last executing test programs: 8m8.876225026s ago: executing program 0 (id=2357): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x190, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x138, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x50, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0x88a, 0x0, {0x60, 0x2, 0x200, 0x0, 0x1ff, 0x200}, {0x9, 0x2, 0x1, 0x70ed, 0x1ff, 0x6}, 0x4, 0xffffff80, 0xae}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xd4, 0x6, [@m_ife={0xd0, 0xb, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @random="03413659759d"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3e02, 0xee3b, 0x0, 0x7, 0x2}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xc7, 0x0, 0x2, 0x80000000}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0x9, 0x7ff}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x190}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1}, 0x24}}, 0x40044) 8m8.806381877s ago: executing program 0 (id=2359): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x18c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x134, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x50, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0x88a, 0x0, {0x60, 0x2, 0x200, 0x0, 0x1ff, 0x200}, {0x9, 0x2, 0x1, 0x70ed, 0x1ff, 0x6}, 0x4, 0xffffff80, 0xae}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xd0, 0x6, [@m_ife={0xcc, 0xb, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @random="03413659759d"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3e02, 0xee3b, 0x0, 0x7, 0x2}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xc7, 0x0, 0x2, 0x80000000}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0x9, 0x7ff}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x18c}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8m8.748187637s ago: executing program 0 (id=2360): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) r1 = socket(0x28, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007ad000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESOCT=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x40000) r5 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000001040)=""/259, 0x103, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d0000008500000050000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) unshare(0x2c060000) unshare(0x2c020400) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x142, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r8, 0x0, 0x3}, 0x18) unshare(0x6020400) r9 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r11, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df846ba39e38efc8aec53ef3336edc8b34345245ccb129039638ada63a724ef5a39687", 0x42}], 0x1, 0x0) 8m7.934340811s ago: executing program 0 (id=2377): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff01000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) mkdir(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffbe) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000540)={0x2, 0x80}, 0x20) 8m7.893776942s ago: executing program 0 (id=2379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='mm_vmscan_write_folio\x00', r2, 0x0, 0x8000000}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x322026e2b6109b3d}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r4 = socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000180)={0x0, 'gretap0\x00', {0x3}, 0x1ff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40c0) 8m7.681378143s ago: executing program 0 (id=2384): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000003c0)={0x0, r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r3, r4, 0x0, 0x8, &(0x7f0000000500)='fscrypt:'}, 0x30) readv(r2, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r8 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) 7m52.621424075s ago: executing program 32 (id=2384): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000003c0)={0x0, r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r3, r4, 0x0, 0x8, &(0x7f0000000500)='fscrypt:'}, 0x30) readv(r2, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r8 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) 7m6.558619534s ago: executing program 2 (id=3151): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) r1 = socket(0x28, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007ad000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESOCT=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x40000) r5 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000001040)=""/259, 0x103, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) unshare(0x2c060000) unshare(0x2c020400) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x142, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r8, 0x0, 0x3}, 0x18) unshare(0x6020400) r9 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r11, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df846ba39e38efc8aec53ef3336edc8b34345245ccb129039638ada63a724ef5a39687", 0x42}], 0x1, 0x0) 7m4.820449763s ago: executing program 2 (id=3169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x2000e881) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) socket$unix(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xe8, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x94, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 7m4.707228073s ago: executing program 1 (id=3171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[], 0x38}}, 0x0) 7m4.660683194s ago: executing program 1 (id=3172): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x8, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r2}, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100010028bd7010fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="00e8ffff2002ea87"], 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") socket$inet6(0xa, 0x1, 0x0) r8 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/profiling', 0x88401, 0x15a) write$P9_RAUTH(r9, 0x0, 0x0) 7m4.327659895s ago: executing program 1 (id=3173): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x2}}, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) r6 = fsopen(0x0, 0x0) r7 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) fsconfig$FSCONFIG_SET_FLAG(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1eacb218, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0xffffffff}], ['\x00']}) 7m3.965038397s ago: executing program 2 (id=3179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x2000e881) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000200), &(0x7f0000000380)='%pi6 \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01000000000300000000000000020000000000000001ff070000ffffff00000000030000000600000000000000000000090200"/62], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) socket$unix(0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="f8030000", @ANYRESHEX, @ANYBLOB="100028bd7000fddbdf25010000000800070002000000880308800c00008008000a00010000002000008006000500910500001400040002004e21ac1414aa00000000000000003003008008000a00010000000600050000040000980209804c000080060001000a00000014000200200100000000000200000000000000020500030001000000060001000a00000014000200200100000000000000000000000000020500030001000000dc000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200000000000000000000000000000000000500030001000000060001000a00000014000200ff0200000000000000000000000000010500030002000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200200100000000000000000000000000020500030001100000060001000a00000014000200ff010000000000000000000000000001050003000200000040000080060001000a00000014000200fe8000000000000000000000000000bb05000300010000000600010002000000080002007f00000105000300020000007c0000800600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb050003000300000006000100020000000800020000000000050003000200000088000080060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fe8000"/679, @ANYRES32, @ANYBLOB="140002007767310000000000000000000000000008000500000000001400020077003200000000000000000000000000060006004e240000"], 0x3f8}}, 0x80) 7m3.414419829s ago: executing program 1 (id=3181): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000001600000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x91, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x0) 7m3.142907781s ago: executing program 1 (id=3182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x2000e881) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01000000000300000000000000020000000000000001ff070000ffffff00000000030000000600000000000000000000090200"/62], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r5 = socket$unix(0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xe8, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x94, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="f8030000", @ANYRESHEX, @ANYBLOB="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"/679, @ANYRES32=r10, @ANYBLOB="140002007767310000000000000000000000000008000500000000001400020077003200000000000000000000000000060006004e240000"], 0x3f8}}, 0x80) 7m3.105511731s ago: executing program 2 (id=3184): prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000280)='fd/4\x00') bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x1, {0x0, 0xff}}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) socket$igmp(0x2, 0x3, 0x2) socket(0x21, 0x0, 0x80000001) socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x40841}, 0x0) 7m2.898516963s ago: executing program 2 (id=3186): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004ac0)=ANY=[@ANYBLOB="1b000000003dc999aa4f5c29da000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0xa, 0x5, 0xe5b, 0x2c, @rand_addr=' \x01\x00', @mcast2, 0x80, 0x8, 0x800, 0x7}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c40)={r0, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000043c0)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x4, 0x5e52) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 7m2.626207874s ago: executing program 2 (id=3187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x5c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x5c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 7m2.626027984s ago: executing program 33 (id=3187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x5c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x5c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 7m2.029239766s ago: executing program 1 (id=3190): stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)) 7m2.029147267s ago: executing program 34 (id=3190): stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)) 4.411371649s ago: executing program 3 (id=9069): write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x8fd, &(0x7f0000000000)={0x0, 0x949f, 0x100, 0xffffffff, 0x2b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) 4.410913759s ago: executing program 3 (id=9070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061100000b000"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, 0x0}, 0x250) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x409c884, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x800}, 0x1c) sendto$inet6(r6, &(0x7f0000003240)="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", 0x586, 0x6d91fb6106d8d10c, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) flock(0xffffffffffffffff, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) 3.514170893s ago: executing program 3 (id=9077): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000400)=""/180, 0xb4}, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/183, 0xb7}], 0x1}}], 0x48}, 0x0) 3.513622553s ago: executing program 3 (id=9078): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'sit0\x00'}) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x1}, 0x18) mount$9p_fd(0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB=',debug=0x0000000000000080,version=9p2000.u,aname=kfree\x00,cachetag=\x00,cache=mmap,euid=', @ANYBLOB="2c6f626a5f726f6c653ded272c6d6561737572652c646566636f6e746578743d73746166665f752c00", @ANYBLOB="2c77168e00003de6534ca5326a424c30837f8a68ee5fdf5e9b7754f6ac4e11a7fc0eeba683f619f55d97463c829c3f3a"]) 3.385264394s ago: executing program 3 (id=9081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000200)) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x7b12d845, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x13, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1e66}, [@generic={0x7, 0xf, 0x4, 0x7, 0x1dcf}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @alu={0x4, 0x0, 0xd, 0x9, 0x1, 0x117, 0x7fffffffffffffef}, @exit, @exit]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x35, &(0x7f00000001c0)=""/53, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x5, 0x5, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000780)=[{0x5, 0x2, 0x4, 0x5}, {0x0, 0x1, 0xe, 0x3}, {0x2, 0x5, 0xb, 0x1}, {0x1, 0x4, 0x6, 0xc}, {0x3, 0x4, 0x2}, {0x3, 0x5, 0xf, 0x9}, {0x0, 0x3, 0xb, 0x2}, {0x5, 0x1, 0xb, 0x2}, {0x0, 0x4, 0x9, 0x4}, {0x3, 0x2, 0xc, 0x5}], 0x10, 0x8001, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, &(0x7f0000000040)=r6, 0x4) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000280)=""/111) r7 = syz_open_pts(r3, 0x0) dup3(r7, r3, 0x0) 2.502228938s ago: executing program 3 (id=9096): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x8, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@minixdf}, {@noquota}]}, 0x41, 0x420, &(0x7f0000004040)="$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") 1.783964741s ago: executing program 5 (id=9103): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x2a082, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) syz_clone(0x40100400, 0x0, 0x40, 0x0, 0x0, 0x0) 1.199635874s ago: executing program 6 (id=9116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0xfffffffffffffee3, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000700)="3862eca6f035a3aafcb4890a8c8eede1300599bb61627a2cde6774c0bd916e887b2cb1a9eb45d3b1c5080e39fd45c174ff4359f911df9083739a2c96", 0x3c, 0x8000000000000005}, &(0x7f00000004c0)) sendmsg$AUDIT_USER_AVC(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000530400042abd107000fcdbdf"], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.193065604s ago: executing program 4 (id=9117): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1}, 0x18) mount$9p_fd(0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYBLOB=',debug=0x0000000000000080,version=9p2000.u,aname=kfree\x00,cachetag=\x00,cache=mmap,euid=', @ANYBLOB="2c6f626a5f726f6c653ded272c6d6561737572652c646566636f6e746578743d73746166665f752c00", @ANYBLOB="2c77168e00003de6534ca5326a424c30837f8a68ee5fdf5e9b7754f6ac4e11a7fc0eeba683f619f55d97463c829c3f3a"]) 1.180035995s ago: executing program 4 (id=9118): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r2, &(0x7f0000001fc0)=""/4086, 0xff6) 1.160461084s ago: executing program 4 (id=9119): mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000700"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES64=r2], 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x9080) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x141a82, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) sendfile(r7, r7, 0x0, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r3, 0x20, 0x0, 0x693, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r12 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r12, &(0x7f0000000300)='GPL\x00', 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x24000000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex=r11, r5, 0x15, 0x8, r5, @void, @value=r4, @void, @void, r9}, 0x20) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x26}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_setup(0x3fe, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.133508755s ago: executing program 6 (id=9120): r0 = socket(0x11, 0x800000003, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, &(0x7f0000000040)=0x211, 0x29, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, &(0x7f0000000000)) write$UHID_INPUT(r7, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) syz_usbip_server_init(0x2) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 1.111047205s ago: executing program 4 (id=9121): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0xb, [@volatile={0x1, 0x0, 0x0, 0x9, 0x4}, @union={0x2, 0x2, 0x0, 0x5, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x2, 0x4, 0x941}]}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @fwd={0x10}, @float={0xb, 0x0, 0x0, 0x10, 0x2}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x6}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @enum={0xe, 0x9, 0x0, 0x6, 0x4, [{0x3, 0x9}, {0x4, 0xffff8000}, {0x8, 0x6}, {0xd, 0x800}, {0xf, 0x8001}, {0x3, 0x346f}, {0x6, 0x10}, {0xb, 0x3}, {0x1, 0xb2df}]}]}, {0x0, [0x2e, 0x61, 0x2e, 0x61, 0x61, 0x30, 0x0, 0x0, 0x0]}}, &(0x7f0000000780)=""/144, 0xff, 0x90, 0x1, 0xfd, 0x10000, @value}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000039e44a9d0100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='kfree\x00', r3}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xb, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101301) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4dd, &(0x7f0000000240)="$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") 886.132656ms ago: executing program 7 (id=9123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000200)) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x7b12d845, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) dup3(0xffffffffffffffff, r2, 0x0) 885.612836ms ago: executing program 7 (id=9124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r2, &(0x7f0000001fc0)=""/4086, 0xff6) 866.445536ms ago: executing program 4 (id=9125): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) socket$inet(0x2, 0x80003, 0x2) r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000059d0000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x420001, 0xa1) io_uring_setup(0x1004728, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r2}) r3 = socket$inet6(0xa, 0x806, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xa2, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800458b00940067000040019078ffffffffe0000002071f0b7f000001ac14141c6401010100000000ac1414bb64010102e00000020b037f831b83ac141428ac1414bbac1414aaac1414bbac1414aa000000000000000b019078004000004d9900ff006600054006ffffac141441ac1414bb8620ffffffff0006fab29d6e0202011277ea4dcf7e2d93858b7a7272ecdea630ea2ea8e4"], 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 837.094796ms ago: executing program 7 (id=9126): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/bus/input/devices\x00', 0x0, 0x0) lseek(r1, 0x10000400000009, 0x0) 812.613216ms ago: executing program 7 (id=9127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0xfffffffffffffee3, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$AUDIT_USER_AVC(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000530400042abd107000fcdbdf"], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) 623.978437ms ago: executing program 4 (id=9128): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x200000000, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) timer_create(0x2, &(0x7f0000000800)={0x0, 0x39, 0x1, @thr={&(0x7f0000000740), 0x0}}, &(0x7f0000000840)=0x0) timer_settime(r4, 0x1, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000900)={{}, {0x0}}) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7, r8}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000000000fdff0000ff020000000000000000000000000001"], 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00003800128008000100736974002c0002800500040000000000060012000000000008000300ac1414bb08001400000000000600100000000000"], 0x58}}, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000200)=0x7fff) 616.060127ms ago: executing program 7 (id=9129): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'sit0\x00'}) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x42, 0x0) 589.591397ms ago: executing program 7 (id=9130): r0 = gettid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_config_ext={0x5, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/161, 0xa1}], 0x1) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) modify_ldt$write(0x1, &(0x7f0000000240)={0xfffffffd, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0xfffffffd}]}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095000000000000002315b040ebf588c217687b1d622e68d12cdf599630e733d879a271cbd3aaafa544b648f41903b6bc149a20e2acb9c9b0dfbfd0de3d0e6ea379c59db2e9297f43757fffe0201f61d11668354da201cb170f3da17fab789390a7f69a1d7b71e6c7798c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 549.584367ms ago: executing program 5 (id=9131): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x2, 0x6, @remote}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x439, 0x70bd2d, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x610c3}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x16}}]}}}]}, 0x54}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x5, &(0x7f0000001700)=ANY=[@ANYBLOB="180100000800dd54b0d4205a2a190060f9bd47ee4cc311ec94388b53b8ec8d004b780093", @ANYRES16, @ANYRES8=r0, @ANYBLOB="5821c573be6c7335263dcbca28b04f96ec08dabbf7d307ea98363e010af7a4a293ffbed423c01ffb048bec0fe328ed23db9e09a4466d925fee79c98f51ff888fceb6015293edad14f4d67b270a0fe0dd1c625193b2e71c3e4138e7779c50555e6004aa3c656d7b0e2938c1910b1ea0df6e115f5883b41f69ab6405a4ea7598a910f0a46189940fe484ddd0cea5c5e8e12ad1b0b70279b80819251025f3b25f9e22bd26ae892018f17fa92c7f84ca8d0c2cdaa5848393f0313068d908ee7c301742b1b51d01ed1768f7f5a8a53301c52c804e86a22614"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000140)={&(0x7f0000000340)="ea2f2b79c09590e4767ff49a14066ef8a32c2300e605853b4ec678cc16dae7e59d45c67102202eee3666f3d4bfb515eddc303a83b77027cb8ba903f7b4846d530eef5dd6429ec1daa4b81890328b8de25ece83b3cdba8ceff6e0b4f650b5a5e6c8d0c88c381a4680b8ca2667c5a2c92a06146d108ac04a35d59dc6f391b5f01b3fa9443ad65e739700f4cb4b7cb9697669d27b6ae11d066fff15fdd8f9652feffa2f", &(0x7f0000000580)=""/4096, &(0x7f0000000400)="a1efac32b9309d8db363daa225bbe36c2ddae76c9ee99764dfecfe93b536853645293d419cd42f273ad21ee547685a2fbfb5b5ecec2390dc4f8ccd94f8700ab4da7b9900c621d7c73ada7be5faf3eceac5cdac91c89c2f2e2f06349792398319ee48942bb5847a48f03c99f7c90f7b145ca36447f6779a0342b5c035e203a117ea2f9f87b2c64bbc7e51f0cbafe19ee244db51637ada0538df72edb09608bbef0a299b7799595334cb2a91f657e1dd897586540c6eeaa2b7494ab6313b", &(0x7f0000000080)="29060967b82a715e04039268e26f281d0cc9104dd785a07694a80ff33c4de5a3dc8ce83d384004d77fe2f7e64f21e59428f95963f27c17393da63cc26cdd14345d897c657e405a5a41", 0xef3, r4, 0x4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000005740), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x18000000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001640)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000005800)={0x0, 0x0, &(0x7f00000057c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="000000005c4c59193a9fa27700000c4d9e7d06fbc845"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f0000000540)='xen_mmu_flush_tlb_multi\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000002c0)='O', 0x1}], 0x1) 440.365368ms ago: executing program 5 (id=9132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0xfffffffffffffee3, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) sendmsg$AUDIT_USER_AVC(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000530400042abd107000fcdbdf"], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) 406.163948ms ago: executing program 5 (id=9133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0xfffffffffffffee3, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000700)="3862eca6f035a3aafcb4890a8c8eede1300599bb61627a2cde6774c0bd916e887b2cb1a9eb45d3b1c5080e39fd45c174ff4359f911df9083739a2c96", 0x3c, 0x8000000000000005}, &(0x7f00000004c0)) sendmsg$AUDIT_USER_AVC(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000530400042abd107000fcdbdf"], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 369.183018ms ago: executing program 5 (id=9134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc00c5512, &(0x7f0000000200)) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x7b12d845, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) dup3(0xffffffffffffffff, r2, 0x0) 336.979129ms ago: executing program 5 (id=9135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='westwood\x00', 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}}, 0xf0}}, 0x0) socket$kcm(0x10, 0x2, 0x4) pipe2(&(0x7f0000001cc0), 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) 303.934929ms ago: executing program 6 (id=9136): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRESDEC=r2], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000000)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{}, &(0x7f0000000180), &(0x7f0000000300)='%pB \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) r5 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r5, r6, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)) 162.163289ms ago: executing program 6 (id=9137): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xdfed, 0x0, 0x0, 0x2ea}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) socket$netlink(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x719b, 0x8001}, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x4800) 18.24845ms ago: executing program 6 (id=9138): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4060010}, 0x4080194) 0s ago: executing program 6 (id=9139): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x200000000, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) timer_create(0x2, &(0x7f0000000800)={0x0, 0x39, 0x1, @thr={&(0x7f0000000740), 0x0}}, &(0x7f0000000840)=0x0) timer_settime(r4, 0x1, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000900)={{}, {0x0}}) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7, r8}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000000000fdff0000ff020000000000000000000000000001"], 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00003800128008000100736974002c0002800500040000000000060012000000000008000300ac1414bb08001400000000000600100000000000"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000200)=0x7fff) kernel console output (not intermixed with test programs): security_context_str_to_sid (u) failed with errno=-22 [ 732.652871][T30671] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.8459: corrupted in-inode xattr: invalid ea_ino [ 732.680732][T30671] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.8459: couldn't read orphan inode 15 (err -117) [ 732.733943][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 732.733963][ T29] audit: type=1326 audit(1731948372.569:54010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30685 comm="syz.6.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ac47e719 code=0x7ffc0000 [ 732.763993][ T29] audit: type=1326 audit(1731948372.569:54011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30685 comm="syz.6.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ac47e719 code=0x7ffc0000 [ 732.787647][ T29] audit: type=1326 audit(1731948372.569:54012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30685 comm="syz.6.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1ac47e719 code=0x7ffc0000 [ 732.811251][ T29] audit: type=1326 audit(1731948372.569:54013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30685 comm="syz.6.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ac47e719 code=0x7ffc0000 [ 732.834923][ T29] audit: type=1326 audit(1731948372.569:54014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30685 comm="syz.6.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ac47e719 code=0x7ffc0000 [ 732.858602][ T29] audit: type=1326 audit(1731948372.569:54015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30685 comm="syz.6.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fb1ac47e719 code=0x7ffc0000 [ 732.882019][ T29] audit: type=1326 audit(1731948372.569:54016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30685 comm="syz.6.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ac47e719 code=0x7ffc0000 [ 732.905627][ T29] audit: type=1326 audit(1731948372.569:54017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30685 comm="syz.6.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ac47e719 code=0x7ffc0000 [ 733.082992][T30698] usb usb4: usbfs: process 30698 (syz.5.8471) did not claim interface 0 before use [ 733.251874][T30704] loop5: detected capacity change from 0 to 512 [ 733.259240][T30704] EXT4-fs: Ignoring removed oldalloc option [ 733.267130][T30704] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 733.326126][T30704] EXT4-fs (loop5): 1 truncate cleaned up [ 733.368524][T30709] loop3: detected capacity change from 0 to 512 [ 733.375474][T30709] EXT4-fs: Ignoring removed oldalloc option [ 733.375578][T30704] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 733.381968][T30709] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 733.402622][T30709] EXT4-fs (loop3): 1 truncate cleaned up [ 733.423022][T30709] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 733.453296][ T29] audit: type=1326 audit(1731948373.289:54018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.3.8478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 733.477087][ T29] audit: type=1326 audit(1731948373.289:54019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.3.8478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 733.509309][T30716] loop3: detected capacity change from 0 to 512 [ 733.543830][T30716] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.577170][T30724] loop4: detected capacity change from 0 to 512 [ 733.586493][T30730] usb usb4: usbfs: process 30730 (syz.7.8485) did not claim interface 0 before use [ 733.607358][T30724] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.8482: couldn't read orphan inode 26 (err -116) [ 733.621954][T30738] loop7: detected capacity change from 0 to 512 [ 733.625866][T30724] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.640155][T30738] EXT4-fs: Ignoring removed oldalloc option [ 733.648005][T30738] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 733.659221][T30738] EXT4-fs (loop7): 1 truncate cleaned up [ 733.666165][T30740] usb usb4: usbfs: process 30740 (syz.5.8488) did not claim interface 0 before use [ 733.681531][T30738] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 733.774119][T30760] syzkaller0: entered allmulticast mode [ 733.836442][T30766] usb usb4: usbfs: process 30766 (syz.3.8498) did not claim interface 0 before use [ 733.925535][T30757] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 733.932237][T30757] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 733.939875][T30757] vhci_hcd vhci_hcd.0: Device attached [ 733.955240][T30759] syzkaller0: left allmulticast mode [ 734.080707][T30774] loop3: detected capacity change from 0 to 1024 [ 734.102039][T30764] loop7: detected capacity change from 0 to 512 [ 734.112327][T30764] EXT4-fs: Ignoring removed oldalloc option [ 734.121744][T30774] EXT4-fs mount: 158 callbacks suppressed [ 734.121775][T30774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.139691][ T24] vhci_hcd: vhci_device speed not set [ 734.151262][T30764] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.8496: Parent and EA inode have the same ino 15 [ 734.164028][T30774] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.165312][T30764] EXT4-fs (loop7): Remounting filesystem read-only [ 734.181043][T30764] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 734.191188][T30764] EXT4-fs (loop7): 1 orphan inode deleted [ 734.195872][T23161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.198020][T30764] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.218210][T30764] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 734.218683][ T24] usb 15-1: new full-speed USB device number 10 using vhci_hcd [ 734.233247][T30764] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.237650][T30782] loop3: detected capacity change from 0 to 512 [ 734.249075][T30782] EXT4-fs: Ignoring removed oldalloc option [ 734.255958][T30782] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 734.256038][T30771] vhci_hcd: connection reset by peer [ 734.271749][ T2264] vhci_hcd: stop threads [ 734.276292][ T2264] vhci_hcd: release socket [ 734.280743][ T2264] vhci_hcd: disconnect device [ 734.281501][T30782] EXT4-fs (loop3): 1 truncate cleaned up [ 734.291665][T30782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.310673][T30782] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 734.327651][T23161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.350269][T30785] loop3: detected capacity change from 0 to 164 [ 734.357811][T30785] Unable to read rock-ridge attributes [ 734.364668][T30785] Unable to read rock-ridge attributes [ 734.428513][T30787] loop3: detected capacity change from 0 to 512 [ 734.446335][T30787] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.8504: couldn't read orphan inode 26 (err -116) [ 734.458951][T30787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.471730][T30787] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.522861][T23161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.626050][T30803] 9pnet: Could not find request transport: f [ 734.806457][T30813] loop7: detected capacity change from 0 to 512 [ 734.814720][T30813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.895280][T23653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.500566][T30833] 9pnet: Could not find request transport: f [ 735.552026][T30842] loop3: detected capacity change from 0 to 512 [ 735.559093][T30842] EXT4-fs: Ignoring removed bh option [ 735.564790][T30842] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 735.587621][T30842] EXT4-fs (loop3): 1 truncate cleaned up [ 735.588819][T30847] loop5: detected capacity change from 0 to 512 [ 735.593917][T30842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.616813][T30847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.656662][T30854] loop4: detected capacity change from 0 to 164 [ 735.662112][T30842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8525'. [ 735.672370][T30854] Unable to read rock-ridge attributes [ 735.680560][T30854] Unable to read rock-ridge attributes [ 735.690375][T23161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.833722][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8539'. [ 735.871873][T30881] loop6: detected capacity change from 0 to 164 [ 735.880088][T30881] Unable to read rock-ridge attributes [ 735.887818][T30881] Unable to read rock-ridge attributes [ 735.908430][T30886] usb usb4: usbfs: process 30886 (syz.7.8543) did not claim interface 0 before use [ 735.935332][T30889] syzkaller0: entered allmulticast mode [ 735.995730][T30888] syzkaller0: left allmulticast mode [ 736.050839][T30903] loop7: detected capacity change from 0 to 1024 [ 736.066744][T30903] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.079194][T30903] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.100497][T23653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.137131][T30909] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8552'. [ 736.183419][T30911] loop7: detected capacity change from 0 to 512 [ 736.191566][T30911] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.8553: corrupted in-inode xattr: invalid ea_ino [ 736.205377][T30911] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.8553: couldn't read orphan inode 15 (err -117) [ 736.218220][T30911] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.265101][T23653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.289099][T30914] loop7: detected capacity change from 0 to 512 [ 736.297523][T30914] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.8554: corrupted in-inode xattr: invalid ea_ino [ 736.311189][T30914] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.8554: couldn't read orphan inode 15 (err -117) [ 736.323819][T30914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.381621][T23653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.404973][T30917] loop7: detected capacity change from 0 to 164 [ 736.412429][T30917] Unable to read rock-ridge attributes [ 736.419965][T30917] Unable to read rock-ridge attributes [ 736.427908][T22482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.494329][T30929] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8561'. [ 736.517322][T30931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8562'. [ 736.556033][T30935] loop7: detected capacity change from 0 to 512 [ 736.556892][T30937] usb usb4: usbfs: process 30937 (syz.3.8565) did not claim interface 0 before use [ 736.564276][T30935] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.8564: corrupted in-inode xattr: invalid ea_ino [ 736.586650][T30935] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.8564: couldn't read orphan inode 15 (err -117) [ 736.596019][T30940] loop3: detected capacity change from 0 to 512 [ 736.600819][T30935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.618497][T30940] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.8566: attempt to clear invalid blocks 2 len 1 [ 736.631147][T30943] loop5: detected capacity change from 0 to 512 [ 736.631958][T30940] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 736.652317][T30940] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8566: invalid indirect mapped block 1819239214 (level 0) [ 736.666850][T30940] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8566: invalid indirect mapped block 1819239214 (level 1) [ 736.675814][T30943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.681639][T30940] EXT4-fs (loop3): 1 truncate cleaned up [ 736.703735][T30940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.724214][T23653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.731615][T30940] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.8566: Unrecognised inode hash code 20 [ 736.744727][T30940] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.8566: Corrupt directory, running e2fsck is recommended [ 736.771702][T30950] loop7: detected capacity change from 0 to 164 [ 736.780155][T30950] Unable to read rock-ridge attributes [ 736.784504][T23161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.788249][T30950] Unable to read rock-ridge attributes [ 736.810898][T22482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.843994][T30953] loop4: detected capacity change from 0 to 4096 [ 736.864272][T30953] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 736.883836][T30953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8572'. [ 736.892867][T30953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8572'. [ 736.897993][T30962] FAULT_INJECTION: forcing a failure. [ 736.897993][T30962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.915020][T30962] CPU: 1 UID: 0 PID: 30962 Comm: syz.7.8575 Not tainted 6.12.0-syzkaller #0 [ 736.923773][T30962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 736.933915][T30962] Call Trace: [ 736.937204][T30962] [ 736.940142][T30962] dump_stack_lvl+0xf2/0x150 [ 736.944754][T30962] dump_stack+0x15/0x20 [ 736.949060][T30962] should_fail_ex+0x223/0x230 [ 736.953770][T30962] should_fail+0xb/0x10 [ 736.957952][T30962] should_fail_usercopy+0x1a/0x20 [ 736.962991][T30962] strncpy_from_user+0x25/0x210 [ 736.967881][T30962] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 736.973545][T30962] getname_flags+0xb0/0x3b0 [ 736.978066][T30962] getname+0x17/0x20 [ 736.981988][T30962] do_sys_openat2+0x67/0x120 [ 736.986616][T30962] __x64_sys_openat+0xf3/0x120 [ 736.991439][T30962] x64_sys_call+0x1025/0x2d60 [ 736.996147][T30962] do_syscall_64+0xc9/0x1c0 [ 737.000751][T30962] ? clear_bhb_loop+0x55/0xb0 [ 737.005502][T30962] ? clear_bhb_loop+0x55/0xb0 [ 737.010193][T30962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.016183][T30962] RIP: 0033:0x7f600445e719 [ 737.020616][T30962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.040307][T30962] RSP: 002b:00007f60030d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 737.048785][T30962] RAX: ffffffffffffffda RBX: 00007f6004615f80 RCX: 00007f600445e719 [ 737.056765][T30962] RDX: 000000000000275a RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 737.064786][T30962] RBP: 00007f60030d7090 R08: 0000000000000000 R09: 0000000000000000 [ 737.072768][T30962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.080776][T30962] R13: 0000000000000000 R14: 00007f6004615f80 R15: 00007ffc352f12d8 [ 737.088779][T30962] [ 737.105776][T30968] syzkaller0: entered allmulticast mode [ 737.126251][T30972] usb usb4: usbfs: process 30972 (syz.7.8579) did not claim interface 0 before use [ 737.198821][T30977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8581'. [ 737.218060][T30964] syzkaller0: left allmulticast mode [ 737.263868][T30982] loop4: detected capacity change from 0 to 512 [ 737.272984][T30982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.813536][T31008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8593'. [ 737.826901][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 737.826916][ T29] audit: type=1326 audit(1731948377.669:54428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31007 comm="syz.5.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c55ee719 code=0x7ffc0000 [ 737.856915][ T29] audit: type=1326 audit(1731948377.669:54429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31007 comm="syz.5.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c55ee719 code=0x7ffc0000 [ 737.880578][ T29] audit: type=1326 audit(1731948377.669:54430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31007 comm="syz.5.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c55ee719 code=0x7ffc0000 [ 737.904910][ T29] audit: type=1326 audit(1731948377.699:54431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31007 comm="syz.5.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c55ee719 code=0x7ffc0000 [ 737.928636][ T29] audit: type=1326 audit(1731948377.699:54432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31007 comm="syz.5.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c55ee719 code=0x7ffc0000 [ 737.952735][ T29] audit: type=1326 audit(1731948377.749:54433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31007 comm="syz.5.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c55ee719 code=0x7ffc0000 [ 737.976427][ T29] audit: type=1326 audit(1731948377.749:54434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31007 comm="syz.5.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c55ee719 code=0x7ffc0000 [ 738.000052][ T29] audit: type=1326 audit(1731948377.749:54435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31007 comm="syz.5.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c55ee719 code=0x7ffc0000 [ 738.023635][ T29] audit: type=1326 audit(1731948377.779:54436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31007 comm="syz.5.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c55ee719 code=0x7ffc0000 [ 738.047337][ T29] audit: type=1326 audit(1731948377.779:54437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31007 comm="syz.5.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c55ee719 code=0x7ffc0000 [ 738.107945][T22279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.193141][T31024] loop4: detected capacity change from 0 to 1024 [ 738.206665][T31024] EXT4-fs: Ignoring removed oldalloc option [ 738.220315][T31024] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 738.317562][T31024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.682549][T22279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.700142][T31034] loop3: detected capacity change from 0 to 164 [ 738.707816][T31038] usb usb4: usbfs: process 31038 (syz.7.8605) did not claim interface 0 before use [ 738.725162][T31034] Unable to read rock-ridge attributes [ 738.744160][T31034] Unable to read rock-ridge attributes [ 738.752776][T31042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8607'. [ 738.803407][T31048] loop3: detected capacity change from 0 to 512 [ 738.811795][T31048] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.8610: attempt to clear invalid blocks 2 len 1 [ 738.825759][T31048] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 738.840198][T31048] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8610: invalid indirect mapped block 1819239214 (level 0) [ 738.854583][T31048] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8610: invalid indirect mapped block 1819239214 (level 1) [ 738.871417][T31048] EXT4-fs (loop3): 1 truncate cleaned up [ 738.877783][T31048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.891575][T31048] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.8610: Unrecognised inode hash code 20 [ 738.903133][T31048] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.8610: Corrupt directory, running e2fsck is recommended [ 738.926318][T23161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.957733][T31057] loop3: detected capacity change from 0 to 512 [ 738.964289][T31057] EXT4-fs: Ignoring removed oldalloc option [ 738.970648][T31057] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 738.983732][T31057] EXT4-fs (loop3): 1 truncate cleaned up [ 738.989939][T31057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.042334][T31060] batadv_slave_0: entered promiscuous mode [ 739.088716][T23161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.112173][T31062] loop6: detected capacity change from 0 to 4096 [ 739.125338][T31062] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 739.155951][T31066] loop3: detected capacity change from 0 to 164 [ 739.163526][T31066] Unable to read rock-ridge attributes [ 739.170773][T31066] Unable to read rock-ridge attributes [ 739.289281][T31072] loop6: detected capacity change from 0 to 512 [ 739.304182][T31078] loop3: detected capacity change from 0 to 512 [ 739.304934][ T24] usb 15-1: enqueue for inactive port 0 [ 739.317473][ T24] usb 15-1: enqueue for inactive port 0 [ 739.335891][T31078] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.8623: attempt to clear invalid blocks 2 len 1 [ 739.349503][T31072] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.8620: corrupted in-inode xattr: invalid ea_ino [ 739.350605][T31078] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 739.377561][T31078] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8623: invalid indirect mapped block 1819239214 (level 0) [ 739.385826][ T24] vhci_hcd: vhci_device speed not set [ 739.392271][T31078] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8623: invalid indirect mapped block 1819239214 (level 1) [ 739.403422][T31072] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.8620: couldn't read orphan inode 15 (err -117) [ 739.411496][T31078] EXT4-fs (loop3): 1 truncate cleaned up [ 739.428925][T31078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.437516][T31072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.445430][T31078] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.8623: Unrecognised inode hash code 20 [ 739.465146][T31078] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.8623: Corrupt directory, running e2fsck is recommended [ 739.490418][T23161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.528323][T23848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.561917][T31085] loop3: detected capacity change from 0 to 164 [ 739.570687][T31085] Unable to read rock-ridge attributes [ 739.578579][T31085] Unable to read rock-ridge attributes [ 739.883671][T31096] loop4: detected capacity change from 0 to 164 [ 739.892177][T31096] Unable to read rock-ridge attributes [ 739.901725][T31096] Unable to read rock-ridge attributes [ 740.174610][T31106] loop4: detected capacity change from 0 to 512 [ 740.187758][T31109] loop3: detected capacity change from 0 to 512 [ 740.193427][T31106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.206752][T31109] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.8635: attempt to clear invalid blocks 2 len 1 [ 740.220458][T31109] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 740.235573][T31109] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8635: invalid indirect mapped block 1819239214 (level 0) [ 740.249959][T31109] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8635: invalid indirect mapped block 1819239214 (level 1) [ 740.264719][T31109] EXT4-fs (loop3): 1 truncate cleaned up [ 740.270767][T31109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.283938][T31109] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.8635: Unrecognised inode hash code 20 [ 740.295981][T31109] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.8635: Corrupt directory, running e2fsck is recommended [ 740.318568][T23161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.352141][T31114] loop3: detected capacity change from 0 to 4096 [ 740.358851][T31114] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 740.375392][T31114] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 740.384216][T31114] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 740.393148][T31114] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 740.402007][T31114] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 740.438126][T31120] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 740.444795][T31120] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 740.452475][T31120] vhci_hcd vhci_hcd.0: Device attached [ 740.459029][T31121] vhci_hcd: connection closed [ 740.459266][ T8969] vhci_hcd: stop threads [ 740.468331][ T8969] vhci_hcd: release socket [ 740.472767][ T8969] vhci_hcd: disconnect device [ 740.486087][T31126] loop7: detected capacity change from 0 to 164 [ 740.493576][T31126] Unable to read rock-ridge attributes [ 740.502262][T31126] Unable to read rock-ridge attributes [ 740.561169][T31131] loop7: detected capacity change from 0 to 1024 [ 740.576367][T31131] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.588740][T31131] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.609494][T23653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.633383][T31135] loop7: detected capacity change from 0 to 164 [ 740.641057][T31135] Unable to read rock-ridge attributes [ 740.648131][T31135] Unable to read rock-ridge attributes [ 741.022136][T31149] loop6: detected capacity change from 0 to 512 [ 741.025685][T31147] loop5: detected capacity change from 0 to 4096 [ 741.035287][T31147] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 741.035714][T22279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.051496][T31147] __nla_validate_parse: 7 callbacks suppressed [ 741.051514][T31147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8649'. [ 741.055097][T31149] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.8650: corrupted in-inode xattr: invalid ea_ino [ 741.058705][T31147] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8649'. [ 741.068333][T31149] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.8650: couldn't read orphan inode 15 (err -117) [ 741.102501][T31149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.162516][T31157] loop4: detected capacity change from 0 to 512 [ 741.174024][T23848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.190346][T31157] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 741.205434][T31157] EXT4-fs (loop4): mount failed [ 741.221604][T31157] loop4: detected capacity change from 0 to 512 [ 741.230430][T31157] EXT4-fs: Ignoring removed mblk_io_submit option [ 741.250853][T31157] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8653: corrupted in-inode xattr: invalid ea_ino [ 741.275691][T31157] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.8653: couldn't read orphan inode 15 (err -117) [ 741.303198][T31157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.408657][T22279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.507987][T31189] loop3: detected capacity change from 0 to 512 [ 741.524423][T31191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8666'. [ 741.550265][T31189] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.8665: corrupted in-inode xattr: invalid ea_ino [ 741.585038][T31189] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.8665: couldn't read orphan inode 15 (err -117) [ 741.634085][T31189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.722593][T31210] loop5: detected capacity change from 0 to 512 [ 741.748221][T23161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.778782][T31210] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 741.794868][T31210] EXT4-fs (loop5): mount failed [ 741.812156][T31210] loop5: detected capacity change from 0 to 512 [ 741.825118][T31210] EXT4-fs: Ignoring removed mblk_io_submit option [ 741.835564][T31210] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8674: corrupted in-inode xattr: invalid ea_ino [ 741.861611][T31210] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.8674: couldn't read orphan inode 15 (err -117) [ 741.885379][T31210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.943543][T31231] loop3: detected capacity change from 0 to 4096 [ 741.950377][T31231] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 741.972053][T31231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8683'. [ 741.981026][T31231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8683'. [ 742.003835][T31233] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.8682'. [ 742.013168][T31233] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8682'. [ 742.040214][T22482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.131545][T31237] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8682'. [ 742.620265][T31251] loop4: detected capacity change from 0 to 512 [ 742.636686][T31251] EXT4-fs: Ignoring removed oldalloc option [ 742.650879][T31251] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 742.685354][T31251] EXT4-fs (loop4): 1 truncate cleaned up [ 742.703449][T31251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.806449][T22279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.866694][T31259] syzkaller0: entered allmulticast mode [ 742.911887][T31261] loop4: detected capacity change from 0 to 512 [ 742.969685][T31261] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.8692: couldn't read orphan inode 26 (err -116) [ 742.984449][T31258] syzkaller0: left allmulticast mode [ 743.035322][T31261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.057730][T31269] 9pnet_fd: Insufficient options for proto=fd [ 743.076337][T31261] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.164265][T22279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.204148][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 743.204166][ T29] audit: type=1400 audit(1731948383.039:54800): avc: denied { write } for pid=31276 comm="syz.4.8697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 743.233237][T31278] batadv_slave_0: entered promiscuous mode [ 743.345217][ T29] audit: type=1326 audit(1731948383.189:54801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31285 comm="syz.3.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 743.386651][ T29] audit: type=1326 audit(1731948383.209:54802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31285 comm="syz.3.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 743.410367][ T29] audit: type=1326 audit(1731948383.209:54803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31285 comm="syz.3.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 743.434114][ T29] audit: type=1326 audit(1731948383.209:54804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31285 comm="syz.3.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 743.457785][ T29] audit: type=1326 audit(1731948383.209:54805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31285 comm="syz.3.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 743.481431][ T29] audit: type=1326 audit(1731948383.209:54806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31285 comm="syz.3.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 743.505221][ T29] audit: type=1326 audit(1731948383.209:54807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31285 comm="syz.3.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 743.528866][ T29] audit: type=1326 audit(1731948383.209:54808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31285 comm="syz.3.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 743.552579][ T29] audit: type=1326 audit(1731948383.209:54809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31285 comm="syz.3.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 743.824167][T31289] usb usb4: usbfs: process 31289 (syz.4.8702) did not claim interface 0 before use [ 744.337072][T31298] 9pnet_fd: Insufficient options for proto=fd [ 744.487171][T31304] loop6: detected capacity change from 0 to 4096 [ 744.493825][T31304] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 744.511565][T31304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8708'. [ 744.520639][T31304] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8708'. [ 744.739286][T31316] loop5: detected capacity change from 0 to 512 [ 744.744605][T31322] loop4: detected capacity change from 0 to 1024 [ 744.758658][T31316] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.8713: couldn't read orphan inode 26 (err -116) [ 744.760366][T31322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.783752][T31322] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.784024][T31316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.813348][T22279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.817390][T31316] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.833362][T31328] loop7: detected capacity change from 0 to 512 [ 744.842758][T31328] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.8718: attempt to clear invalid blocks 2 len 1 [ 744.877762][T31328] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 744.892279][T31328] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.8718: invalid indirect mapped block 1819239214 (level 0) [ 744.908177][T31328] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.8718: invalid indirect mapped block 1819239214 (level 1) [ 744.923232][T31331] 9pnet_fd: Insufficient options for proto=fd [ 744.931055][T31328] EXT4-fs (loop7): 1 truncate cleaned up [ 744.937095][T31328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.950664][T31328] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.8718: Unrecognised inode hash code 20 [ 744.962129][T31328] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.8718: Corrupt directory, running e2fsck is recommended [ 744.970827][T31333] syzkaller0: entered allmulticast mode [ 744.991395][T23653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.011693][T22482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.043771][T31337] loop5: detected capacity change from 0 to 512 [ 745.062332][T31337] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8721: corrupted in-inode xattr: invalid ea_ino [ 745.077378][T31337] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.8721: couldn't read orphan inode 15 (err -117) [ 745.092387][T31337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.122574][T31332] syzkaller0: left allmulticast mode [ 745.272223][T22482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.378237][T31347] FAULT_INJECTION: forcing a failure. [ 745.378237][T31347] name failslab, interval 1, probability 0, space 0, times 0 [ 745.391097][T31347] CPU: 1 UID: 0 PID: 31347 Comm: syz.3.8725 Not tainted 6.12.0-syzkaller #0 [ 745.399841][T31347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 745.409923][T31347] Call Trace: [ 745.413209][T31347] [ 745.416187][T31347] dump_stack_lvl+0xf2/0x150 [ 745.420812][T31347] dump_stack+0x15/0x20 [ 745.425060][T31347] should_fail_ex+0x223/0x230 [ 745.429898][T31347] ? __se_sys_memfd_create+0x230/0x5c0 [ 745.435422][T31347] should_failslab+0x8f/0xb0 [ 745.440093][T31347] __kmalloc_noprof+0xa5/0x370 [ 745.444907][T31347] __se_sys_memfd_create+0x230/0x5c0 [ 745.450215][T31347] __x64_sys_memfd_create+0x31/0x40 [ 745.455535][T31347] x64_sys_call+0x2891/0x2d60 [ 745.460287][T31347] do_syscall_64+0xc9/0x1c0 [ 745.464971][T31347] ? clear_bhb_loop+0x55/0xb0 [ 745.469663][T31347] ? clear_bhb_loop+0x55/0xb0 [ 745.474368][T31347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.480405][T31347] RIP: 0033:0x7f522fb1e719 [ 745.484835][T31347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.504463][T31347] RSP: 002b:00007f522e796d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 745.512899][T31347] RAX: ffffffffffffffda RBX: 0000000000001050 RCX: 00007f522fb1e719 [ 745.520898][T31347] RDX: 00007f522e796dec RSI: 0000000000000000 RDI: 00007f522fb91fca [ 745.528951][T31347] RBP: 0000000020001080 R08: 00007f522e796b07 R09: 0000000000000000 [ 745.536941][T31347] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 745.544928][T31347] R13: 00007f522e796dec R14: 00007f522e796df0 R15: 00007ffd79025ea8 [ 745.553006][T31347] [ 745.961296][T31361] loop7: detected capacity change from 0 to 4096 [ 745.975497][T31359] loop3: detected capacity change from 0 to 2048 [ 745.982654][T31361] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 746.011199][T31359] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8730: bg 0: block 234: padding at end of block bitmap is not set [ 746.037066][T31359] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 746.037079][T31363] loop5: detected capacity change from 0 to 512 [ 746.037099][T31359] EXT4-fs (loop3): This should not happen!! Data will be lost [ 746.037099][T31359] [ 746.052767][T31363] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8723: corrupted in-inode xattr: invalid ea_ino [ 746.055644][T31359] EXT4-fs (loop3): Total free blocks count 0 [ 746.066437][T31363] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.8723: couldn't read orphan inode 15 (err -117) [ 746.078694][T31359] EXT4-fs (loop3): Free/Dirty block details [ 746.078764][T31359] EXT4-fs (loop3): free_blocks=0 [ 746.107859][T31359] EXT4-fs (loop3): dirty_blocks=32 [ 746.113003][T31359] EXT4-fs (loop3): Block reservation details [ 746.119079][T31359] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 746.140794][T31371] loop7: detected capacity change from 0 to 512 [ 746.165124][T31373] FAULT_INJECTION: forcing a failure. [ 746.165124][T31373] name failslab, interval 1, probability 0, space 0, times 0 [ 746.177939][T31373] CPU: 0 UID: 0 PID: 31373 Comm: syz.5.8733 Not tainted 6.12.0-syzkaller #0 [ 746.178759][T31371] EXT4-fs warning (device loop7): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 746.186641][T31373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 746.186657][T31373] Call Trace: [ 746.186664][T31373] [ 746.186674][T31373] dump_stack_lvl+0xf2/0x150 [ 746.186746][T31373] dump_stack+0x15/0x20 [ 746.186834][T31373] should_fail_ex+0x223/0x230 [ 746.202415][T31371] EXT4-fs (loop7): mount failed [ 746.211481][T31373] ? __kvmalloc_node_noprof+0x72/0x170 [ 746.211521][T31373] should_failslab+0x8f/0xb0 [ 746.246092][T31373] __kmalloc_node_noprof+0xa8/0x380 [ 746.251328][T31373] __kvmalloc_node_noprof+0x72/0x170 [ 746.256628][T31373] xt_alloc_entry_offsets+0x47/0x50 [ 746.261841][T31373] translate_table+0xa3/0x1040 [ 746.266694][T31373] ? __kvmalloc_node_noprof+0x72/0x170 [ 746.272185][T31373] ? _copy_from_user+0x8d/0xb0 [ 746.276984][T31373] do_ip6t_set_ctl+0x7cc/0x8c0 [ 746.281765][T31373] ? __rcu_read_unlock+0x4e/0x70 [ 746.286744][T31373] nf_setsockopt+0x195/0x1b0 [ 746.291376][T31373] ipv6_setsockopt+0x10f/0x130 [ 746.296154][T31373] udpv6_setsockopt+0x95/0xb0 [ 746.300964][T31373] sock_common_setsockopt+0x64/0x80 [ 746.306177][T31373] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 746.312084][T31373] __sys_setsockopt+0x1cc/0x240 [ 746.317006][T31373] __x64_sys_setsockopt+0x66/0x80 [ 746.322145][T31373] x64_sys_call+0x278d/0x2d60 [ 746.326857][T31373] do_syscall_64+0xc9/0x1c0 [ 746.331371][T31373] ? clear_bhb_loop+0x55/0xb0 [ 746.336088][T31373] ? clear_bhb_loop+0x55/0xb0 [ 746.340811][T31373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.346729][T31373] RIP: 0033:0x7fe9c55ee719 [ 746.351147][T31373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.370871][T31373] RSP: 002b:00007fe9c4267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 746.379320][T31373] RAX: ffffffffffffffda RBX: 00007fe9c57a5f80 RCX: 00007fe9c55ee719 [ 746.387340][T31373] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 746.395318][T31373] RBP: 00007fe9c4267090 R08: 0000000000000368 R09: 0000000000000000 [ 746.403348][T31373] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.411325][T31373] R13: 0000000000000000 R14: 00007fe9c57a5f80 R15: 00007fffbd3c6068 [ 746.419306][T31373] [ 746.433016][T31377] loop4: detected capacity change from 0 to 512 [ 746.443569][T31371] loop7: detected capacity change from 0 to 512 [ 746.443566][T31377] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8734: corrupted in-inode xattr: invalid ea_ino [ 746.443759][T31377] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.8734: couldn't read orphan inode 15 (err -117) [ 746.460689][T31371] EXT4-fs: Ignoring removed mblk_io_submit option [ 746.493498][T31371] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.8732: corrupted in-inode xattr: invalid ea_ino [ 746.509600][T31371] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.8732: couldn't read orphan inode 15 (err -117) [ 746.705446][ T1849] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 746.717778][ T1849] EXT4-fs (loop3): This should not happen!! Data will be lost [ 746.717778][ T1849] [ 746.750378][T31390] loop6: detected capacity change from 0 to 512 [ 746.789052][T31390] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.8738: attempt to clear invalid blocks 2 len 1 [ 746.817335][T31391] team0: Device ipvlan2 failed to register rx_handler [ 746.852287][T31390] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 746.913236][T31390] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.8738: invalid indirect mapped block 1819239214 (level 0) [ 746.962320][T31390] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.8738: invalid indirect mapped block 1819239214 (level 1) [ 747.001433][T31390] EXT4-fs (loop6): 1 truncate cleaned up [ 747.020715][T31390] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.8738: Unrecognised inode hash code 20 [ 747.032321][T31390] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.8738: Corrupt directory, running e2fsck is recommended [ 747.123926][T31402] loop6: detected capacity change from 0 to 4096 [ 747.130536][T31402] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 747.167630][T31409] loop7: detected capacity change from 0 to 512 [ 747.177944][T31409] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.8746: corrupted in-inode xattr: invalid ea_ino [ 747.193263][T31409] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.8746: couldn't read orphan inode 15 (err -117) [ 747.243104][T31424] loop4: detected capacity change from 0 to 512 [ 747.273485][T31424] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 747.288763][T31424] EXT4-fs (loop4): mount failed [ 747.302439][T31424] loop4: detected capacity change from 0 to 512 [ 747.309103][T31424] EXT4-fs: Ignoring removed mblk_io_submit option [ 747.319259][T31424] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8753: corrupted in-inode xattr: invalid ea_ino [ 747.333198][T31424] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.8753: couldn't read orphan inode 15 (err -117) [ 747.349525][T31437] loop6: detected capacity change from 0 to 512 [ 747.356292][T31437] EXT4-fs: Ignoring removed bh option [ 747.362088][T31437] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 747.375907][T31437] EXT4-fs (loop6): 1 truncate cleaned up [ 747.441625][T31449] __nla_validate_parse: 4 callbacks suppressed [ 747.441670][T31449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8760'. [ 747.457940][T31437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8758'. [ 747.712237][T31472] loop5: detected capacity change from 0 to 512 [ 747.740015][T31474] usb usb4: usbfs: process 31474 (syz.4.8772) did not claim interface 0 before use [ 747.751643][T31472] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 747.766932][T31472] EXT4-fs (loop5): mount failed [ 747.792490][T31481] loop6: detected capacity change from 0 to 1024 [ 747.799364][T31481] EXT4-fs: Ignoring removed nomblk_io_submit option [ 747.807139][T31481] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 747.823421][T31472] loop5: detected capacity change from 0 to 512 [ 747.830594][T31472] EXT4-fs: Ignoring removed mblk_io_submit option [ 747.838732][T31472] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8771: corrupted in-inode xattr: invalid ea_ino [ 747.852644][T31481] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 747.855876][T31472] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.8771: couldn't read orphan inode 15 (err -117) [ 747.875449][T31481] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿÿÿ1844674407370955161518446744073709551615' [ 748.026944][T31492] loop3: detected capacity change from 0 to 512 [ 748.043368][T31492] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 748.052540][T31495] FAULT_INJECTION: forcing a failure. [ 748.052540][T31495] name failslab, interval 1, probability 0, space 0, times 0 [ 748.055775][T31492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 748.065358][T31495] CPU: 0 UID: 0 PID: 31495 Comm: syz.5.8777 Not tainted 6.12.0-syzkaller #0 [ 748.082013][T31495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 748.084916][T31492] System zones: [ 748.092073][T31495] Call Trace: [ 748.092085][T31495] [ 748.092095][T31495] dump_stack_lvl+0xf2/0x150 [ 748.095686][T31492] 1-12 [ 748.098906][T31495] dump_stack+0x15/0x20 [ 748.101831][T31492] [ 748.115642][T31495] should_fail_ex+0x223/0x230 [ 748.120446][T31495] ? skb_clone+0x154/0x1f0 [ 748.124896][T31495] should_failslab+0x8f/0xb0 [ 748.129641][T31495] kmem_cache_alloc_noprof+0x4c/0x290 [ 748.135127][T31495] skb_clone+0x154/0x1f0 [ 748.139394][T31495] __netlink_deliver_tap+0x2bd/0x4c0 [ 748.144731][T31495] netlink_unicast+0x64a/0x670 [ 748.149558][T31495] netlink_sendmsg+0x5cc/0x6e0 [ 748.154435][T31495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.159754][T31495] __sock_sendmsg+0x140/0x180 [ 748.164569][T31495] ____sys_sendmsg+0x312/0x410 [ 748.169405][T31495] __sys_sendmsg+0x1d9/0x270 [ 748.174115][T31495] __x64_sys_sendmsg+0x46/0x50 [ 748.178912][T31495] x64_sys_call+0x2689/0x2d60 [ 748.183625][T31495] do_syscall_64+0xc9/0x1c0 [ 748.188154][T31495] ? clear_bhb_loop+0x55/0xb0 [ 748.192852][T31495] ? clear_bhb_loop+0x55/0xb0 [ 748.197568][T31495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.203501][T31495] RIP: 0033:0x7fe9c55ee719 [ 748.205797][T31492] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.8776: corrupted in-inode xattr: e_value size too large [ 748.207919][T31495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.237201][T31492] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.8776: couldn't read orphan inode 15 (err -117) [ 748.241476][T31495] RSP: 002b:00007fe9c4267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.241502][T31495] RAX: ffffffffffffffda RBX: 00007fe9c57a5f80 RCX: 00007fe9c55ee719 [ 748.269755][T31495] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 748.277815][T31495] RBP: 00007fe9c4267090 R08: 0000000000000000 R09: 0000000000000000 [ 748.285867][T31495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.293863][T31495] R13: 0000000000000000 R14: 00007fe9c57a5f80 R15: 00007fffbd3c6068 [ 748.301866][T31495] [ 748.308666][T31492] pim6reg1: entered promiscuous mode [ 748.314013][T31492] pim6reg1: entered allmulticast mode [ 748.330484][T31492] 9pnet_fd: Insufficient options for proto=fd [ 748.337563][T31501] 9pnet_fd: Insufficient options for proto=fd [ 748.346151][ T29] kauditd_printk_skb: 983 callbacks suppressed [ 748.346166][ T29] audit: type=1400 audit(1731948388.189:55790): avc: denied { validate_trans } for pid=31491 comm="syz.3.8776" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 748.377253][T31504] usb usb4: usbfs: process 31504 (syz.7.8782) did not claim interface 0 before use [ 748.484991][T31512] loop5: detected capacity change from 0 to 512 [ 748.499170][T31512] EXT4-fs: Ignoring removed oldalloc option [ 748.521702][T31512] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 748.547561][T31512] EXT4-fs (loop5): 1 truncate cleaned up [ 748.589979][ T29] audit: type=1326 audit(1731948388.429:55791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31518 comm="syz.3.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 748.622144][T31519] loop3: detected capacity change from 0 to 164 [ 748.629459][ T29] audit: type=1326 audit(1731948388.429:55792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31518 comm="syz.3.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 748.653274][ T29] audit: type=1326 audit(1731948388.429:55793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31518 comm="syz.3.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 748.676944][ T29] audit: type=1326 audit(1731948388.429:55794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31518 comm="syz.3.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 748.700599][ T29] audit: type=1326 audit(1731948388.459:55795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31518 comm="syz.3.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 748.724365][ T29] audit: type=1326 audit(1731948388.459:55796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31518 comm="syz.3.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 748.748104][ T29] audit: type=1326 audit(1731948388.459:55797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31518 comm="syz.3.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 748.771774][ T29] audit: type=1326 audit(1731948388.459:55798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31518 comm="syz.3.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 748.795416][ T29] audit: type=1326 audit(1731948388.459:55799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31518 comm="syz.3.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fb1e719 code=0x7ffc0000 [ 748.827548][T31519] Unable to read rock-ridge attributes [ 748.834952][T31519] Unable to read rock-ridge attributes [ 748.913621][T31529] 9pnet_fd: Insufficient options for proto=fd [ 748.942873][T31533] loop3: detected capacity change from 0 to 512 [ 749.009855][T31533] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.8794: attempt to clear invalid blocks 2 len 1 [ 749.023223][T31533] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 749.043425][T31533] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8794: invalid indirect mapped block 1819239214 (level 0) [ 749.097731][T31543] netlink: 6084 bytes leftover after parsing attributes in process `syz.5.8798'. [ 749.106176][T31533] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8794: invalid indirect mapped block 1819239214 (level 1) [ 749.106916][T31543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8798'. [ 749.121907][T31533] EXT4-fs (loop3): 1 truncate cleaned up [ 749.129849][T31543] netlink: 6084 bytes leftover after parsing attributes in process `syz.5.8798'. [ 749.154044][T31533] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.8794: Unrecognised inode hash code 20 [ 749.165651][T31533] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.8794: Corrupt directory, running e2fsck is recommended [ 749.193662][T31548] loop4: detected capacity change from 0 to 164 [ 749.205176][T31548] Unable to read rock-ridge attributes [ 749.213014][T31548] Unable to read rock-ridge attributes [ 749.235538][T31555] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.8797'. [ 749.244827][T31555] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8797'. [ 749.271060][T31559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8805'. [ 749.323836][T31563] loop4: detected capacity change from 0 to 512 [ 749.331289][T31563] EXT4-fs: Ignoring removed oldalloc option [ 749.339919][T31563] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 749.367535][T31563] EXT4-fs (loop4): 1 truncate cleaned up [ 749.414170][T31571] loop4: detected capacity change from 0 to 512 [ 749.426492][T31571] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.8809: attempt to clear invalid blocks 2 len 1 [ 749.440136][T31571] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 749.455386][T31571] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.8809: invalid indirect mapped block 1819239214 (level 0) [ 749.474512][T31571] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.8809: invalid indirect mapped block 1819239214 (level 1) [ 749.495477][T31571] EXT4-fs (loop4): 1 truncate cleaned up [ 749.508369][T31571] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.8809: Unrecognised inode hash code 20 [ 749.519819][T31571] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.8809: Corrupt directory, running e2fsck is recommended [ 749.687304][T31584] loop4: detected capacity change from 0 to 512 [ 749.696595][T31584] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8813: corrupted in-inode xattr: invalid ea_ino [ 749.713533][T31584] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.8813: couldn't read orphan inode 15 (err -117) [ 749.723501][T31587] loop3: detected capacity change from 0 to 1024 [ 749.732099][T31587] EXT4-fs: Ignoring removed oldalloc option [ 749.738501][T31587] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 749.861317][T31595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8816'. [ 749.870411][T31594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8817'. [ 749.949544][T31600] syzkaller0: entered allmulticast mode [ 750.000143][T31603] loop3: detected capacity change from 0 to 512 [ 750.010423][T31598] syzkaller0: left allmulticast mode [ 750.099220][T31607] loop4: detected capacity change from 0 to 512 [ 750.114074][T31607] EXT4-fs: Ignoring removed orlov option [ 750.128385][T31607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 750.168328][T31607] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.181749][T31619] loop7: detected capacity change from 0 to 1024 [ 750.185533][T31607] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8822: bg 0: block 255: padding at end of block bitmap is not set [ 750.203366][T31607] EXT4-fs (loop4): Remounting filesystem read-only [ 750.212027][T31619] EXT4-fs: Ignoring removed oldalloc option [ 750.240128][T31619] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 750.262684][T31634] loop6: detected capacity change from 0 to 512 [ 750.290696][T31634] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.8833: attempt to clear invalid blocks 2 len 1 [ 750.307209][T31634] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 750.321103][T31631] loop3: detected capacity change from 0 to 4096 [ 750.322341][T31634] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.8833: invalid indirect mapped block 1819239214 (level 0) [ 750.342664][T31634] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.8833: invalid indirect mapped block 1819239214 (level 1) [ 750.342692][T31639] syzkaller0: entered allmulticast mode [ 750.363595][T31634] EXT4-fs (loop6): 1 truncate cleaned up [ 750.371556][T31634] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.8833: Unrecognised inode hash code 20 [ 750.379293][T31631] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 750.383025][T31634] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.8833: Corrupt directory, running e2fsck is recommended [ 750.456480][T31637] syzkaller0: left allmulticast mode [ 750.627687][T31670] loop3: detected capacity change from 0 to 512 [ 750.652177][T31677] loop5: detected capacity change from 0 to 512 [ 750.660651][T31670] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.8846: attempt to clear invalid blocks 2 len 1 [ 750.661725][T31674] loop6: detected capacity change from 0 to 4096 [ 750.674832][T31670] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 750.680361][T31674] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 750.695428][T31670] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8846: invalid indirect mapped block 1819239214 (level 0) [ 750.717946][T31670] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8846: invalid indirect mapped block 1819239214 (level 1) [ 750.732601][T31670] EXT4-fs (loop3): 1 truncate cleaned up [ 750.739159][T31677] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 750.743529][T31681] loop6: detected capacity change from 0 to 164 [ 750.757689][T31677] EXT4-fs (loop5): mount failed [ 750.763981][T31670] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.8846: Unrecognised inode hash code 20 [ 750.776633][T31670] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.8846: Corrupt directory, running e2fsck is recommended [ 750.777134][T31681] Unable to read rock-ridge attributes [ 750.804110][T31677] loop5: detected capacity change from 0 to 512 [ 750.810742][T31677] EXT4-fs: Ignoring removed mblk_io_submit option [ 750.811334][T31681] Unable to read rock-ridge attributes [ 750.830971][T31677] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8850: corrupted in-inode xattr: invalid ea_ino [ 750.839878][T31684] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 750.845127][T31677] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.8850: couldn't read orphan inode 15 (err -117) [ 750.850775][T31684] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 750.870243][T31684] vhci_hcd vhci_hcd.0: Device attached [ 750.879059][T31685] vhci_hcd: connection closed [ 750.882056][ T2264] vhci_hcd: stop threads [ 750.891167][ T2264] vhci_hcd: release socket [ 750.895613][ T2264] vhci_hcd: disconnect device [ 750.931984][T31692] loop6: detected capacity change from 0 to 512 [ 750.938653][T31692] EXT4-fs: Ignoring removed oldalloc option [ 750.945263][T31692] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 750.966716][T31692] EXT4-fs (loop6): 1 truncate cleaned up [ 751.004263][T31704] gre0: Master is either lo or non-ether device [ 751.041670][T31708] loop5: detected capacity change from 0 to 512 [ 751.050561][T31708] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.8862: attempt to clear invalid blocks 2 len 1 [ 751.054203][T31710] loop6: detected capacity change from 0 to 512 [ 751.063802][T31708] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 751.084677][T31708] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.8862: invalid indirect mapped block 1819239214 (level 0) [ 751.088415][T31710] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.8863: corrupted in-inode xattr: invalid ea_ino [ 751.099371][T31708] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.8862: invalid indirect mapped block 1819239214 (level 1) [ 751.112649][T31710] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.8863: couldn't read orphan inode 15 (err -117) [ 751.127254][T31708] EXT4-fs (loop5): 1 truncate cleaned up [ 751.147413][T31708] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.8862: Unrecognised inode hash code 20 [ 751.158932][T31708] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8862: Corrupt directory, running e2fsck is recommended [ 751.211297][T31714] loop4: detected capacity change from 0 to 4096 [ 751.218556][T31714] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 751.245215][T31718] bond2: entered promiscuous mode [ 751.250325][T31718] bond2: entered allmulticast mode [ 751.256957][T31718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 751.268464][T31718] bond2 (unregistering): Released all slaves [ 751.356477][T31736] loop7: detected capacity change from 0 to 1024 [ 751.369475][T31736] EXT4-fs: Ignoring removed oldalloc option [ 751.397779][T31736] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 751.530447][T21237] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.580544][T21237] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.608256][T31737] chnl_net:caif_netlink_parms(): no params data found [ 751.644409][T31737] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.651541][T31737] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.658954][T31737] bridge_slave_0: entered allmulticast mode [ 751.665473][T31737] bridge_slave_0: entered promiscuous mode [ 751.672621][T31737] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.679823][T31737] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.687563][T31737] bridge_slave_1: entered allmulticast mode [ 751.694057][T31737] bridge_slave_1: entered promiscuous mode [ 751.707188][T21237] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.726885][T31737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.738562][T31737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.751416][T21237] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.762002][T31768] loop4: detected capacity change from 0 to 4096 [ 751.769961][T31768] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 751.785645][T31737] team0: Port device team_slave_0 added [ 751.792534][T31737] team0: Port device team_slave_1 added [ 751.811372][T31737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.818490][T31737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.844490][T31737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.856486][T31737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.863562][T31737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.889531][T31737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.899667][T31774] loop4: detected capacity change from 0 to 164 [ 751.910979][T31774] Unable to read rock-ridge attributes [ 751.918139][T31774] Unable to read rock-ridge attributes [ 751.927283][T31737] hsr_slave_0: entered promiscuous mode [ 751.933588][T31737] hsr_slave_1: entered promiscuous mode [ 751.957539][T21237] bridge_slave_1: left allmulticast mode [ 751.963250][T21237] bridge_slave_1: left promiscuous mode [ 751.969054][T21237] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.977068][T21237] bridge_slave_0: left allmulticast mode [ 751.982732][T21237] bridge_slave_0: left promiscuous mode [ 751.988553][T21237] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.048736][T21237] dvmrp0 (unregistering): left allmulticast mode [ 752.147098][T21237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.157630][T21237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.168068][T21237] bond0 (unregistering): (slave team0): Releasing backup interface [ 752.177718][T21237] bond0 (unregistering): Released all slaves [ 752.187924][T21237] bond1 (unregistering): Released all slaves [ 752.232894][T21237] tipc: Left network mode [ 752.245050][T21237] hsr_slave_0: left promiscuous mode [ 752.250878][T21237] hsr_slave_1: left promiscuous mode [ 752.258608][T21237] veth1_macvtap: left promiscuous mode [ 752.264185][T21237] veth0_macvtap: left promiscuous mode [ 752.269934][T21237] veth1_vlan: left promiscuous mode [ 752.275301][T21237] veth0_vlan: left promiscuous mode [ 752.368225][T31791] loop3: detected capacity change from 0 to 4096 [ 752.375075][T21237] team0 (unregistering): Port device team_slave_1 removed [ 752.385296][T31791] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 752.395284][T21237] team0 (unregistering): Port device team_slave_0 removed [ 752.416388][T31798] loop7: detected capacity change from 0 to 1024 [ 752.424101][T31798] EXT4-fs: Ignoring removed oldalloc option [ 752.430700][T31798] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 752.521808][T31812] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 752.528375][T31812] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 752.536076][T31812] vhci_hcd vhci_hcd.0: Device attached [ 752.542237][T31813] vhci_hcd: connection closed [ 752.542808][ T11] vhci_hcd: stop threads [ 752.551881][ T11] vhci_hcd: release socket [ 752.556357][ T11] vhci_hcd: disconnect device [ 752.582329][T31817] loop6: detected capacity change from 0 to 164 [ 752.590121][T31817] Unable to read rock-ridge attributes [ 752.597425][T31817] Unable to read rock-ridge attributes [ 752.645847][T31821] loop6: detected capacity change from 0 to 164 [ 752.653388][T31821] Unable to read rock-ridge attributes [ 752.660427][T31821] Unable to read rock-ridge attributes [ 752.742762][T31825] loop6: detected capacity change from 0 to 512 [ 752.745440][T31737] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 752.759244][T31737] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 752.768193][T31737] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 752.777941][T31737] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 752.797852][T31829] loop6: detected capacity change from 0 to 4096 [ 752.805063][T31829] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 752.820210][T31737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.827455][T31829] __nla_validate_parse: 10 callbacks suppressed [ 752.827473][T31829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8904'. [ 752.842775][T31829] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8904'. [ 752.862336][T31737] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.872043][T21237] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.879223][T21237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.899301][T21237] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.906505][T21237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.927186][T31737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 752.937617][T31737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 753.003013][T31841] loop4: detected capacity change from 0 to 164 [ 753.016166][T31841] Unable to read rock-ridge attributes [ 753.023454][T31841] Unable to read rock-ridge attributes [ 753.040019][T31737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.188408][T31860] loop7: detected capacity change from 0 to 512 [ 753.217254][T31860] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.8915: couldn't read orphan inode 26 (err -116) [ 753.218880][T31869] netlink: 6084 bytes leftover after parsing attributes in process `syz.6.8916'. [ 753.238423][T31869] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8916'. [ 753.239416][T31860] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.247410][T31869] netlink: 6084 bytes leftover after parsing attributes in process `syz.6.8916'. [ 753.261742][T31737] veth0_vlan: entered promiscuous mode [ 753.284076][T31737] veth1_vlan: entered promiscuous mode [ 753.299970][T31737] veth0_macvtap: entered promiscuous mode [ 753.307746][T31737] veth1_macvtap: entered promiscuous mode [ 753.318542][T31737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.329122][T31737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.341095][T31737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.352715][T31737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.363289][T31737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.375783][T31737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.386387][T31737] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.395174][T31737] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.402647][T31880] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 753.403908][T31737] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.410411][T31880] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 753.410586][T31880] vhci_hcd vhci_hcd.0: Device attached [ 753.412672][T31881] vhci_hcd: connection closed [ 753.419492][T31737] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.432690][T17501] vhci_hcd: stop threads [ 753.449663][T31884] loop6: detected capacity change from 0 to 512 [ 753.450278][T17501] vhci_hcd: release socket [ 753.450288][T17501] vhci_hcd: disconnect device [ 753.476750][T31884] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.8917: couldn't read orphan inode 26 (err -116) [ 753.489725][T31884] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.587441][T31893] loop5: detected capacity change from 0 to 164 [ 753.615019][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 753.615040][ T29] audit: type=1326 audit(1731948393.419:56287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31890 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf2cee719 code=0x7ffc0000 [ 753.645007][ T29] audit: type=1326 audit(1731948393.419:56288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31890 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf2cee719 code=0x7ffc0000 [ 753.668761][ T29] audit: type=1326 audit(1731948393.419:56289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31890 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf2cee719 code=0x7ffc0000 [ 753.692357][ T29] audit: type=1326 audit(1731948393.419:56290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31890 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf2cee719 code=0x7ffc0000 [ 753.716030][ T29] audit: type=1326 audit(1731948393.419:56291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31890 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf2cee719 code=0x7ffc0000 [ 753.739605][ T29] audit: type=1326 audit(1731948393.419:56292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31890 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf2cee719 code=0x7ffc0000 [ 753.763222][ T29] audit: type=1326 audit(1731948393.419:56293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31890 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf2cee719 code=0x7ffc0000 [ 753.786814][ T29] audit: type=1326 audit(1731948393.419:56294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31890 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf2cee719 code=0x7ffc0000 [ 753.810455][ T29] audit: type=1326 audit(1731948393.419:56295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31890 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fcbf2cee719 code=0x7ffc0000 [ 753.834094][ T29] audit: type=1326 audit(1731948393.419:56296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31890 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf2cee719 code=0x7ffc0000 [ 753.863367][T31893] Unable to read rock-ridge attributes [ 753.871487][T31891] Unable to read rock-ridge attributes [ 753.913716][T31900] loop5: detected capacity change from 0 to 512 [ 753.926632][T31900] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 753.941455][T31900] EXT4-fs (loop5): mount failed [ 753.952635][T31900] dvmrp0: entered allmulticast mode [ 753.962440][T31900] loop5: detected capacity change from 0 to 512 [ 753.969155][T31900] EXT4-fs: Ignoring removed mblk_io_submit option [ 753.977330][T31900] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8924: corrupted in-inode xattr: invalid ea_ino [ 753.991838][T31900] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.8924: couldn't read orphan inode 15 (err -117) [ 754.139231][T31917] loop5: detected capacity change from 0 to 512 [ 754.156286][T31917] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.8927: couldn't read orphan inode 26 (err -116) [ 754.168835][T31917] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 754.196747][T31905] chnl_net:caif_netlink_parms(): no params data found [ 754.266566][T17501] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.353883][T31933] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 754.360549][T31933] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 754.368256][T31933] vhci_hcd vhci_hcd.0: Device attached [ 754.386528][T31933] loop5: detected capacity change from 0 to 512 [ 754.393554][T31933] EXT4-fs: Ignoring removed oldalloc option [ 754.436141][T31942] loop7: detected capacity change from 0 to 164 [ 754.447980][T17501] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.459336][T31942] Unable to read rock-ridge attributes [ 754.461073][T31933] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.8931: Parent and EA inode have the same ino 15 [ 754.466472][T31942] Unable to read rock-ridge attributes [ 754.485303][T31905] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.487034][T31933] EXT4-fs (loop5): Remounting filesystem read-only [ 754.492465][T31905] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.498916][T31933] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 754.516772][T31933] EXT4-fs (loop5): 1 orphan inode deleted [ 754.523071][T31933] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 754.530093][T31905] bridge_slave_0: entered allmulticast mode [ 754.537303][T31905] bridge_slave_0: entered promiscuous mode [ 754.544795][ T3395] vhci_hcd: vhci_device speed not set [ 754.563462][T17501] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.584627][T31905] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.591807][T31905] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.605043][ T3395] usb 11-1: new full-speed USB device number 9 using vhci_hcd [ 754.616299][T31934] vhci_hcd: connection closed [ 754.616488][ T2264] vhci_hcd: stop threads [ 754.625495][ T2264] vhci_hcd: release socket [ 754.630003][ T2264] vhci_hcd: disconnect device [ 754.637139][T31905] bridge_slave_1: entered allmulticast mode [ 754.643482][ T3395] usb 11-1: enqueue for inactive port 0 [ 754.644160][T31905] bridge_slave_1: entered promiscuous mode [ 754.649440][ T3395] usb 11-1: enqueue for inactive port 0 [ 754.673831][ T3395] usb 11-1: enqueue for inactive port 0 [ 754.686127][T17501] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.721033][T31905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.766690][ T3395] vhci_hcd: vhci_device speed not set [ 754.776173][T31905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.835427][T31905] team0: Port device team_slave_0 added [ 754.842211][T31905] team0: Port device team_slave_1 added [ 754.851504][T17501] bridge_slave_1: left allmulticast mode [ 754.857324][T17501] bridge_slave_1: left promiscuous mode [ 754.863053][T17501] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.871505][T31948] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 754.878060][T31948] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 754.885739][T31948] vhci_hcd vhci_hcd.0: Device attached [ 754.892347][T17501] bridge_slave_0: left allmulticast mode [ 754.898070][T17501] bridge_slave_0: left promiscuous mode [ 754.903839][T17501] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.911756][T31949] vhci_hcd: connection closed [ 754.912300][ T2264] vhci_hcd: stop threads [ 754.921302][ T2264] vhci_hcd: release socket [ 754.925775][ T2264] vhci_hcd: disconnect device [ 755.014445][T17501] dvmrp0 (unregistering): left allmulticast mode [ 755.097484][T31952] loop3: detected capacity change from 0 to 512 [ 755.107445][T17501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.118137][T17501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.118680][T31952] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.8938: couldn't read orphan inode 26 (err -116) [ 755.139412][T31952] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 755.150226][T17501] bond0 (unregistering): (slave team0): Releasing backup interface [ 755.161880][T17501] bond0 (unregistering): Released all slaves [ 755.170753][T17501] bond1 (unregistering): Released all slaves [ 755.180156][T17501] bond2 (unregistering): Released all slaves [ 755.195850][T31958] usb usb4: usbfs: process 31958 (syz.5.8940) did not claim interface 0 before use [ 755.235325][T31905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.242346][T31905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.268394][T31905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.287025][T31962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8941'. [ 755.314358][T17501] hsr_slave_0: left promiscuous mode [ 755.321288][T17501] hsr_slave_1: left promiscuous mode [ 755.328638][T31966] loop5: detected capacity change from 0 to 512 [ 755.336971][T17501] veth1_macvtap: left promiscuous mode [ 755.342501][T17501] veth0_macvtap: left promiscuous mode [ 755.348095][T17501] veth1_vlan: left promiscuous mode [ 755.353411][T17501] veth0_vlan: left promiscuous mode [ 755.409362][T31974] loop5: detected capacity change from 0 to 512 [ 755.413250][T31975] 9pnet_fd: Insufficient options for proto=fd [ 755.451951][T17501] team0 (unregistering): Port device team_slave_1 removed [ 755.469322][T17501] team0 (unregistering): Port device team_slave_0 removed [ 755.475517][T31981] loop5: detected capacity change from 0 to 512 [ 755.486606][T31981] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.8950: attempt to clear invalid blocks 2 len 1 [ 755.500257][T31981] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 755.514874][T31981] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.8950: invalid indirect mapped block 1819239214 (level 0) [ 755.533623][T31981] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.8950: invalid indirect mapped block 1819239214 (level 1) [ 755.548383][T31905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.549184][T31981] EXT4-fs (loop5): 1 truncate cleaned up [ 755.555544][T31905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.568871][T31981] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.8950: Unrecognised inode hash code 20 [ 755.587023][T31905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.609158][T31981] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8950: Corrupt directory, running e2fsck is recommended [ 755.630870][T31980] loop6: detected capacity change from 0 to 512 [ 755.641766][T31905] hsr_slave_0: entered promiscuous mode [ 755.648947][T31905] hsr_slave_1: entered promiscuous mode [ 755.655898][T31905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 755.656225][T31980] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.8951: couldn't read orphan inode 26 (err -116) [ 755.663457][T31905] Cannot create hsr debugfs directory [ 755.681577][T31980] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 755.701904][T31988] syzkaller0: entered allmulticast mode [ 755.717807][T31987] syzkaller0: left allmulticast mode [ 755.761731][T31995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8955'. [ 755.809334][T31994] loop5: detected capacity change from 0 to 512 [ 755.887678][T32008] loop5: detected capacity change from 0 to 512 [ 755.897572][T32008] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.8961: attempt to clear invalid blocks 2 len 1 [ 755.910858][T32008] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 755.928877][T32008] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.8961: invalid indirect mapped block 1819239214 (level 0) [ 755.943118][T32008] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.8961: invalid indirect mapped block 1819239214 (level 1) [ 755.958165][T32008] EXT4-fs (loop5): 1 truncate cleaned up [ 755.962195][T32013] loop7: detected capacity change from 0 to 512 [ 755.965682][T32008] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.8961: Unrecognised inode hash code 20 [ 755.981504][T32008] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8961: Corrupt directory, running e2fsck is recommended [ 755.997734][T32013] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.8963: couldn't read orphan inode 26 (err -116) [ 756.010693][T32013] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.092084][T31905] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 756.102132][T31905] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 756.113414][T32020] loop5: detected capacity change from 0 to 512 [ 756.121457][T31905] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 756.129753][T32020] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.8965: couldn't read orphan inode 26 (err -116) [ 756.130839][T31905] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 756.148091][T32020] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.191595][T31905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.203802][T31905] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.213249][T17501] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.220419][T17501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.232412][ T2035] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.239568][ T2035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.281185][T32030] loop7: detected capacity change from 0 to 512 [ 756.301933][T31905] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 756.312447][T31905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.416494][T32047] loop7: detected capacity change from 0 to 512 [ 756.429109][T32047] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.8974: corrupted in-inode xattr: invalid ea_ino [ 756.448245][T32047] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.8974: couldn't read orphan inode 15 (err -117) [ 756.489656][T31905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.618891][T32055] loop7: detected capacity change from 0 to 164 [ 756.626708][T32055] Unable to read rock-ridge attributes [ 756.634123][T32055] Unable to read rock-ridge attributes [ 756.844443][T31905] veth0_vlan: entered promiscuous mode [ 756.860130][T31905] veth1_vlan: entered promiscuous mode [ 756.880746][T32076] loop7: detected capacity change from 0 to 512 [ 756.887110][T31905] veth0_macvtap: entered promiscuous mode [ 756.889058][T31905] veth1_macvtap: entered promiscuous mode [ 756.924813][T31905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.935506][T31905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.945465][T31905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.955950][T31905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.973151][T31905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.999093][T31905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.009734][T31905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.019637][T31905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.030107][T31905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.052843][T32079] loop3: detected capacity change from 0 to 4096 [ 757.067539][T31905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.086025][T31905] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.086346][T32079] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 757.094814][T31905] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.094854][T31905] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.120544][T31905] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.176364][T32079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8982'. [ 757.185396][T32079] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8982'. [ 757.225272][T32089] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 757.231843][T32089] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 757.239643][T32089] vhci_hcd vhci_hcd.0: Device attached [ 757.254173][T32090] vhci_hcd: connection closed [ 757.254287][ T2035] vhci_hcd: stop threads [ 757.263361][ T2035] vhci_hcd: release socket [ 757.267950][ T2035] vhci_hcd: disconnect device [ 757.621337][T32098] loop6: detected capacity change from 0 to 164 [ 757.637275][T32098] Unable to read rock-ridge attributes [ 757.653980][T32098] Unable to read rock-ridge attributes [ 757.713360][T32100] loop6: detected capacity change from 0 to 1024 [ 757.730089][T32100] EXT4-fs: Ignoring removed oldalloc option [ 757.744512][T32100] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 757.951951][T32109] loop6: detected capacity change from 0 to 512 [ 758.019392][T32120] 9pnet: Could not find request transport: fd0x0000000000000003 [ 758.090224][T32127] loop4: detected capacity change from 0 to 512 [ 758.436642][T32146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9007'. [ 758.445616][T32146] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9007'. [ 758.500460][T32150] 9pnet: Could not find request transport: fd0x0000000000000003 [ 758.613154][T32156] loop5: detected capacity change from 0 to 164 [ 758.625754][ T29] kauditd_printk_skb: 559 callbacks suppressed [ 758.625769][ T29] audit: type=1326 audit(1731948398.459:56855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32157 comm="syz.7.9012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f600445e719 code=0x7ffc0000 [ 758.655645][ T29] audit: type=1326 audit(1731948398.459:56856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32157 comm="syz.7.9012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600445e719 code=0x7ffc0000 [ 758.679337][ T29] audit: type=1326 audit(1731948398.459:56857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32157 comm="syz.7.9012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600445e719 code=0x7ffc0000 [ 758.703038][ T29] audit: type=1326 audit(1731948398.469:56858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32157 comm="syz.7.9012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f600445e719 code=0x7ffc0000 [ 758.726625][ T29] audit: type=1326 audit(1731948398.469:56859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32157 comm="syz.7.9012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600445e719 code=0x7ffc0000 [ 758.744129][T32156] Unable to read rock-ridge attributes [ 758.750303][ T29] audit: type=1326 audit(1731948398.469:56860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32157 comm="syz.7.9012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600445e719 code=0x7ffc0000 [ 758.751008][ T29] audit: type=1326 audit(1731948398.469:56861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32155 comm="syz.5.9011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcbf2ced3aa code=0x7ffc0000 [ 758.803119][ T29] audit: type=1326 audit(1731948398.469:56862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32155 comm="syz.5.9011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcbf2ced3aa code=0x7ffc0000 [ 758.807314][T32156] Unable to read rock-ridge attributes [ 758.826574][ T29] audit: type=1326 audit(1731948398.469:56863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32155 comm="syz.5.9011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcbf2cecfb7 code=0x7ffc0000 [ 758.826610][ T29] audit: type=1326 audit(1731948398.469:56864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32155 comm="syz.5.9011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcbf2cefeba code=0x7ffc0000 [ 758.994696][T32165] loop3: detected capacity change from 0 to 4096 [ 759.001498][T32165] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 759.019640][T32165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9015'. [ 759.028616][T32165] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9015'. [ 759.110319][T32184] loop3: detected capacity change from 0 to 512 [ 759.118702][T32180] loop4: detected capacity change from 0 to 512 [ 759.138695][T32180] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.9022: couldn't read orphan inode 26 (err -116) [ 759.140125][T32182] loop6: detected capacity change from 0 to 164 [ 759.163145][T32180] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 759.177716][T32182] Unable to read rock-ridge attributes [ 759.191946][T32182] Unable to read rock-ridge attributes [ 759.457583][T32200] 9pnet_fd: Insufficient options for proto=fd [ 759.684082][T32206] loop4: detected capacity change from 0 to 512 [ 759.693195][T32202] loop3: detected capacity change from 0 to 4096 [ 759.707434][T32202] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 759.738152][T32210] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9034'. [ 759.752376][T32202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9032'. [ 759.752698][T32206] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 759.761367][T32202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9032'. [ 759.797452][T32206] EXT4-fs (loop4): mount failed [ 759.823094][T32206] dvmrp0: entered allmulticast mode [ 759.878382][T32206] loop4: detected capacity change from 0 to 512 [ 759.888527][T32206] EXT4-fs: Ignoring removed mblk_io_submit option [ 759.901588][T32206] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.9029: corrupted in-inode xattr: invalid ea_ino [ 759.925688][T32221] usb usb4: usbfs: process 32221 (syz.6.9038) did not claim interface 0 before use [ 759.936085][T32206] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.9029: couldn't read orphan inode 15 (err -117) [ 760.088960][T32239] loop4: detected capacity change from 0 to 512 [ 760.124269][T32239] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.9045: couldn't read orphan inode 26 (err -116) [ 760.139483][T32239] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.288051][T32261] usb usb4: usbfs: process 32261 (syz.4.9053) did not claim interface 0 before use [ 760.434450][T21237] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.479203][T21237] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.495090][T32282] loop3: detected capacity change from 0 to 512 [ 760.621575][T21237] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.641939][T32282] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.9060: couldn't read orphan inode 26 (err -116) [ 760.699489][T21237] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.743290][T32252] chnl_net:caif_netlink_parms(): no params data found [ 760.754113][T32282] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.894218][T21237] bridge_slave_1: left allmulticast mode [ 760.900077][T21237] bridge_slave_1: left promiscuous mode [ 760.905874][T21237] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.918051][T32295] usb usb4: usbfs: process 32295 (syz.6.9061) did not claim interface 0 before use [ 760.940973][T21237] bridge_slave_0: left allmulticast mode [ 760.946701][T21237] bridge_slave_0: left promiscuous mode [ 760.952433][T21237] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.042180][T21237] dvmrp0 (unregistering): left allmulticast mode [ 761.127737][T21237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.139775][T21237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.151710][T21237] bond0 (unregistering): Released all slaves [ 761.161189][T21237] bond1 (unregistering): Released all slaves [ 761.176224][T32252] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.183444][T32252] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.191887][T32252] bridge_slave_0: entered allmulticast mode [ 761.198709][T32252] bridge_slave_0: entered promiscuous mode [ 761.207340][T32302] syzkaller0: entered allmulticast mode [ 761.220217][T32252] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.227609][T32252] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.236880][T32252] bridge_slave_1: entered allmulticast mode [ 761.243699][T32252] bridge_slave_1: entered promiscuous mode [ 761.290950][T21237] hsr_slave_0: left promiscuous mode [ 761.302014][T21237] hsr_slave_1: left promiscuous mode [ 761.313877][T21237] veth1_macvtap: left promiscuous mode [ 761.319505][T21237] veth0_macvtap: left promiscuous mode [ 761.325109][T21237] veth1_vlan: left promiscuous mode [ 761.330356][T21237] veth0_vlan: left promiscuous mode [ 761.429880][T21237] team0 (unregistering): Port device team_slave_1 removed [ 761.441142][T21237] team0 (unregistering): Port device team_slave_0 removed [ 761.479590][T32299] syzkaller0: left allmulticast mode [ 761.486568][T32252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.497770][T32252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.506966][T32307] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.9065'. [ 761.516133][T32307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9065'. [ 761.542109][T32309] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9065'. [ 761.560494][T32252] team0: Port device team_slave_0 added [ 761.567450][T32252] team0: Port device team_slave_1 added [ 761.589914][T32252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.597004][T32252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.623241][T32252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.635566][T32252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.642551][T32252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.668515][T32252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.702197][T32252] hsr_slave_0: entered promiscuous mode [ 761.708606][T32252] hsr_slave_1: entered promiscuous mode [ 761.714547][T32252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 761.722213][T32252] Cannot create hsr debugfs directory [ 761.820893][T32328] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 761.827437][T32328] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 761.835166][T32328] vhci_hcd vhci_hcd.0: Device attached [ 761.843275][T32329] vhci_hcd: connection closed [ 761.844451][ T2035] vhci_hcd: stop threads [ 761.853576][ T2035] vhci_hcd: release socket [ 761.858230][ T2035] vhci_hcd: disconnect device [ 762.078624][T32252] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 762.087638][T32252] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 762.097720][T32252] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 762.106422][T32252] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 762.143824][T32252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.161512][T32252] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.176529][T21237] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.183665][T21237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.196510][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.203618][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.274922][T32252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.408149][T32252] veth0_vlan: entered promiscuous mode [ 762.414578][T32358] syzkaller0: entered allmulticast mode [ 762.426902][T32252] veth1_vlan: entered promiscuous mode [ 762.445026][T32252] veth0_macvtap: entered promiscuous mode [ 762.452559][T32252] veth1_macvtap: entered promiscuous mode [ 762.463669][T32357] syzkaller0: left allmulticast mode [ 762.471651][T32252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.482272][T32252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.492274][T32252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.502782][T32252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.512755][T32252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.520730][T32366] loop5: detected capacity change from 0 to 512 [ 762.523353][T32252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.541302][T32366] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.9080: corrupted in-inode xattr: invalid ea_ino [ 762.542001][T32252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.563261][T32252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.573852][T32252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.574643][T32366] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.9080: couldn't read orphan inode 15 (err -117) [ 762.583759][T32252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.606152][T32252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.616017][T32252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.626518][T32252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.637176][T32369] usb usb4: usbfs: process 32369 (syz.3.9081) did not claim interface 0 before use [ 762.647903][T32252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.695148][T32252] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.703969][T32252] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.712709][T32252] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.721497][T32252] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.832840][T32379] loop5: detected capacity change from 0 to 164 [ 762.849340][T32379] Unable to read rock-ridge attributes [ 762.862654][T32379] Unable to read rock-ridge attributes [ 762.967851][T32390] loop5: detected capacity change from 0 to 512 [ 762.987722][T32390] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.9088: couldn't read orphan inode 26 (err -116) [ 763.000386][T32390] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.068135][T32398] syzkaller0: entered allmulticast mode [ 763.076841][T32397] loop4: detected capacity change from 0 to 512 [ 763.086309][T32397] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.9090: corrupted in-inode xattr: invalid ea_ino [ 763.100066][T32397] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.9090: couldn't read orphan inode 15 (err -117) [ 763.116970][T32396] syzkaller0: left allmulticast mode [ 763.460482][T32411] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 763.467168][T32411] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 763.474891][T32411] vhci_hcd vhci_hcd.0: Device attached [ 763.494677][T32411] loop4: detected capacity change from 0 to 512 [ 763.507144][T32411] EXT4-fs: Ignoring removed oldalloc option [ 763.519636][T32415] loop3: detected capacity change from 0 to 512 [ 763.536054][T32411] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.9095: Parent and EA inode have the same ino 15 [ 763.572417][T32411] EXT4-fs (loop4): Remounting filesystem read-only [ 763.579074][T32411] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 763.592159][T32411] EXT4-fs (loop4): 1 orphan inode deleted [ 763.605353][T32411] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 763.626937][T32412] vhci_hcd: connection closed [ 763.628183][ T2264] vhci_hcd: stop threads [ 763.637251][ T2264] vhci_hcd: release socket [ 763.641719][ T2264] vhci_hcd: disconnect device [ 763.655196][ T2983] vhci_hcd: vhci_device speed not set [ 763.806709][T17501] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.817227][T17501] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 763.834452][T32433] loop7: detected capacity change from 0 to 512 [ 763.872527][T32418] chnl_net:caif_netlink_parms(): no params data found [ 763.899468][T17501] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.909938][T17501] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 763.942932][T32418] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.950177][T32418] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.957633][T32418] bridge_slave_0: entered allmulticast mode [ 763.966092][T32418] bridge_slave_0: entered promiscuous mode [ 763.973846][T32418] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.980992][T32418] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.989804][T32418] bridge_slave_1: entered allmulticast mode [ 763.996454][T32418] bridge_slave_1: entered promiscuous mode [ 764.013486][T17501] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.023856][T17501] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 764.051155][T32444] syzkaller0: entered allmulticast mode [ 764.067840][T32418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.083168][T17501] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.093635][T17501] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 764.115865][T32418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.146693][T32418] team0: Port device team_slave_0 added [ 764.153749][T32418] team0: Port device team_slave_1 added [ 764.186828][T32443] syzkaller0: left allmulticast mode [ 764.193545][T32418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.200610][T32418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.226597][T32418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.238307][T32418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.245428][T32418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.271416][T32418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.304422][T17501] bridge_slave_1: left allmulticast mode [ 764.310277][T17501] bridge_slave_1: left promiscuous mode [ 764.316005][T17501] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.323862][T17501] bridge_slave_0: left allmulticast mode [ 764.329651][T17501] bridge_slave_0: left promiscuous mode [ 764.335397][T17501] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.353003][T32455] __nla_validate_parse: 6 callbacks suppressed [ 764.353015][T32455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9106'. [ 764.410731][T17501] dvmrp0 (unregistering): left allmulticast mode [ 764.498350][T17501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.511819][T17501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.523567][T17501] bond0 (unregistering): Released all slaves [ 764.534461][T17501] bond1 (unregistering): Released all slaves [ 764.574008][T32464] team0: Device ipvlan2 failed to register rx_handler [ 764.609024][T17501] hsr_slave_0: left promiscuous mode [ 764.615170][T17501] hsr_slave_1: left promiscuous mode [ 764.622552][T17501] veth1_macvtap: left promiscuous mode [ 764.628093][T17501] veth0_macvtap: left promiscuous mode [ 764.633624][T17501] veth1_vlan: left promiscuous mode [ 764.638925][T17501] veth0_vlan: left promiscuous mode [ 764.686663][T32252] EXT4-fs unmount: 99 callbacks suppressed [ 764.686679][T32252] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.761937][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 764.761951][ T29] audit: type=1107 audit(1731948404.599:57126): pid=32471 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 764.782035][T17501] team0 (unregistering): Port device team_slave_1 removed [ 764.799834][T17501] team0 (unregistering): Port device team_slave_0 removed [ 764.843179][ T29] audit: type=1107 audit(1731948404.679:57127): pid=32477 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 764.902376][T32418] hsr_slave_0: entered promiscuous mode [ 764.902973][T32418] hsr_slave_1: entered promiscuous mode [ 764.917363][T32418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 764.923875][T32487] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 764.925061][T32418] Cannot create hsr debugfs directory [ 764.931656][T32487] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 764.944716][T32487] vhci_hcd vhci_hcd.0: Device attached [ 764.952882][T32490] loop4: detected capacity change from 0 to 512 [ 764.965225][T32487] loop6: detected capacity change from 0 to 512 [ 764.971749][T32487] EXT4-fs: Ignoring removed oldalloc option [ 764.983205][T32490] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.9121: couldn't read orphan inode 26 (err -116) [ 764.996444][T32487] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.9120: Parent and EA inode have the same ino 15 [ 765.010093][T32490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.026511][T32490] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.028108][T32487] EXT4-fs (loop6): Remounting filesystem read-only [ 765.043557][T32487] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 765.058584][T32487] EXT4-fs (loop6): 1 orphan inode deleted [ 765.074395][T32487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.086617][T32487] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 765.093786][T32487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.133440][T32491] vhci_hcd: connection closed [ 765.135217][T31905] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.146053][ T8] vhci_hcd: vhci_device speed not set [ 765.154624][ T2035] vhci_hcd: stop threads [ 765.159010][ T2035] vhci_hcd: release socket [ 765.163667][ T2035] vhci_hcd: disconnect device [ 765.180832][ T29] audit: type=1326 audit(1731948405.009:57128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32504 comm="syz.7.9126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331d08e719 code=0x7ffc0000 [ 765.204613][ T29] audit: type=1326 audit(1731948405.009:57129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32504 comm="syz.7.9126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f331d08e719 code=0x7ffc0000 [ 765.207265][T32507] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9125'. [ 765.228233][ T29] audit: type=1326 audit(1731948405.009:57130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32504 comm="syz.7.9126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331d08e719 code=0x7ffc0000 [ 765.237326][ T8] usb 13-1: new full-speed USB device number 8 using vhci_hcd [ 765.260861][ T29] audit: type=1326 audit(1731948405.009:57131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32504 comm="syz.7.9126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f331d08e719 code=0x7ffc0000 [ 765.260909][ T29] audit: type=1326 audit(1731948405.009:57132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32504 comm="syz.7.9126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331d08e719 code=0x7ffc0000 [ 765.287246][ T8] usb 13-1: enqueue for inactive port 0 [ 765.322724][ T8] usb 13-1: enqueue for inactive port 0 [ 765.328680][ T8] usb 13-1: enqueue for inactive port 0 [ 765.361712][ T29] audit: type=1107 audit(1731948405.199:57133): pid=32508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 765.394789][ T8] vhci_hcd: vhci_device speed not set [ 765.454796][T32517] syzkaller0: entered allmulticast mode [ 765.460435][T32518] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.9128'. [ 765.469646][T32518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9128'. [ 765.518214][T32518] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9128'. [ 765.546955][T32516] syzkaller0: left allmulticast mode [ 765.569806][ T29] audit: type=1107 audit(1731948405.409:57134): pid=32523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 765.609035][ T29] audit: type=1107 audit(1731948405.449:57135): pid=32525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 765.638324][T32528] usb usb4: usbfs: process 32528 (syz.5.9134) did not claim interface 0 before use [ 765.640656][T32418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 765.656758][T32418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 765.666238][T32418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 765.676412][T32418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 765.706386][T32532] loop6: detected capacity change from 0 to 512 [ 765.724616][T32532] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.9136: corrupted in-inode xattr: invalid ea_ino [ 765.732632][T32418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.746467][T32532] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.9136: couldn't read orphan inode 15 (err -117) [ 765.751826][T32418] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.760261][T32532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.777507][T21237] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.777541][T21237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.779233][T21237] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.799006][T21237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.842958][T23848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.871727][T32540] team0: Device ipvlan2 failed to register rx_handler [ 765.892217][T32418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.964485][T32418] veth0_vlan: entered promiscuous mode [ 765.973293][T32418] veth1_vlan: entered promiscuous mode [ 765.990011][T32418] veth0_macvtap: entered promiscuous mode [ 765.997763][T32418] veth1_macvtap: entered promiscuous mode [ 766.009220][T32418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.019886][T32418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.029931][T32418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.040413][T32418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.050316][T32418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.060822][T32418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.070681][T32418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.081126][T32418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.091795][T32418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.099478][T32552] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.9139'. [ 766.108734][T32552] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9139'. [ 766.120943][T32418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.131464][T32418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.141338][T32418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.151789][T32418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.161679][T32418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.172129][T32418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.181973][T32418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.192577][T32418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.203643][T32418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.212174][T32418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.220929][T32418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.229736][T32418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.229873][ T3009] ================================================================== [ 766.238459][T32418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.246502][ T3009] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 766.262193][ T3009] [ 766.264528][ T3009] write to 0xffffffff866ffaa8 of 8 bytes by task 32418 on cpu 1: [ 766.272257][ T3009] prb_reserve+0x740/0xb60 [ 766.276686][ T3009] vprintk_store+0x53f/0x810 [ 766.281308][ T3009] vprintk_emit+0x15e/0x680 [ 766.285841][ T3009] dev_vprintk_emit+0x1df/0x210 [ 766.290698][ T3009] dev_printk_emit+0x82/0xb0 [ 766.295303][ T3009] __netdev_printk+0x352/0x3e0 [ 766.300107][ T3009] netdev_info+0x99/0xc0 [ 766.304371][ T3009] nsim_udp_tunnel_set_port+0x175/0x190 [ 766.309953][ T3009] __udp_tunnel_nic_device_sync+0x57b/0x9e0 [ 766.312810][T32555] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9139'. [ 766.315851][ T3009] __udp_tunnel_nic_add_port+0x66d/0x6e0 [ 766.315898][ T3009] udp_tunnel_notify_add_rx_port+0x126/0x190 [ 766.336435][ T3009] geneve_sock_add+0x389/0x5b0 [ 766.341203][ T3009] geneve_open+0xc1/0x100 [ 766.345535][ T3009] __dev_open+0x1f7/0x2e0 [ 766.349866][ T3009] __dev_change_flags+0x155/0x410 [ 766.354894][ T3009] dev_change_flags+0x59/0xd0 [ 766.359574][ T3009] do_setlink+0x844/0x2490 [ 766.363991][ T3009] rtnl_newlink+0x11a3/0x1690 [ 766.368677][ T3009] rtnetlink_rcv_msg+0x6aa/0x710 [ 766.373614][ T3009] netlink_rcv_skb+0x12c/0x230 [ 766.378397][ T3009] rtnetlink_rcv+0x1c/0x30 [ 766.382816][ T3009] netlink_unicast+0x599/0x670 [ 766.387602][ T3009] netlink_sendmsg+0x5cc/0x6e0 [ 766.392379][ T3009] __sock_sendmsg+0x140/0x180 [ 766.397061][ T3009] __sys_sendto+0x1d6/0x260 [ 766.401592][ T3009] __x64_sys_sendto+0x78/0x90 [ 766.406290][ T3009] x64_sys_call+0x2959/0x2d60 [ 766.410974][ T3009] do_syscall_64+0xc9/0x1c0 [ 766.415482][ T3009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.421386][ T3009] [ 766.423712][ T3009] read to 0xffffffff866ffaa8 of 8 bytes by task 3009 on cpu 0: [ 766.431264][ T3009] _prb_read_valid+0x3bb/0xba0 [ 766.436039][ T3009] prb_read_valid+0x3d/0x60 [ 766.440545][ T3009] syslog_print+0x157/0x760 [ 766.445067][ T3009] do_syslog+0x397/0x7e0 [ 766.449331][ T3009] __x64_sys_syslog+0x43/0x50 [ 766.454012][ T3009] x64_sys_call+0x1677/0x2d60 [ 766.458693][ T3009] do_syscall_64+0xc9/0x1c0 [ 766.463199][ T3009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.469101][ T3009] [ 766.471432][ T3009] value changed: 0x000000000000338b -> 0x000000000000538b [ 766.478555][ T3009] [ 766.480882][ T3009] Reported by Kernel Concurrency Sanitizer on: [ 766.487021][ T3009] CPU: 0 UID: 0 PID: 3009 Comm: klogd Not tainted 6.12.0-syzkaller #0 [ 766.495172][ T3009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 766.505226][ T3009] ================================================================== [ 766.534663][T32559] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9140'.