T5109] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 63.889568][ T5111] loop2: detected capacity change from 0 to 512 [ 63.904220][ T5111] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.928634][ T5111] EXT4-fs (loop2): 1 truncate cleaned up [ 63.983535][ T5113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.006150][ T5113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.051119][ T5127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.059823][ T5127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.130927][ T5136] loop1: detected capacity change from 0 to 512 [ 64.144417][ T5136] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 64.239076][ T5142] mmap: syz.1.424 (5142) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.321652][ T5152] loop1: detected capacity change from 0 to 512 [ 64.328615][ T5152] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 64.626908][ T5180] FAULT_INJECTION: forcing a failure. [ 64.626908][ T5180] name failslab, interval 1, probability 0, space 0, times 0 [ 64.639974][ T5180] CPU: 1 UID: 0 PID: 5180 Comm: syz.0.431 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 64.650621][ T5180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.660785][ T5180] Call Trace: [ 64.664094][ T5180] [ 64.667050][ T5180] dump_stack_lvl+0xf2/0x150 [ 64.671891][ T5180] dump_stack+0x15/0x1a [ 64.676093][ T5180] should_fail_ex+0x223/0x230 [ 64.680866][ T5180] should_failslab+0x8f/0xb0 [ 64.685603][ T5180] kmem_cache_alloc_noprof+0x52/0x320 [ 64.691016][ T5180] ? alloc_empty_file+0xd0/0x200 [ 64.695985][ T5180] ? _raw_spin_unlock+0x26/0x50 [ 64.700940][ T5180] alloc_empty_file+0xd0/0x200 [ 64.705749][ T5180] alloc_file_pseudo+0xc3/0x140 [ 64.710657][ T5180] __shmem_file_setup+0x1bb/0x1f0 [ 64.715724][ T5180] shmem_file_setup+0x3b/0x50 [ 64.720416][ T5180] __se_sys_memfd_create+0x31d/0x5c0 [ 64.725730][ T5180] __x64_sys_memfd_create+0x31/0x40 [ 64.730991][ T5180] x64_sys_call+0x2d4c/0x2dc0 [ 64.735684][ T5180] do_syscall_64+0xc9/0x1c0 [ 64.740203][ T5180] ? clear_bhb_loop+0x55/0xb0 [ 64.745016][ T5180] ? clear_bhb_loop+0x55/0xb0 [ 64.749746][ T5180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.755690][ T5180] RIP: 0033:0x7f16a8295d29 [ 64.760120][ T5180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.779771][ T5180] RSP: 002b:00007f16a6900e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 64.788376][ T5180] RAX: ffffffffffffffda RBX: 00000000000004fa RCX: 00007f16a8295d29 [ 64.796368][ T5180] RDX: 00007f16a6900ef0 RSI: 0000000000000000 RDI: 00007f16a8312469 [ 64.804351][ T5180] RBP: 0000000020000ac0 R08: 00007f16a6900bb7 R09: 00007f16a6900e40 [ 64.812346][ T5180] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000400 [ 64.820484][ T5180] R13: 00007f16a6900ef0 R14: 00007f16a6900eb0 R15: 0000000020000880 [ 64.828558][ T5180] [ 64.869393][ T5184] loop1: detected capacity change from 0 to 512 [ 64.958277][ T5184] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.432: corrupted in-inode xattr: invalid ea_ino [ 65.054510][ T5201] loop5: detected capacity change from 0 to 256 [ 65.084584][ T5201] msdos: Unknown parameter '0x0000000000000005' [ 65.104895][ T5184] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.432: couldn't read orphan inode 15 (err -117) [ 65.170907][ T5203] netlink: 'syz.0.439': attribute type 3 has an invalid length. [ 65.234555][ T5201] new mount options do not match the existing superblock, will be ignored [ 65.403517][ T5213] hsr_slave_0: left promiscuous mode [ 65.420806][ T5213] hsr_slave_1: left promiscuous mode [ 65.558639][ T5221] FAULT_INJECTION: forcing a failure. [ 65.558639][ T5221] name failslab, interval 1, probability 0, space 0, times 0 [ 65.571375][ T5221] CPU: 1 UID: 0 PID: 5221 Comm: syz.0.444 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 65.582080][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.592174][ T5221] Call Trace: [ 65.595520][ T5221] [ 65.598518][ T5221] dump_stack_lvl+0xf2/0x150 [ 65.603162][ T5221] dump_stack+0x15/0x1a [ 65.607397][ T5221] should_fail_ex+0x223/0x230 [ 65.612111][ T5221] should_failslab+0x8f/0xb0 [ 65.616754][ T5221] kmem_cache_alloc_noprof+0x52/0x320 [ 65.622251][ T5221] ? security_file_alloc+0x32/0x100 [ 65.627568][ T5221] security_file_alloc+0x32/0x100 [ 65.632665][ T5221] init_file+0x5b/0x1b0 [ 65.636903][ T5221] alloc_empty_file+0xea/0x200 [ 65.641763][ T5221] alloc_file_pseudo+0xc3/0x140 [ 65.646708][ T5221] __shmem_file_setup+0x1bb/0x1f0 [ 65.651777][ T5221] shmem_file_setup+0x3b/0x50 [ 65.656581][ T5221] __se_sys_memfd_create+0x31d/0x5c0 [ 65.661988][ T5221] __x64_sys_memfd_create+0x31/0x40 [ 65.667307][ T5221] x64_sys_call+0x2d4c/0x2dc0 [ 65.672041][ T5221] do_syscall_64+0xc9/0x1c0 [ 65.676581][ T5221] ? clear_bhb_loop+0x55/0xb0 [ 65.681365][ T5221] ? clear_bhb_loop+0x55/0xb0 [ 65.686089][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.692093][ T5221] RIP: 0033:0x7f16a8295d29 [ 65.696535][ T5221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.716281][ T5221] RSP: 002b:00007f16a6900e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 65.724789][ T5221] RAX: ffffffffffffffda RBX: 00000000000004fa RCX: 00007f16a8295d29 [ 65.732781][ T5221] RDX: 00007f16a6900ef0 RSI: 0000000000000000 RDI: 00007f16a8312469 [ 65.740778][ T5221] RBP: 0000000020000ac0 R08: 00007f16a6900bb7 R09: 00007f16a6900e40 [ 65.748945][ T5221] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000400 [ 65.756939][ T5221] R13: 00007f16a6900ef0 R14: 00007f16a6900eb0 R15: 0000000020000880 [ 65.764972][ T5221] [ 65.791480][ T5223] loop5: detected capacity change from 0 to 256 [ 65.956813][ T5244] loop0: detected capacity change from 0 to 512 [ 66.004361][ T5244] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.075130][ T5244] netlink: 'syz.0.450': attribute type 3 has an invalid length. [ 66.082884][ T5244] __nla_validate_parse: 6 callbacks suppressed [ 66.082897][ T5244] netlink: 132 bytes leftover after parsing attributes in process `syz.0.450'. [ 66.163031][ T5244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.450'. [ 66.205652][ T5264] SELinux: failed to load policy [ 66.408810][ T5285] loop1: detected capacity change from 0 to 1764 [ 66.553651][ T5287] loop0: detected capacity change from 0 to 256 [ 66.592071][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 66.637958][ T5287] hsr_slave_1 (unregistering): left promiscuous mode [ 66.684140][ T5290] loop5: detected capacity change from 0 to 8192 [ 66.700513][ T5290] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.794256][ T5310] FAULT_INJECTION: forcing a failure. [ 66.794256][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 66.806953][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.0.458 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 66.817611][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.827757][ T5310] Call Trace: [ 66.831069][ T5310] [ 66.834032][ T5310] dump_stack_lvl+0xf2/0x150 [ 66.838701][ T5310] dump_stack+0x15/0x1a [ 66.842903][ T5310] should_fail_ex+0x223/0x230 [ 66.847607][ T5310] should_failslab+0x8f/0xb0 [ 66.852252][ T5310] kmem_cache_alloc_noprof+0x52/0x320 [ 66.857666][ T5310] ? vm_area_alloc+0x2c/0x130 [ 66.862428][ T5310] vm_area_alloc+0x2c/0x130 [ 66.866957][ T5310] __mmap_region+0x6b5/0x1400 [ 66.871684][ T5310] mmap_region+0x164/0x1e0 [ 66.876184][ T5310] do_mmap+0x732/0xbb0 [ 66.880301][ T5310] vm_mmap_pgoff+0x133/0x290 [ 66.884963][ T5310] ksys_mmap_pgoff+0xd0/0x330 [ 66.889666][ T5310] ? fpregs_assert_state_consistent+0x83/0xa0 [ 66.895839][ T5310] x64_sys_call+0x1940/0x2dc0 [ 66.900566][ T5310] do_syscall_64+0xc9/0x1c0 [ 66.905083][ T5310] ? clear_bhb_loop+0x55/0xb0 [ 66.909852][ T5310] ? clear_bhb_loop+0x55/0xb0 [ 66.914568][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.920596][ T5310] RIP: 0033:0x7f16a8295d63 [ 66.925023][ T5310] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 66.944770][ T5310] RSP: 002b:00007f16a6900e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 66.953228][ T5310] RAX: ffffffffffffffda RBX: 00000000000004f8 RCX: 00007f16a8295d63 [ 66.961276][ T5310] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 66.969261][ T5310] RBP: 0000000020000ac2 R08: 00000000ffffffff R09: 0000000000000000 [ 66.977268][ T5310] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 66.985257][ T5310] R13: 00007f16a6900ef0 R14: 00007f16a6900eb0 R15: 0000000020000880 [ 66.993247][ T5310] [ 67.147752][ T5327] loop1: detected capacity change from 0 to 256 [ 67.279978][ T5332] infiniband syz!: set down [ 67.284632][ T5332] infiniband syz!: added team_slave_0 [ 67.339373][ T5332] RDS/IB: syz!: added [ 67.345975][ T5332] smc: adding ib device syz! with port count 1 [ 67.350719][ T5327] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 67.353181][ T5332] smc: ib device syz! port 1 has pnetid [ 67.360817][ T5327] FAT-fs (loop1): Filesystem has been set read-only [ 67.493091][ T5368] xt_hashlimit: max too large, truncated to 1048576 [ 67.512794][ T5368] Cannot find set identified by id 0 to match [ 67.620622][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.680411][ T5383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.691640][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.701608][ T5377] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 67.710008][ T5377] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 67.725412][ T5383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.748096][ T5377] sd 0:0:1:0: device reset [ 67.758371][ T5377] netlink: 228 bytes leftover after parsing attributes in process `+}[@'. [ 67.799513][ T5383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.851369][ T5383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.365835][ T5419] FAULT_INJECTION: forcing a failure. [ 68.365835][ T5419] name failslab, interval 1, probability 0, space 0, times 0 [ 68.378641][ T5419] CPU: 1 UID: 0 PID: 5419 Comm: syz.2.475 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 68.389246][ T5419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.399352][ T5419] Call Trace: [ 68.402670][ T5419] [ 68.405621][ T5419] dump_stack_lvl+0xf2/0x150 [ 68.410359][ T5419] dump_stack+0x15/0x1a [ 68.414553][ T5419] should_fail_ex+0x223/0x230 [ 68.419267][ T5419] should_failslab+0x8f/0xb0 [ 68.423879][ T5419] kmem_cache_alloc_noprof+0x52/0x320 [ 68.429267][ T5419] ? vm_area_alloc+0xac/0x130 [ 68.434073][ T5419] vm_area_alloc+0xac/0x130 [ 68.438644][ T5419] __mmap_region+0x6b5/0x1400 [ 68.443371][ T5419] mmap_region+0x164/0x1e0 [ 68.447844][ T5419] do_mmap+0x732/0xbb0 [ 68.451942][ T5419] vm_mmap_pgoff+0x133/0x290 [ 68.456567][ T5419] ksys_mmap_pgoff+0xd0/0x330 [ 68.461299][ T5419] ? fpregs_assert_state_consistent+0x83/0xa0 [ 68.467460][ T5419] x64_sys_call+0x1940/0x2dc0 [ 68.472202][ T5419] do_syscall_64+0xc9/0x1c0 [ 68.476765][ T5419] ? clear_bhb_loop+0x55/0xb0 [ 68.481484][ T5419] ? clear_bhb_loop+0x55/0xb0 [ 68.486253][ T5419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.492271][ T5419] RIP: 0033:0x7f558fed5d63 [ 68.496700][ T5419] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 68.516389][ T5419] RSP: 002b:00007f558e546e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 68.524865][ T5419] RAX: ffffffffffffffda RBX: 00000000000004f8 RCX: 00007f558fed5d63 [ 68.532896][ T5419] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 68.540898][ T5419] RBP: 0000000020000ac2 R08: 00000000ffffffff R09: 0000000000000000 [ 68.548972][ T5419] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 68.556986][ T5419] R13: 00007f558e546ef0 R14: 00007f558e546eb0 R15: 0000000020000880 [ 68.565032][ T5419] [ 68.660442][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 68.660460][ T29] audit: type=1326 audit(1736291292.012:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558fed5d29 code=0x7ffc0000 [ 68.715897][ T29] audit: type=1326 audit(1736291292.022:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f558fed5d29 code=0x7ffc0000 [ 68.738943][ T29] audit: type=1326 audit(1736291292.022:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558fed5d29 code=0x7ffc0000 [ 68.761922][ T29] audit: type=1326 audit(1736291292.022:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f558fed5d29 code=0x7ffc0000 [ 68.784906][ T29] audit: type=1326 audit(1736291292.022:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558fed5d29 code=0x7ffc0000 [ 68.808204][ T29] audit: type=1326 audit(1736291292.022:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f558fed5d29 code=0x7ffc0000 [ 68.831231][ T29] audit: type=1326 audit(1736291292.022:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558fed5d29 code=0x7ffc0000 [ 68.854571][ T29] audit: type=1326 audit(1736291292.022:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f558fed5d29 code=0x7ffc0000 [ 68.879280][ T29] audit: type=1326 audit(1736291292.022:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558fed5d29 code=0x7ffc0000 [ 68.902267][ T29] audit: type=1326 audit(1736291292.022:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f558fed5d29 code=0x7ffc0000 [ 68.911669][ T5432] program syz.1.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.021038][ T5436] pimreg: entered allmulticast mode [ 69.190910][ T5441] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.198313][ T5441] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 69.379689][ T5450] ip6erspan0: entered promiscuous mode [ 69.385241][ T5450] ip6erspan0: entered allmulticast mode [ 69.477139][ T5453] FAULT_INJECTION: forcing a failure. [ 69.477139][ T5453] name failslab, interval 1, probability 0, space 0, times 0 [ 69.489880][ T5453] CPU: 0 UID: 0 PID: 5453 Comm: syz.0.487 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 69.500476][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.510543][ T5453] Call Trace: [ 69.513849][ T5453] [ 69.516793][ T5453] dump_stack_lvl+0xf2/0x150 [ 69.521440][ T5453] dump_stack+0x15/0x1a [ 69.525662][ T5453] should_fail_ex+0x223/0x230 [ 69.530433][ T5453] should_failslab+0x8f/0xb0 [ 69.535067][ T5453] kmem_cache_alloc_noprof+0x52/0x320 [ 69.540467][ T5453] ? mas_alloc_nodes+0x1e3/0x490 [ 69.545486][ T5453] mas_alloc_nodes+0x1e3/0x490 [ 69.550285][ T5453] mas_preallocate+0x44a/0x650 [ 69.555099][ T5453] __mmap_region+0x809/0x1400 [ 69.559863][ T5453] mmap_region+0x164/0x1e0 [ 69.564397][ T5453] do_mmap+0x732/0xbb0 [ 69.568527][ T5453] vm_mmap_pgoff+0x133/0x290 [ 69.573170][ T5453] ksys_mmap_pgoff+0xd0/0x330 [ 69.577939][ T5453] ? fpregs_assert_state_consistent+0x83/0xa0 [ 69.584049][ T5453] x64_sys_call+0x1940/0x2dc0 [ 69.588834][ T5453] do_syscall_64+0xc9/0x1c0 [ 69.593383][ T5453] ? clear_bhb_loop+0x55/0xb0 [ 69.598124][ T5453] ? clear_bhb_loop+0x55/0xb0 [ 69.602836][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.608803][ T5453] RIP: 0033:0x7f16a8295d63 [ 69.613289][ T5453] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 69.632984][ T5453] RSP: 002b:00007f16a6900e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 69.641450][ T5453] RAX: ffffffffffffffda RBX: 00000000000004f8 RCX: 00007f16a8295d63 [ 69.649459][ T5453] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 69.657460][ T5453] RBP: 0000000020000ac2 R08: 00000000ffffffff R09: 0000000000000000 [ 69.665438][ T5453] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 69.673416][ T5453] R13: 00007f16a6900ef0 R14: 00007f16a6900eb0 R15: 0000000020000880 [ 69.681400][ T5453] [ 69.790988][ T5434] pimreg: left allmulticast mode [ 70.019563][ T5472] loop5: detected capacity change from 0 to 512 [ 70.059130][ T5472] EXT4-fs: Ignoring removed oldalloc option [ 70.081150][ T5472] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.493: Parent and EA inode have the same ino 15 [ 70.121451][ T5472] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.493: Parent and EA inode have the same ino 15 [ 70.156562][ T5472] EXT4-fs (loop5): 1 orphan inode deleted [ 70.177824][ T5472] EXT4-fs mount: 18 callbacks suppressed [ 70.177839][ T5472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.273309][ T4391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.381945][ T5486] loop5: detected capacity change from 0 to 1024 [ 70.473165][ T5486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.536735][ T4391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.568674][ T5494] loop1: detected capacity change from 0 to 2048 [ 70.620782][ T2999] loop1: p1 < > p4 [ 70.625177][ T2999] loop1: p4 size 8388608 extends beyond EOD, truncated [ 70.756314][ T5494] loop1: p1 < > p4 [ 70.765933][ T5494] loop1: p4 size 8388608 extends beyond EOD, truncated [ 70.792458][ T5508] FAULT_INJECTION: forcing a failure. [ 70.792458][ T5508] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 70.805887][ T5508] CPU: 1 UID: 0 PID: 5508 Comm: syz.5.499 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 70.816513][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.826691][ T5508] Call Trace: [ 70.829991][ T5508] [ 70.832963][ T5508] dump_stack_lvl+0xf2/0x150 [ 70.837638][ T5508] dump_stack+0x15/0x1a [ 70.841921][ T5508] should_fail_ex+0x223/0x230 [ 70.846698][ T5508] should_fail_alloc_page+0xfd/0x110 [ 70.852013][ T5508] __alloc_pages_noprof+0x109/0x340 [ 70.857321][ T5508] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 70.862732][ T5508] alloc_pages_noprof+0xe1/0x100 [ 70.867765][ T5508] pte_alloc_one+0x31/0x110 [ 70.872293][ T5508] __pte_alloc+0x33/0x2a0 [ 70.876725][ T5508] handle_mm_fault+0x1b4a/0x2ac0 [ 70.881691][ T5508] exc_page_fault+0x3b9/0x650 [ 70.886396][ T5508] asm_exc_page_fault+0x26/0x30 [ 70.891262][ T5508] RIP: 0033:0x7f56da5c8c46 [ 70.895767][ T5508] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 70.915409][ T5508] RSP: 002b:00007f56d8d764a0 EFLAGS: 00010246 [ 70.921489][ T5508] RAX: 0000000000000001 RBX: 00007f56d8d76540 RCX: 0000000000000101 [ 70.929475][ T5508] RDX: 0000000000000030 RSI: 0000000000000001 RDI: 00007f56d8d765e0 [ 70.937575][ T5508] RBP: 0000000000000102 R08: 00007f56d0957000 R09: 0000000000000000 [ 70.945649][ T5508] R10: 0000000000000000 R11: 00007f56d8d76550 R12: 0000000000000001 [ 70.953630][ T5508] R13: 00007f56da799040 R14: 0000000000000000 R15: 00007f56d8d765e0 [ 70.961623][ T5508] [ 70.964795][ T5508] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 70.978694][ T5508] loop5: detected capacity change from 0 to 512 [ 71.000280][ T5508] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 71.005864][ T5511] loop1: detected capacity change from 0 to 1024 [ 71.018800][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 71.034222][ T5511] EXT4-fs: Ignoring removed orlov option [ 71.039945][ T5511] EXT4-fs: Ignoring removed orlov option [ 71.081747][ T5511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.102292][ T5511] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.1.504: corrupted in-inode xattr: bad magic number in in-inode xattr [ 71.112206][ T5515] loop5: detected capacity change from 0 to 512 [ 71.140704][ T5515] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.150642][ T5511] EXT4-fs (loop1): Remounting filesystem read-only [ 71.174748][ T5515] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.505: bad orphan inode 131083 [ 71.193910][ T5515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.238944][ T5511] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 71.267313][ T5511] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 71.284266][ T5511] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 71.324392][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.422386][ T5531] netlink: 60 bytes leftover after parsing attributes in process `syz.1.510'. [ 71.437587][ T5527] loop0: detected capacity change from 0 to 1764 [ 71.438425][ T4391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.451702][ T5531] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 71.514086][ T5538] loop0: detected capacity change from 0 to 512 [ 71.533697][ T5538] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 71.624974][ T5548] loop0: detected capacity change from 0 to 512 [ 71.644424][ T5548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.662075][ T5554] loop2: detected capacity change from 0 to 512 [ 71.668656][ T5554] EXT4-fs: Ignoring removed nobh option [ 71.698610][ T5548] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.727687][ T5554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.742265][ T5554] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.761289][ T5554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'. [ 71.796264][ T5548] netlink: 'syz.0.515': attribute type 4 has an invalid length. [ 71.825972][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.837125][ T5564] tmpfs: Unknown parameter 'mpo' [ 71.861198][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.941623][ T5573] loop1: detected capacity change from 0 to 512 [ 71.956187][ T5573] EXT4-fs: Ignoring removed oldalloc option [ 71.973204][ T5573] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.520: Parent and EA inode have the same ino 15 [ 71.986024][ T5573] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.520: Parent and EA inode have the same ino 15 [ 71.999005][ T5573] EXT4-fs (loop1): 1 orphan inode deleted [ 72.005369][ T5573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.020114][ T5571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'. [ 72.042839][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.138087][ T5585] loop0: detected capacity change from 0 to 512 [ 72.146917][ T5585] EXT4-fs: dax option not supported [ 72.256248][ T3368] IPVS: starting estimator thread 0... [ 72.350547][ T5593] IPVS: using max 2352 ests per chain, 117600 per kthread [ 72.453283][ T5598] loop5: detected capacity change from 0 to 512 [ 72.540886][ T5598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.607188][ T5598] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.624233][ T5609] loop1: detected capacity change from 0 to 512 [ 72.683361][ T5609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.683469][ T5609] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.686270][ T5598] netlink: 'syz.5.529': attribute type 4 has an invalid length. [ 72.724447][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.789696][ T4391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.838351][ T5619] deleting an unspecified loop device is not supported. [ 72.970368][ T5622] loop5: detected capacity change from 0 to 8192 [ 73.003429][ T5628] netlink: 26 bytes leftover after parsing attributes in process `syz.2.539'. [ 73.003642][ T5630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.539'. [ 73.027199][ T5622] loop5: p1 p2 [ 73.031912][ T5628] netlink: 26 bytes leftover after parsing attributes in process `syz.2.539'. [ 73.033139][ T5622] loop5: p1 start 33556480 is beyond EOD, truncated [ 73.065686][ T5628] netlink: 26 bytes leftover after parsing attributes in process `syz.2.539'. [ 73.099901][ T5628] netlink: 26 bytes leftover after parsing attributes in process `syz.2.539'. [ 73.125061][ T5628] netlink: 26 bytes leftover after parsing attributes in process `syz.2.539'. [ 73.144128][ T5628] netlink: 26 bytes leftover after parsing attributes in process `syz.2.539'. [ 73.324470][ T5638] +}[@[5638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.324624][ T5638] +}[@[5638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.370418][ T5638] +}[@[5638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.588027][ T5644] loop5: detected capacity change from 0 to 512 [ 73.643402][ T5644] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 73.725897][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 73.725914][ T29] audit: type=1400 audit(1736291297.082:2522): avc: denied { bind } for pid=5673 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.776269][ T5644] EXT4-fs (loop5): 1 truncate cleaned up [ 73.807275][ T5677] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 73.827546][ T5644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.905213][ T5685] x_tables: duplicate underflow at hook 3 [ 73.921718][ T5647] chnl_net:caif_netlink_parms(): no params data found [ 74.035630][ T29] audit: type=1400 audit(1736291297.392:2523): avc: denied { getopt } for pid=5695 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.076237][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.080741][ T29] audit: type=1400 audit(1736291297.412:2524): avc: denied { append } for pid=5637 comm="+}[@" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.083470][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.126258][ T5647] bridge_slave_0: entered allmulticast mode [ 74.133645][ T5647] bridge_slave_0: entered promiscuous mode [ 74.162111][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.169401][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.188599][ T5647] bridge_slave_1: entered allmulticast mode [ 74.195370][ T5647] bridge_slave_1: entered promiscuous mode [ 74.212125][ T4391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.234298][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.245281][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.266832][ T5647] team0: Port device team_slave_0 added [ 74.299771][ T5647] team0: Port device team_slave_1 added [ 74.397304][ T5703] loop2: detected capacity change from 0 to 512 [ 74.512226][ T5703] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.519175][ T5703] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 74.535287][ T5703] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 74.542466][ T5703] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.556: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 74.561771][ T5703] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.556: couldn't read orphan inode 13 (err -117) [ 74.575141][ T5703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.596075][ T5703] xt_hashlimit: max too large, truncated to 1048576 [ 74.625328][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.632529][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.658571][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.724186][ T5707] syz.1.558[5707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.724444][ T5707] syz.1.558[5707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.748730][ T5707] syz.1.558[5707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.763678][ T5707] 9pnet_fd: Insufficient options for proto=fd [ 74.790988][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.798129][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.824198][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.864156][ T29] audit: type=1326 audit(1736291298.212:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 74.887767][ T29] audit: type=1326 audit(1736291298.222:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 74.911172][ T29] audit: type=1326 audit(1736291298.222:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16a8294690 code=0x7ffc0000 [ 74.934811][ T29] audit: type=1326 audit(1736291298.222:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 74.958438][ T29] audit: type=1326 audit(1736291298.222:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 74.982039][ T29] audit: type=1326 audit(1736291298.222:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 75.005679][ T29] audit: type=1326 audit(1736291298.222:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f16a8295d29 code=0x7ffc0000 [ 75.055628][ T5730] loop5: detected capacity change from 0 to 128 [ 75.073448][ T5730] syz.5.565: attempt to access beyond end of device [ 75.073448][ T5730] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 75.089058][ T5647] hsr_slave_0: entered promiscuous mode [ 75.095329][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.095964][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.116158][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.125704][ T5647] hsr_slave_1: entered promiscuous mode [ 75.128149][ T5730] syz.5.565: attempt to access beyond end of device [ 75.128149][ T5730] loop5: rw=0, sector=97, nr_sectors = 32 limit=128 [ 75.144627][ T5730] syz.5.565: attempt to access beyond end of device [ 75.144627][ T5730] loop5: rw=0, sector=145, nr_sectors = 3 limit=128 [ 75.158920][ T5647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.158941][ T5647] Cannot create hsr debugfs directory [ 75.171994][ T5732] tipc: Started in network mode [ 75.172025][ T5732] tipc: Node identity ac14140f, cluster identity 4711 [ 75.172235][ T5732] tipc: New replicast peer: 255.255.255.255 [ 75.172452][ T5732] tipc: Enabled bearer , priority 10 [ 75.224708][ T5735] netlink: 'syz.2.566': attribute type 10 has an invalid length. [ 75.290580][ T5647] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 75.299558][ T5647] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 75.309118][ T5647] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 75.322116][ T5647] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 75.364230][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.376505][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.386299][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.393415][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.408157][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.415331][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.434195][ T5647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.444688][ T5647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.502279][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.624995][ T5647] veth0_vlan: entered promiscuous mode [ 75.633976][ T5647] veth1_vlan: entered promiscuous mode [ 75.649836][ T5647] veth0_macvtap: entered promiscuous mode [ 75.666592][ T5647] veth1_macvtap: entered promiscuous mode [ 75.678136][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.688798][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.698660][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.709230][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.719089][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.723735][ T5757] program syz.1.568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.729718][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.748776][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.759278][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.770446][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.781089][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.791751][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.792065][ T5759] FAULT_INJECTION: forcing a failure. [ 75.792065][ T5759] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 75.801657][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.814879][ T5759] CPU: 0 UID: 0 PID: 5759 Comm: syz.1.569 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 75.825315][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.835857][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.835876][ T5759] Call Trace: [ 75.835885][ T5759] [ 75.835893][ T5759] dump_stack_lvl+0xf2/0x150 [ 75.845789][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.855802][ T5759] dump_stack+0x15/0x1a [ 75.855847][ T5759] should_fail_ex+0x223/0x230 [ 75.859116][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.859133][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.862097][ T5759] should_fail_alloc_page+0xfd/0x110 [ 75.866694][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.873647][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.877143][ T5759] __alloc_pages_noprof+0x109/0x340 [ 75.888516][ T5647] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.895792][ T5759] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 75.906322][ T5647] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.911525][ T5759] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 75.911565][ T5759] handle_mm_fault+0xdd7/0x2ac0 [ 75.911611][ T5759] exc_page_fault+0x3b9/0x650 [ 75.921417][ T5647] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.928566][ T5759] asm_exc_page_fault+0x26/0x30 [ 75.933804][ T5647] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.942410][ T5759] RIP: 0033:0x7fccfd0b1b1b [ 75.942434][ T5759] Code: 00 00 00 48 8d 3d fd 33 19 00 48 89 c1 31 c0 e8 6b 44 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 34 19 00 48 89 34 24 48 8b 14 24 48 8b [ 75.942457][ T5759] RSP: 002b:00007fccfb855fb0 EFLAGS: 00010202 [ 76.023884][ T5759] RAX: 0000000000000000 RBX: 00007fccfd3d5fa0 RCX: 0000000000000000 [ 76.031868][ T5759] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000040 [ 76.039850][ T5759] RBP: 00007fccfb857090 R08: 0000000000000000 R09: 0000000000000000 [ 76.047919][ T5759] R10: 0000000020000040 R11: 0000000000000000 R12: 0000000000000001 [ 76.055901][ T5759] R13: 0000000000000000 R14: 00007fccfd3d5fa0 R15: 00007fff88148c28 [ 76.063966][ T5759] [ 76.067254][ T5759] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 76.166305][ T5770] loop1: detected capacity change from 0 to 512 [ 76.170825][ T5769] loop7: detected capacity change from 0 to 512 [ 76.190114][ T5770] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 76.221610][ T4599] ================================================================== [ 76.229753][ T4599] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 76.236451][ T4599] [ 76.238786][ T4599] write to 0xffff8881066cfc10 of 8 bytes by task 2999 on cpu 1: [ 76.246431][ T4599] __dentry_kill+0x13e/0x4c0 [ 76.251045][ T4599] dput+0x5c/0xd0 [ 76.254692][ T4599] step_into+0x21a/0x840 [ 76.258939][ T4599] walk_component+0x169/0x230 [ 76.263621][ T4599] path_lookupat+0x10a/0x2b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 76.268228][ T4599] filename_lookup+0x2e0/0x340 [ 76.273063][ T4599] do_readlinkat+0x89/0x210 [ 76.277607][ T4599] __x64_sys_readlink+0x47/0x60 [ 76.282486][ T4599] x64_sys_call+0x28ba/0x2dc0 [ 76.287190][ T4599] do_syscall_64+0xc9/0x1c0 [ 76.290310][ T24] tipc: Node number set to 2886997007 [ 76.291708][ T4599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.303013][ T4599] [ 76.305350][ T4599] read to 0xffff8881066cfc10 of 8 bytes by task 4599 on cpu 0: [ 76.312911][ T4599] fast_dput+0x65/0x2c0 [ 76.317099][ T4599] dput+0x24/0xd0 [ 76.320755][ T4599] do_unlinkat+0x258/0x4d0 [ 76.325201][ T4599] __x64_sys_unlink+0x2e/0x40 [ 76.329900][ T4599] x64_sys_call+0x2329/0x2dc0 [ 76.334590][ T4599] do_syscall_64+0xc9/0x1c0 [ 76.339106][ T4599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.345030][ T4599] [ 76.347354][ T4599] value changed: 0xffff888237ae0c90 -> 0x0000000000000000 [ 76.354465][ T4599] [ 76.356792][ T4599] Reported by Kernel Concurrency Sanitizer on: [ 76.362944][ T4599] CPU: 0 UID: 0 PID: 4599 Comm: udevd Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 76.373193][ T4599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.383262][ T4599] ================================================================== [ 76.451102][ T5769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.463745][ T5769] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.504328][ T5769] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.580196][ T5261] syz_tun: left allmulticast mode [ 78.425334][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.943134][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.983132][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.023314][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.069705][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 80.069724][ T29] audit: type=1400 audit(1736291303.422:2664): avc: denied { read } for pid=3037 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 80.105708][ T11] bridge_slave_1: left allmulticast mode [ 80.111430][ T11] bridge_slave_1: left promiscuous mode [ 80.117230][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.127145][ T11] bridge_slave_0: left allmulticast mode [ 80.132939][ T11] bridge_slave_0: left promiscuous mode [ 80.138607][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.229860][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.241820][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.252291][ T11] bond0 (unregistering): Released all slaves [ 80.325989][ T11] hsr_slave_0: left promiscuous mode [ 80.331948][ T11] hsr_slave_1: left promiscuous mode [ 80.337985][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.345533][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.359789][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.367327][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.384133][ T11] veth1_macvtap: left promiscuous mode [ 80.389665][ T11] veth0_macvtap: left promiscuous mode [ 80.395532][ T11] veth1_vlan: left promiscuous mode [ 80.400825][ T11] veth0_vlan: left promiscuous mode [ 80.464075][ T11] team0 (unregistering): Port device team_slave_1 removed [ 80.477551][ T11] team0 (unregistering): Port device team_slave_0 removed