last executing test programs: 1m29.704467984s ago: executing program 0 (id=185): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x400) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m29.572750476s ago: executing program 0 (id=190): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, 0x0}, 0x20) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000440)='GPL\x00', 0x7, 0x5f, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) fgetxattr(r7, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x300, 0x100, 0x1}}) 1m29.527759927s ago: executing program 0 (id=192): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000040)=""/51, 0x0, 0x33, 0x0, 0x7, 0x10000, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, 0x0}, 0x20) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000440)='GPL\x00', 0x7, 0x5f, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) fgetxattr(r7, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x300, 0x100, 0x1}}) 1m29.461998728s ago: executing program 0 (id=197): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300), 0xd, 0x5f6, &(0x7f0000000c00)="$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") open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x568c, &(0x7f0000000400)={0x0, 0xdd57, 0x80, 0x1, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x0}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000002740)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYBLOB="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", @ANYRES32, @ANYBLOB="fc000000000000000000000000000000000000003300b000e00000020000000000001f0000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd700000000000c870013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbf8, 0x2000}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}}, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) 1m29.30757869s ago: executing program 0 (id=199): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) personality(0xfe47fef9f5ff7379) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") write$binfmt_register(0xffffffffffffffff, &(0x7f00000008c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjqu/ta=', 0x3a, '\x96!\f\xa6\xc52\x82\xacco\x87\xd1\xfd\x8f\xf8B4n\x16\xa14\x98\xa3\xddl\x1d\xd8EA\xd2Z0m\xb4\x9aR\xa6\xbf&\xe0?\x0e\xb4mV\xe4\xf7\t\xf4PFjh\xd8\xc4\x9f\x81\xa1F\'\xc1mj\x050x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m19.657061343s ago: executing program 1 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 1m19.655903014s ago: executing program 33 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 1m8.817966456s ago: executing program 2 (id=622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xfde6, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000040) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r3, &(0x7f0000000080)='3', 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m8.774475647s ago: executing program 2 (id=624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000005ca7d33f878d72b77472c52783a00000000000000000000000000000d90000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000006c0)=[{0x0, 0x0, 0x9, 0x9d}], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1m8.707728708s ago: executing program 2 (id=627): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) (async) flock(r6, 0x2) dup3(r6, r5, 0x0) (async) dup3(r6, r5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 1m8.612134409s ago: executing program 2 (id=631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000000), 0x2, 0x57e, &(0x7f00000001c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x8004587d, &(0x7f0000000080)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x10040, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1830022, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0xb9c}}], [{@uid_eq}]}) ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, &(0x7f0000001580)={{r4}, "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"}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x40, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) rt_sigsuspend(&(0x7f0000000740)={[0x1]}, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x8}, 0x2, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1m7.757020173s ago: executing program 2 (id=650): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x2, 0x4000) close(r0) 1m7.669844364s ago: executing program 2 (id=653): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfffffffffffffd86, 0x0, 0x0, 0x0, 0x400e8, 0x8, 0x0, 0x0}}, 0x3e) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r6}, 0x10) setresuid(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f00000001c0)={[{@quota}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x520, &(0x7f0000001300)="$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") r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r10}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r11, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000845}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000400), &(0x7f0000000500)=r7}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) sendmsg$can_raw(r3, &(0x7f0000000700)={&(0x7f00000002c0)={0x1d, r0}, 0x10, &(0x7f00000006c0)={&(0x7f0000000300)=@canfd={{0x3, 0x0, 0x1}, 0x26, 0x3, 0x0, 0x0, "2f395b21810799b8b63cf6ef4a1844fc8575d443947a8d02825baf0ebd1e25eac7d61922b0f93fe6a2878b0daee6d720388f1e0eac577d7311d6e51a0408d638"}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x80) 1m7.621192965s ago: executing program 34 (id=653): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfffffffffffffd86, 0x0, 0x0, 0x0, 0x400e8, 0x8, 0x0, 0x0}}, 0x3e) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r6}, 0x10) setresuid(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f00000001c0)={[{@quota}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x520, &(0x7f0000001300)="$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") r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r10}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r11, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000845}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000400), &(0x7f0000000500)=r7}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) sendmsg$can_raw(r3, &(0x7f0000000700)={&(0x7f00000002c0)={0x1d, r0}, 0x10, &(0x7f00000006c0)={&(0x7f0000000300)=@canfd={{0x3, 0x0, 0x1}, 0x26, 0x3, 0x0, 0x0, "2f395b21810799b8b63cf6ef4a1844fc8575d443947a8d02825baf0ebd1e25eac7d61922b0f93fe6a2878b0daee6d720388f1e0eac577d7311d6e51a0408d638"}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x80) 23.762440732s ago: executing program 5 (id=1812): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x2, 0x4000) close(r0) 23.680352933s ago: executing program 5 (id=1813): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="fffa027a6bc34f59e43023ff0000000000000000e100000000000000d82840d85dd8d3fee584d59c68fd928b8975cb3d845ccd49f417416a0002fdc9c75f17735556c76b076cd53af889ea992016c3e10363fab1718cead14bbe88e92b6c0857443c392c3a54372306dcadf6da10bb27e6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000300"/28], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001"], 0xb0}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 22.782178747s ago: executing program 5 (id=1836): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) (async) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000240)={0x6, 0x38, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000240)={0x6, 0x38, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_open_dev$evdev(&(0x7f0000000300), 0x6, 0x440000) r3 = fsmount(0xffffffffffffffff, 0x1, 0x74) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000340)=0x401, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xb4, 0x64, &(0x7f0000000380)="d9ebba2feda3ef49d1740cb78a635abbd91410d7342f930995f8b0fbee60eeed9809250d7fe5daaccc61abc331fe79c43b4d46298c1d917f49ae6e8fee057bb7256bf7f693447a199f189f38ba4f014e49ce891f3236769df1f294c957bfc914c321ed681800b3a8f4a70a081a32018cc7895b9df7d14b79910bebf9ffe0275a14b89721b457248c48e6b16a8528b4c01be0395824b77cce0836238b2d2120f9b9aadb1dd8b0fba676f79c0f497b579689af707e", &(0x7f0000000440)=""/100, 0x2, 0x0, 0xc9, 0x1, &(0x7f00000004c0)="2ce59d0d968f53832b9bbd95cf5c32b6e594117c1819ddb3d6434ff064558afac5e70e75004133314b822a58787a013136ff75174a885dbdcb7f437e6ef1db5bca32b6fae94b75b252eba1699cc62e7516a22174c89e09c72a73292c36757214aa1dccfcd2bac97076434346ae7cbdab4661a6fecec81f9e8edc899ca1dd15634026f57776d6f508d94e1a6f472f202a26903dd2d91815df88e49afbb35161bfa765fc2b8c91ce5857216ff4f6f018128f9a98191bb995a36f085c1d4ff749f423fb6e4358f32106c8", &(0x7f00000005c0)=':', 0x4, 0x0, 0x100}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = io_uring_setup(0x3fb3, &(0x7f00000006c0)={0x0, 0xc4d7, 0x80, 0x1, 0x31c}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000780)={0x5, 0x0, &(0x7f0000000740)=[r0, r3, r3, r0]}, 0x4) r6 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x9, 0x2000) openat$cgroup_ro(r6, &(0x7f0000000800)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) r7 = openat$cgroup_ro(r6, &(0x7f0000000800)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000840)) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000840)) r8 = getpid() gettid() (async) gettid() ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000880)={'syztnl1\x00', r2, 0x700, 0x40, 0x800, 0x10001, {{0x1d, 0x4, 0x2, 0x9, 0x74, 0x66, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@end, @ssrr={0x89, 0x17, 0x8a, [@dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010100, @private=0xa010100, @empty, @local]}, @generic={0x89, 0x12, "cdee8579d69a36acc48beb918289b7bb"}, @lsrr={0x83, 0x7, 0xcc, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp_prespec={0x44, 0x14, 0xb9, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@rand_addr=0x64010101, 0x1000}]}, @timestamp={0x44, 0x18, 0xb3, 0x0, 0xa, [0x4, 0x6, 0x1, 0x8001, 0x0]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000880)={'syztnl1\x00', r2, 0x700, 0x40, 0x800, 0x10001, {{0x1d, 0x4, 0x2, 0x9, 0x74, 0x66, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@end, @ssrr={0x89, 0x17, 0x8a, [@dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010100, @private=0xa010100, @empty, @local]}, @generic={0x89, 0x12, "cdee8579d69a36acc48beb918289b7bb"}, @lsrr={0x83, 0x7, 0xcc, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp_prespec={0x44, 0x14, 0xb9, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@rand_addr=0x64010101, 0x1000}]}, @timestamp={0x44, 0x18, 0xb3, 0x0, 0xa, [0x4, 0x6, 0x1, 0x8001, 0x0]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x0, 0x3ff, 0x844d, 0x1a880, r4, 0x101, '\x00', r9, r6, 0x1, 0x5, 0x3, 0x0, @value=r7, @void, @value=r3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x0, 0x3ff, 0x844d, 0x1a880, r4, 0x101, '\x00', r9, r6, 0x1, 0x5, 0x3, 0x0, @value=r7, @void, @value=r3}, 0x50) write$nci(r3, &(0x7f0000000a00)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x10, @a={0x7, 0x2, 0x0, 0x32, {0x3, 0x1000, "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", 0x4b}}}, 0x100c) rt_sigprocmask(0x1, &(0x7f0000001a40)={[0x10001]}, &(0x7f0000001a80), 0x8) (async) rt_sigprocmask(0x1, &(0x7f0000001a40)={[0x10001]}, &(0x7f0000001a80), 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x78, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x2ac3ca4b6c5cf8a3}, 0x4805) sendmsg$nl_route(r3, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)=@RTM_GETNSID={0x24, 0x5a, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NETNSA_PID={0x8, 0x2, r8}, @NETNSA_PID={0x8, 0x2, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) truncate(&(0x7f0000001d40)='./file0\x00', 0x10000) 22.487268362s ago: executing program 5 (id=1838): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x6, 0x0, 0x0, 0xa, 0x5}, @ptr={0x8}]}, {0x0, [0x61, 0x30, 0x61, 0x30]}}, &(0x7f0000000040)=""/51, 0x36, 0x33, 0x0, 0x7, 0x10000, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, 0x0}, 0x20) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000440)='GPL\x00', 0x7, 0x5f, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) fgetxattr(r7, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x300, 0x100, 0x1}}) 22.461039413s ago: executing program 5 (id=1841): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) r1 = dup2(r0, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000000)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@usrjquota}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") sendmmsg$unix(r1, &(0x7f0000001e80)=[{{&(0x7f0000000440)=@abs, 0x6e, 0x0}}], 0x1, 0x0) 22.426016253s ago: executing program 5 (id=1843): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) (fail_nth: 11) 7.330338793s ago: executing program 35 (id=1843): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) (fail_nth: 11) 3.06638726s ago: executing program 3 (id=2273): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) close(r0) 3.003601282s ago: executing program 3 (id=2278): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) 2.962405372s ago: executing program 3 (id=2280): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000280)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, 0x0}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000200)=""/135, &(0x7f0000000100)=0x87) 1.982643098s ago: executing program 3 (id=2303): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84"], 0x590}}], 0x1, 0x800c801) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="11", 0x1}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) r2 = io_uring_setup(0x100, &(0x7f0000000040)={0x0, 0xae42, 0x8, 0x3, 0x2c2}) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000003300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, {0x0, 0x1, 0x0, 0x0, 0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000003c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0xfd12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000a180100002020702500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410e9) 1.621098024s ago: executing program 3 (id=2306): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="005129fdfeb1a365401b00584600"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf93000000000000b7020000000000008500000085000000b7000000000000009500000000000000d9c014803d5e49cda469541fa83974b10a2b3c0c3809a6ddeedf49ef2ad007b6b1f86fec57ea7b713229f401cc8c4cec6d86795de01cd2a79d5ca05304aeaaf8e86e8516"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) restart_syscall() 1.620729234s ago: executing program 8 (id=2307): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18", 0x2b}], 0x1}}], 0x2, 0x4000) close(r0) 1.486418025s ago: executing program 3 (id=2310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.350056728s ago: executing program 8 (id=2315): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0xa, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x400c0d4, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, &(0x7f0000000080)={0x300, 0x200, '\x00', 0x3}) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="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", 0x194}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960", 0x7d}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f", 0x3e}, {&(0x7f00000003c0)="9059c5aee5fca0529f3f9109a29885942349a08c6be8241fb9050c7491a49f89ee4aa8a1f1daa6663945ed017834c6afaab141dfb713", 0x36}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c", 0xa9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f6868c9031d7f0fba663fed16b868a4e53436b1be7a082f826014791", 0x69}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170c1d73", 0x54}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb754e3cee15d0455ceb58e34bd0c398ab501a6044e76a0569297449768bcba1cfc884267", 0x9d}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43529d3a64b1947ab79563d895ac06f8e1df8ce3befc5707528570ed617ff1c87305dad0d429bb7245f67ac66435", 0x48}], 0x4}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.321902748s ago: executing program 4 (id=2316): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) syz_usb_connect(0x500000000000000, 0x34, &(0x7f0000000100)=ANY=[], 0x0) 1.286753719s ago: executing program 8 (id=2317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x1f18, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000) 1.21205741s ago: executing program 8 (id=2318): syz_emit_ethernet(0xa2, &(0x7f0000000400)={@random="6ef356123129", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0xa, 0x4, 0x3, 0x0, 0x8c, 0x67, 0x0, 0xe, 0x11, 0x0, @multicast1, @private=0xa010100, {[@generic={0x1, 0x11, "551dec2461c7ec518cd76fd075e796"}]}}, {0x4e23, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "b8d2c14e3459eb2f101b96e01f96f64b0c91d2a0e51ec575f084d79eabba2b2c", "48212159a58cd69e45166a9d57843a4f", {"52ccffc2b035659bc6655e40eaa37ad2", "4aeee984a024d71310d103e55e6a0666"}}}}}}}, &(0x7f0000000a40)={0x0, 0x3, [0xaec, 0xa92, 0x98d, 0x90f]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x44, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x78, 0xfffffffffffffffd, 0x9b}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000280)={{0x0, 0x1, 0x101, 0x0, 0x2}, 0x1000, 0xa8, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x3, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x7, &(0x7f0000000380)=[{0x4, 0x2, 0x7d, 0x4}, {0x6, 0xff, 0x83, 0x6}, {0xc, 0x6, 0x7, 0x2}, {0x11, 0x3, 0x2, 0x4d20e5c0}, {0x6, 0x8, 0x3, 0x3}, {0xa02, 0xca, 0x3, 0x9}, {0x5, 0x9, 0xdc, 0x101}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=f']) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20200002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x58c48d34}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20020085}, 0x200588d0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000380)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) 1.21098079s ago: executing program 7 (id=2319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x1e, 0x6, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000080), 0x4) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x2}, 0x10) r4 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x4d299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r9}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160006003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x100000000000000) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)=""/257, 0x101}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01) close(r6) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x3, 0x6, 0x201, 0x0, 0x0, {0xd77853e790ddc9c2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004005}, 0x800) 1.163355151s ago: executing program 7 (id=2321): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="005129fdfeb1a365401b00584600"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf93000000000000b7020000000000008500000085000000b7000000000000009500000000000000d9c014803d5e49cda469541fa83974b10a2b3c0c3809a6ddeedf49ef2ad007b6b1f86fec57ea7b713229f401cc8c4cec6d86795de01cd2a79d5ca05304aeaaf8e86e8516"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) restart_syscall() 1.127925622s ago: executing program 7 (id=2322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.042259833s ago: executing program 8 (id=2323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000004240)=0x40000006, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$rfkill(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='percpu_free_percpu\x00', r3}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=@polexpire={0xcc, 0x1b, 0xc8dbc5159e5c15d1, 0x0, 0x0, {{{@in=@private, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0xcc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x80000000, @media='ib\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x200000a4}, 0x4010) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.000809233s ago: executing program 7 (id=2324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, 0x0) 918.596345ms ago: executing program 7 (id=2325): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f00000001c0)={[{@errors_remount}, {@block_validity}, {@nodioread_nolock}, {@dioread_lock}, {@nodiscard}, {@nouid32}, {@noinit_itable}, {@minixdf}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}]}, 0x1, 0x53d, &(0x7f0000000a80)="$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") r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000001000)) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x164) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2c043) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000280)={0xffff, 0x80000000, 0x1, 'queue1\x00', 0x8}) 698.963738ms ago: executing program 4 (id=2329): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x3000000, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 650.234619ms ago: executing program 4 (id=2331): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x800c801) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="11", 0x1}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) r2 = io_uring_setup(0x100, &(0x7f0000000040)={0x0, 0xae42, 0x8, 0x3, 0x2c2}) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000003300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, {0x0, 0x1, 0x0, 0x0, 0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000003c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0xfd12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000a180100002020702500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410e9) 623.192919ms ago: executing program 6 (id=2333): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x34}}, 0x0) 604.57893ms ago: executing program 4 (id=2334): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x88942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x7fffffffeff3) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x124, 0x5dd9, 0x0, 0x0, 0x0, 0x208, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x103, &(0x7f00000001c0)={@multicast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @igmp={{0xa, 0x4, 0x3, 0x3, 0xed, 0x67, 0x0, 0x6, 0x2, 0x0, @remote, @loopback, {[@end, @end, @end, @lsrr={0x83, 0xf, 0xdc, [@multicast2, @broadcast, @private=0xa010100]}]}}, {0x11, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "3d7df7d02ec5b936ebf8092c4d6e182f4b04d5199ec2e3bee63ff546e554d078a4f54043bdae559bdc12916c8f629e5e2e1d560d4d7daf0290d8fd079fdd24618cf8973400e31f3c820b03b55ba3c1e4abe4a7da87e644904c4a77b829e11f1926a26a6062f3ff4c6e5f39c04007594cd806c5ad713ad3914241f6df595420547a14b682dfa7d261e8d9ba8f66543bffeb1d7a3a7a0f2d7ed33e2da4990ed424d49d891d74d80b52304247563aa706aa594d13fafa244e155a2c566a4a"}}}}}, &(0x7f00000000c0)={0x0, 0x3, [0x3b5, 0x256, 0x5ac, 0xe2d]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 550.434901ms ago: executing program 6 (id=2335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, 0x0) 389.511493ms ago: executing program 4 (id=2336): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) utime(0x0, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a896adf660000000000001200ffffe0000012fe8000000000000000000000000000aa"], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYRESDEC], 0x1c}}, 0x40004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x3fffffffc00) 358.337193ms ago: executing program 6 (id=2337): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18", 0x2b}], 0x1}}], 0x2, 0x4000) close(r0) 311.920614ms ago: executing program 6 (id=2338): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 264.309805ms ago: executing program 6 (id=2339): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) 217.663266ms ago: executing program 6 (id=2340): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x1, 0x8000, 0x5, 0x40, {{0x30, 0x4, 0x3, 0x1, 0xc0, 0x64, 0x0, 0x2, 0x2f, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x14, 0xa4, 0x1, 0x5, [{@multicast2}, {@remote, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0xb9, 0x3, 0x6, [{@remote, 0x537}, {@multicast1, 0x3ff}, {@multicast2, 0xf}, {@loopback, 0x2}, {@multicast1, 0x71}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x6}, {@local, 0x69}]}, @timestamp_addr={0x44, 0x44, 0xd6, 0x1, 0x6, [{@multicast1, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xffff8000}, {@remote, 0x1}, {@local, 0x63328}, {@multicast1, 0xb61}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7}, {@broadcast, 0x3}, {@broadcast, 0x100}]}, @noop]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x30, 0x2, r7, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0, 0x8002, 0x0, {0x1}}) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000280)={0x8, {"68828c0b9bc23b6a89f8110d35c59d082b92f476102ce32229638a495dcd21c89d83a602a5e31db5ec28b818a3d699abbfafad0370d610ac8a0c4726147706600ff53312a5a0fcf02dd3c0c051bce7e14058a91070617264a63a446e3bcbc60a8204e1cde7294551e2b14ca95768db0f1d7e91a01558164eb611a545bfff41ad4788237a35d9bb2087b6245d27b7fdf4d12d0b19d8cb93ab5ae5850dc1c521058256c8ffa7742038290bb874b0e4199e945f3ab5c74e1b3840f18b0c27377c18beea9f6f909f141e96c7ef2d65f293a13fbbca16644d71cf8cc7652391c5eacaa8a1e247815d7c91adab2cfe77c71882246812312aa01c99b9402a62d82ce80d08636aa5a87b550becadfe4b5ae98085a6b0d9fd3407461eecd242e243140cbe1027d68516e3c379a0921455ca4b36fb9d4b9f9324590fc77730385dee376d147a74bb08ce8fec7ed205311dc42f4cd009f57c85abced5844867f81ddf09cb67bb623ed41304c2d08373972f30418780c6bed885604b2fc6ea1cd1dfe48c5fae5f5925c9c657bb39d8b30db6eb1cab5031ae94d45aa4764d45397793250c758537e24bab0ab75d8066903f808d1bf68d189c1a1f5c6ad28dbeae6ab64c771346a9e7720b92ad4008db9c94d6b876753d57bb21f7c645d6833e680f52c3ecaf20b05869feb4ee670d4f18e233df78ccda64a8cbc6d28e392fad9cc7dc8baed666cf0e96111aac3376d3e66b50f83bbc51b180de2a320ee8c5fe17bea897acea40274c3962f009ede428a99e0fe869a9f711b626e68a5e257e32cd6a000f4c9c509b1116f2502f199823f29d7410e37f4d57755b85e3b0f555422f8631047187b55295001847e7395e7d59752ee37d12f7f9b0d94f00f626eb330ebcf5fd520925036cc07e687e001befa33475b67d381f5d0d5c969fd603464520d9212df27dbb4665c139755795a42005fac94f0ceeb6dee1f3bb0c7c1b03bbaafe7a4b53257892fa6a0148a1bbb43f0b57c21e278730c53a888864a8fbf71a81e154d5f923bdc67a3557d081655d3a63c63609c0e1804dbb7242ca489ac2f2d425a4f8007d4f312ca7723bf3c6633b651177c0a54d6ac50ac45e5f36e474685ef3938775537a3c50f06eca472d7f8cee44239b2a4d29fbf2629eaf62d879ab8dcd2fd5d2345298f3fea84307f0d22a5ecbe2c728cec1b9ad4240926dc9d3d94d5476a0f9f088b0c21b040139bbe103417ae11a85f72d652c93351f8e062530c03cb842ef3b231ecf36ef32c470c67d48648740334ea670a200e4d87745784c270023ac2391b39319162a268c55d64c763d9e5079c286b0c2eb6c084adbdd0b1823d9d31a73aa181cb507bfce4d9f7752da2fbbd3d3eb366b7fcb4c7868a5d010ea3b4e7dd6e68aeb044edf20e2d4aa2837cd70814a556b5a4f90fc47ceab97b2f6ec437f46196398667cf927c900523154b3bfee8e96eb4b4c03dc0d818511a51b5defd3ebf6523816560ba03fc010fd34ab09fdb3aa355e48b6b3a0cb6ce89b4008104a4afe8265f1178d177027918ec1aca8a2ad98fa63bad1367d379e6ff13a57909d8f9ecf50bf5dedc6e49cb9459e4db15c4aa2098fec4e13eafebaf8c1ea118d05c51e799f8e843e0c722ececfcf2422ece64dd945b6c14e5843a393e84873d3dd84eab786955014f210686aea9b11062c70e829ef9ff9da1be19705d2a74110d82e141cb1da325441a8593780470656e6116d5bf16bb6fee6b980ae3448d782c5f8d658f6e9e8494d9357490485a1b9879d34f4e681a425e36627f4844a64bfee3c90bb2c93c4e791ecefb0917b45f9323524fa575472f9152b84ab51aca006e5672091554d95a598c2c09068673a857704b131dac07bff07985941f2510aa52dbb79246bb5193819fe06cfafd24ac8f2cb98b9f4a7bb5f27d962fcb733b9ac25f1dec5a1d6f6c4fde072048169fbfdde0854a993ae1f93d13b4cfbacd926c204d687f2f9feb696406a8aa83de5853cdb2fc110db3e3ee717851ebc9bfea5f7563e7f41d8edfac83f2b6d015fca0f9ca29e3d97f9c727bdddc5eab6bf603c0af7b421aa44f3a03296fde5d980b3c2c707059440b0e6fac05a66d919733989f69209303d91e09e7b6fac37c812bb880bd06b687958dac2608ec6e07f492732c44b3a304d0a11a7307abab29e31239bde8274ec53a6999c0ec36ef708d46b4e606ddd4e41b05e144147b5a3d786806873dad19d8b11209a0d0d3e93d17ba4b6b75b5e8e9c36289f9be1db428278c0c18bef8327d374fcb16007c595b8c59b15c90f0b2e302071a1e328282b94516af2a83bbcdd2912a5b2044582f21820df59cee9d45a8dc0e9babfd2914c492f58e32475af0ce53bb0b25661ac5226e946f6cf87dab12601f2cb55573f17ac7d48a647a4ef38e3fca92377ffdd9b5f3bb75bad2b406d8d5656b4eea17a7e2f540c12985599bdb09793068b3151f5a7c39241c88c267f34cf342506338835a8e9975b76dde0e275f3522ff6be12402011868e658fba23ef0ea8eeb470f631ca1b5a2e5e35336320ed03ecc31212bf84467333730d96919e2ed9edddb71da5784fdbc23472da3840ac665cfafbc863d71f5e032d6cb1299375f96ae7a1658798561c5d3e549052751eda4d830109d0c7ccdd80afc7803e546738e3424cf77627330b9447ff34068585936bb60eadd47d40f171d80f5b4d3276a74a4ac606135b805a64d0d39a06344d3be8c1572cd33f9a3afd10dfefd4789a54e9cb55677b02f9330ee99a1f93a6cebd52f22eb93bcedf37f4cc3982b4dabaf26e215872e11cc836b439b580ea013c76ea8629ed752b087bcf176fdc8cb6ae4e2947f5bcf9338d48ce1cf74e365b720d1b3d8c5145d1a78e8eb1b45d21bb62ed1b6e212c13a0ea21223103cd521cb73666cc7a5bacf02b5764251257dea8138e3683c0f7ec4037093a3b78a2d74185289a4844903619b1d9d1553ea217ca214be2cba732907692a769d398d52b816e3859f8ae81e5d0c089e1a87885dd5c86c50ac83db3a802ea67bc0224b4d4e5ed0347a7b144004a93826b01244e75b6e499d4b26bb1845afea8654ba9ade75f5310b458885ad78eff3712c02e62363c5dedd6c99d9aae4cff5cc5ed9406c248744cb4f091eb1f419d0efd1ef5c850b4176fa07a1a5a4e8d39d2e0308916abc77f6cf6b4a44a8a01fc21059d0e100daaeaf636bd177637a583eb9f45c67bc2c76760a58bf448e2e379831755f7a974384d3d62727ca3fec2194dd633a0ed411d6586651b4bbd8b4f5746ce4e72715ba9736c240747f98a01fd3df0b9bed007763c1a1968d4b69eafd279d1c761f8d6a675ab2fced1793920b10c50af3520170b1d5041a0dde753a2fc210cf98ebcc5392a5deccaefdf4b002aeee716dcdca6cb6073881ddbfd37ee751edaca99b65202bfdbe1fec457bd502555b7dedc5d8e221d4093cf7acf89a3b801d6d2fdd3415d58bef856be0ff22eab5d75675081d85416ab70d7d36d617a2a7f0c8d6ed35a2a81588f01e80712534c3256fc52fb4ed5478325ae28efd78e7eaaabf08bd749226ecab7bdbab7a60b5b60f2d93714455ae6d3b88de9ebb5d2df81fc7e349af45d1b502cfaf36f4adc16886db2758b4f43f5a030912cb772def90d1a0fb555c8fb10d3a7bd8e2dd954860b8084ce5c72971f5df24ef5bc24937ccd545f964a86b6c466610e24cee92bf7a196c915975349b491e8bb1f164ae0af3fbe050d57dc7af839be63cdf1883ec31f5310c6e0d87c70902a66259bcf76588f14f96ebb85b95997f64814c73d6ff8b059536c70f7d72b5924258ffb706e2af7aaf580f327af6dff0c3b020b451c4b22d46fa72854af95b2b6a6d7a3e0b2b78c06eeec2edd5f1a2174ae8b7b6f4ce2e781314142b8482dc8ff4046e851a5d6b8347b4ac8b2326e1c359160ac49d637e4f5549d73369d3323223f179146a5426e21213c6e51a348bc9d55289837b42fa56f9084f6e268a9d041bde513b1e8ea13a7637bc53f67b2951b4bec7a44acb0d93ea325611c486806884b08192ed5768ca88e95db075d8d551b09c42d62a87e1b121adb5812ee1769f1555707b163af0ff78d728ad0a1871704645f1ed8632e85735ff24e7541005d5409205940df84926ec581218a4ce89498715fb09dcdb44849d3ca7631c1d472ffcafeb37610e8ca77ba4b43176d825a27f59ec81b217b7aa6e01698fe45ffafa0ea2356ad423e581b632b6c627e0d827da58523a40aa19ea3e2ca93f93ed2a33e4fabc36ae56abcb11ae7944577230ec6c498033976fb8d9610d9d9eacf7302ecb060ea5002d70eb6f327ded18f5b2c79e04f09bff203b7d572a214c3684eb89470c28a1361333b32dd63df2163c039d129c5f766fe1a4110f95fc99b87ead844433ac309c3565bc9ca7a6f838a121fc44303ae248a366865e0a3da36ed3046e304f579ff422a7b9946b5cfb52d3e4463e4c5a1e3c7ec1dc16c18c1cdc641b8a8301cd2fcd271489528b4bb4a8515a71be236faadc7ea05173c21f4b8a9aadae38d2e8443199a08a8df1d502df62736812398e8df6eb17f938d529e8dccfe6a15470be9a8cb613a7fb337f213f77ebd136ddbab9471629169e24304e8d20f37e9a341559afc9ab598119e504c53d5c8ec5316e8336295c4101d8bdf6c71d1483355c00972636ea6831704008858cf803defbba5069c24ac7d5e1b7c8e664212d350832fbc767e09a6c2a08073dd8ac2661fec32d6f548b56d74201c274e2cc07a1712169d3db64ebd5bc111fc0aa41f69a5ef849a41a84cb0673db00cb6ae345fdbd44a5467f8588aa24ef57d7ea9ce9b0b9d2c2e2ee7990c1e3d97375ffd800248f87789cedb94803c315728805b5c0394ab617eadacafebba89d103b28c9df323fc65d023539393ac18285246ffc5e4a7ba902dc234ac2383382f3f445f198cd82a494c8f7ea80c0517223f14e303cf7565e44cd650d4997202ac331355d2c734c61c8a1903d056eb03ce50d167a7a94854de234e45e3886287d01221c6d493ea078df81c2c0d7e5b61a34ceecbf83dd21edb2aeddd14869aaf034588076f6a604569e745f4400fa8ca7dfb9be8bfb85874283a5d1522ec70559abe4681c91112e3561841b2fad0540865944b5df385121b4c8d99cb4d5f9634ace1700c90cfc98f4086714f5f3fd8450f4067e32715aee5943c571fcdca2cb6115dcc373e3f5e96b08e626a1a776ffd5efbf898cfaac7405f75a40feb8ddf06cddf1258a09f3e58b424d409767966290c5c15d150e0f7d120f0078cb97337874f16838ce3cad921bad2573ecef3d853ee5d7e89c3fe517a0d1139ad3f1424c6e5e880cc8b33eb4762b7bd1fe5fd4e2d4c3249bb70b5fe2e74e3751e1b0d78dfbc78fbab4a35d7cd97f8be57eec3a6b3b5c63a5747f82bd3e7fba99bbf9ad1faee6f4b59e14049bbc7a78c285cc8be8cc3fac3451add460bdada49d65d2253adb3500ad3d163f9ae0e24d413ad348bc1a2ed940e6d1c28fa16b9ad05c2175b3374d765939148451b8daffb3f4e646397bc04b0f04a808b6f96dcab1dccbd5b55d4758279b67899dea10bbb61c58f6aad2aefe78f9e5d2b916ca6d717d78e978c25ad27b912e7bddede9c2bf3cd464ff102d78332c1468fc2f2f5cd20baddb71736c30a4a302bb5412587e95f165bc12c05cebf5128ef67064fe9b9f14aed30708a4e5afe8b0cf6c904dbedcd2d7c467cef6544ddd020de4cc50f646d0ba0862030febee6af93b263ff983708b1c725a13103", 0x1000}}, 0x1006) fallocate(r6, 0x0, 0x800, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0xc, r6}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r14}, 0x10) 210.390256ms ago: executing program 8 (id=2341): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db00000000000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000002c0)={0x1, 0x16, 0x4, 0x7, 0xcf, 0xfff, &(0x7f0000000800)="bf36aedb1d89854fc0ad6c17732b5a8e85d12c56ab8212fc5af38cf34d72b4fcac128af51ece894db6da770c28f64e5d747b82e5c8d346a517bda6c180376cd74e5d20e315884fe3c2f4105e36fcdcf0d5c4c700a72c60e57e1b0e74d0659a90b62874efdfe7419afe2653c26d96dae042051ccb84907af1c4f9685cb26dc8a0eb6fd092f8d30a1220b56c7ff6040cd2d95559bc3a91ad3f7609028ffc3857b29a8fd0e071e0de4d5f6f2037db8b39fca2cc93f2feacf0d88d9010c1e4e62f18fa0453abd8b0310832c8cc8b274318"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x11) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000ecff000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000001000000000000000c00150000000000ffff00"], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000280)='\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x80) memfd_create(&(0x7f00000001c0)='sched_switch\x00', 0x1) write(r6, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0xf00) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @private=0xa010102, @local}, 0xc) 9.206799ms ago: executing program 7 (id=2342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00090005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x14, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x344a, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) (async) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x1, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x7, 0x0, 0xffffffffffffffff, 0x0}) (async) io_uring_enter(r6, 0x55, 0x84a23, 0xf, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x1, r4, 0x30, 0x0, @in6={0xa, 0x4e21, 0xcf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0xa0) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) (async, rerun: 64) fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 4 (id=2343): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="005129fdfeb1a365401b00584600"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) restart_syscall() kernel console output (not intermixed with test programs): e type 10 has an invalid length. [ 82.337630][ T6740] IPVS: length: 135 != 528 [ 82.362456][ T6739] netlink: 'syz.4.1214': attribute type 10 has an invalid length. [ 82.600260][ T36] net_ratelimit: 103 callbacks suppressed [ 82.600341][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.801020][ T6750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.970128][ T6759] netlink: 'syz.5.1224': attribute type 10 has an invalid length. [ 82.993039][ T6766] loop7: detected capacity change from 0 to 128 [ 83.015690][ T6766] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.047305][ T6766] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.220480][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'. [ 83.230144][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'. [ 83.273532][ T6784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.677057][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.697558][ T6801] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1241'. [ 83.715220][ T6801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.723564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.736542][ T6804] netlink: 'syz.6.1242': attribute type 4 has an invalid length. [ 83.766302][ T6806] netlink: 'syz.4.1244': attribute type 10 has an invalid length. [ 83.774280][ T6806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1244'. [ 83.790313][ T6806] team0: Port device geneve1 added [ 83.840047][ T5282] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.917888][ T6824] siw: device registration error -23 [ 83.928282][ T6824] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 83.970433][ T6836] x_tables: duplicate entry at hook 2 [ 83.978181][ T6831] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1254'. [ 84.004461][ T6833] netlink: 'syz.6.1253': attribute type 10 has an invalid length. [ 84.072896][ T6845] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1259'. [ 84.185916][ T6851] loop7: detected capacity change from 0 to 512 [ 84.195679][ T6850] pim6reg: entered allmulticast mode [ 84.199880][ T6851] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 84.227670][ T6860] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 84.236670][ T6851] EXT4-fs (loop7): 1 truncate cleaned up [ 84.242989][ T6851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.282996][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 84.304382][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.327055][ T6869] x_tables: duplicate entry at hook 2 [ 84.339643][ T6869] loop7: detected capacity change from 0 to 512 [ 84.346875][ T6869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.349366][ T6871] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1269'. [ 84.374708][ T6869] EXT4-fs (loop7): orphan cleanup on readonly fs [ 84.382265][ T6869] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 84.396464][ T6869] __quota_error: 267 callbacks suppressed [ 84.396478][ T6869] Quota error (device loop7): write_blk: dquota write failed [ 84.409847][ T6869] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 84.419816][ T6869] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 1 [ 84.430641][ T29] audit: type=1400 audit(2000000014.260:3779): avc: denied { getopt } for pid=6876 comm="syz.6.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.451447][ T29] audit: type=1326 audit(2000000014.260:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 84.474997][ T29] audit: type=1326 audit(2000000014.260:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 84.498511][ T29] audit: type=1326 audit(2000000014.260:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 84.506529][ T6869] EXT4-fs (loop7): 1 truncate cleaned up [ 84.522224][ T29] audit: type=1326 audit(2000000014.260:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 84.544495][ T6879] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1272'. [ 84.551235][ T29] audit: type=1326 audit(2000000014.260:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 84.569391][ T6869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.583556][ T29] audit: type=1326 audit(2000000014.260:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.6.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 84.583595][ T29] audit: type=1400 audit(2000000014.260:3786): avc: denied { connect } for pid=6876 comm="syz.6.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.656556][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.680905][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.701425][ T6882] loop6: detected capacity change from 0 to 8192 [ 84.724874][ T6885] loop7: detected capacity change from 0 to 256 [ 84.733783][ T6889] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 84.785426][ T6894] loop7: detected capacity change from 0 to 128 [ 84.916536][ T6909] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1282'. [ 84.952256][ T6912] x_tables: duplicate entry at hook 2 [ 85.191841][ T6927] loop7: detected capacity change from 0 to 256 [ 85.362721][ T6931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.412334][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.479023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.510507][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1294'. [ 85.513561][ T6955] x_tables: duplicate underflow at hook 1 [ 85.537243][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1294'. [ 85.549449][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1294'. [ 85.579871][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1294'. [ 85.612360][ T6957] siw: device registration error -23 [ 85.631269][ T6957] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 85.659464][ T6963] FAULT_INJECTION: forcing a failure. [ 85.659464][ T6963] name failslab, interval 1, probability 0, space 0, times 0 [ 85.672258][ T6963] CPU: 1 UID: 0 PID: 6963 Comm: syz.4.1299 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 85.672286][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.672301][ T6963] Call Trace: [ 85.672308][ T6963] [ 85.672318][ T6963] dump_stack_lvl+0xf6/0x150 [ 85.672343][ T6963] dump_stack+0x15/0x1a [ 85.672360][ T6963] should_fail_ex+0x261/0x270 [ 85.672408][ T6963] should_failslab+0x8f/0xb0 [ 85.672445][ T6963] __kmalloc_cache_noprof+0x55/0x320 [ 85.672473][ T6963] ? audit_log_d_path+0x8e/0x150 [ 85.672546][ T6963] audit_log_d_path+0x8e/0x150 [ 85.672574][ T6963] audit_log_d_path_exe+0x42/0x70 [ 85.672603][ T6963] audit_log_task+0x1f1/0x250 [ 85.672629][ T6963] audit_seccomp+0x68/0x130 [ 85.672678][ T6963] __seccomp_filter+0x694/0x10e0 [ 85.672773][ T6963] ? __perf_event_task_sched_out+0x13c/0xf00 [ 85.672799][ T6963] ? __list_add_valid_or_report+0x38/0xe0 [ 85.672842][ T6963] ? _raw_spin_unlock+0x26/0x50 [ 85.672865][ T6963] __secure_computing+0x7e/0x160 [ 85.672923][ T6963] syscall_trace_enter+0xcf/0x1f0 [ 85.672957][ T6963] do_syscall_64+0xaa/0x1c0 [ 85.672986][ T6963] ? clear_bhb_loop+0x25/0x80 [ 85.673008][ T6963] ? clear_bhb_loop+0x25/0x80 [ 85.673088][ T6963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.673114][ T6963] RIP: 0033:0x7f6d34b3bb7c [ 85.673132][ T6963] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 85.673171][ T6963] RSP: 002b:00007f6d331a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.673210][ T6963] RAX: ffffffffffffffda RBX: 00007f6d34d55fa0 RCX: 00007f6d34b3bb7c [ 85.673241][ T6963] RDX: 000000000000000f RSI: 00007f6d331a70a0 RDI: 0000000000000005 [ 85.673255][ T6963] RBP: 00007f6d331a7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.673269][ T6963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.673283][ T6963] R13: 0000000000000000 R14: 00007f6d34d55fa0 R15: 00007ffde9a06d88 [ 85.673305][ T6963] [ 85.886238][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.950518][ T6965] loop6: detected capacity change from 0 to 2048 [ 86.023585][ T6965] loop6: p1 < > p3 [ 86.027939][ T6965] loop6: p3 size 134217728 extends beyond EOD, truncated [ 86.041492][ T6972] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.097664][ T6976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.124094][ T6972] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.164199][ T6977] x_tables: duplicate entry at hook 2 [ 86.253122][ T6972] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.303373][ T6972] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.342954][ T6992] siw: device registration error -23 [ 86.356548][ T6992] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 86.374671][ T6972] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.389650][ T6972] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.429814][ T6972] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.477025][ T6972] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.505323][ T7011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.651620][ T7034] netlink: 'syz.7.1328': attribute type 8 has an invalid length. [ 86.702410][ T7034] netlink: 'syz.7.1328': attribute type 8 has an invalid length. [ 86.793857][ T7049] veth0_macvtap: left promiscuous mode [ 86.921738][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.012490][ T7070] pim6reg1: entered promiscuous mode [ 87.017880][ T7070] pim6reg1: entered allmulticast mode [ 87.161841][ T7075] IPVS: length: 135 != 528 [ 87.402962][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.432743][ T7092] SELinux: Context !² is not valid (left unmapped). [ 87.581693][ T7100] siw: device registration error -23 [ 87.588498][ T7100] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 87.760995][ T7121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.809083][ T7125] FAULT_INJECTION: forcing a failure. [ 87.809083][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 87.821913][ T7125] CPU: 1 UID: 0 PID: 7125 Comm: syz.7.1365 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 87.821947][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.821962][ T7125] Call Trace: [ 87.821968][ T7125] [ 87.821976][ T7125] dump_stack_lvl+0xf6/0x150 [ 87.822000][ T7125] dump_stack+0x15/0x1a [ 87.822016][ T7125] should_fail_ex+0x261/0x270 [ 87.822107][ T7125] should_failslab+0x8f/0xb0 [ 87.822145][ T7125] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 87.822174][ T7125] ? __alloc_skb+0x10d/0x320 [ 87.822254][ T7125] __alloc_skb+0x10d/0x320 [ 87.822278][ T7125] netlink_alloc_large_skb+0xad/0xe0 [ 87.822304][ T7125] netlink_sendmsg+0x3da/0x720 [ 87.822339][ T7125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.822390][ T7125] __sock_sendmsg+0x140/0x180 [ 87.822432][ T7125] ____sys_sendmsg+0x350/0x4e0 [ 87.822522][ T7125] __sys_sendmsg+0x1a0/0x240 [ 87.822575][ T7125] __x64_sys_sendmsg+0x46/0x50 [ 87.822623][ T7125] x64_sys_call+0x26f3/0x2e10 [ 87.822654][ T7125] do_syscall_64+0xc9/0x1c0 [ 87.822688][ T7125] ? clear_bhb_loop+0x25/0x80 [ 87.822778][ T7125] ? clear_bhb_loop+0x25/0x80 [ 87.822802][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.822828][ T7125] RIP: 0033:0x7f985125d169 [ 87.822846][ T7125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.822868][ T7125] RSP: 002b:00007f984f8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.822889][ T7125] RAX: ffffffffffffffda RBX: 00007f9851475fa0 RCX: 00007f985125d169 [ 87.822901][ T7125] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 87.822912][ T7125] RBP: 00007f984f8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.823013][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.823027][ T7125] R13: 0000000000000000 R14: 00007f9851475fa0 R15: 00007ffec5e4a228 [ 87.823051][ T7125] [ 87.828353][ T7112] net_ratelimit: 3 callbacks suppressed [ 87.828371][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.956243][ T7130] siw: device registration error -23 [ 88.050468][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.068826][ T7112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.079880][ T7130] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 88.171459][ T7154] FAULT_INJECTION: forcing a failure. [ 88.171459][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 88.184182][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz.3.1375 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 88.184228][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.184246][ T7154] Call Trace: [ 88.184252][ T7154] [ 88.184258][ T7154] dump_stack_lvl+0xf6/0x150 [ 88.184282][ T7154] dump_stack+0x15/0x1a [ 88.184299][ T7154] should_fail_ex+0x261/0x270 [ 88.184329][ T7154] should_failslab+0x8f/0xb0 [ 88.184392][ T7154] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 88.184424][ T7154] ? rdma_create_trans+0xad/0x9f0 [ 88.184529][ T7154] kstrdup+0x3d/0xd0 [ 88.184555][ T7154] rdma_create_trans+0xad/0x9f0 [ 88.184669][ T7154] ? match_strdup+0x37/0x40 [ 88.184697][ T7154] p9_client_create+0x5f3/0xbb0 [ 88.184729][ T7154] v9fs_session_init+0xfb/0xdb0 [ 88.184759][ T7154] ? should_fail_ex+0xd7/0x270 [ 88.184865][ T7154] ? should_failslab+0x8f/0xb0 [ 88.184895][ T7154] ? __kmalloc_cache_noprof+0x18d/0x320 [ 88.184919][ T7154] ? v9fs_mount+0x56/0x580 [ 88.184952][ T7154] v9fs_mount+0x6c/0x580 [ 88.184984][ T7154] ? __pfx_v9fs_mount+0x10/0x10 [ 88.185089][ T7154] legacy_get_tree+0x77/0xd0 [ 88.185123][ T7154] vfs_get_tree+0x56/0x1e0 [ 88.185199][ T7154] do_new_mount+0x246/0x6b0 [ 88.185286][ T7154] path_mount+0x49b/0xb30 [ 88.185343][ T7154] __se_sys_mount+0x28f/0x2e0 [ 88.185381][ T7154] __x64_sys_mount+0x67/0x80 [ 88.185413][ T7154] x64_sys_call+0xd11/0x2e10 [ 88.185436][ T7154] do_syscall_64+0xc9/0x1c0 [ 88.185486][ T7154] ? clear_bhb_loop+0x25/0x80 [ 88.185507][ T7154] ? clear_bhb_loop+0x25/0x80 [ 88.185529][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.185577][ T7154] RIP: 0033:0x7f44f6ddd169 [ 88.185592][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.185616][ T7154] RSP: 002b:00007f44f5447038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.185634][ T7154] RAX: ffffffffffffffda RBX: 00007f44f6ff5fa0 RCX: 00007f44f6ddd169 [ 88.185647][ T7154] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 88.185659][ T7154] RBP: 00007f44f5447090 R08: 0000200000000300 R09: 0000000000000000 [ 88.185670][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.185682][ T7154] R13: 0000000000000000 R14: 00007f44f6ff5fa0 R15: 00007ffe662713d8 [ 88.185702][ T7154] [ 88.212375][ T7156] IPVS: length: 135 != 528 [ 88.437574][ T7158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.445962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.492104][ T7165] x_tables: duplicate entry at hook 2 [ 88.682153][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.748292][ T7197] x_tables: duplicate entry at hook 2 [ 89.010479][ T7219] __nla_validate_parse: 48 callbacks suppressed [ 89.010499][ T7219] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1403'. [ 89.019963][ T7222] IPVS: length: 135 != 528 [ 89.058246][ T7226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.100982][ T7231] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 89.165474][ T7236] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 89.219284][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.291182][ T7240] usb usb8: usbfs: process 7240 (syz.7.1411) did not claim interface 0 before use [ 89.354214][ T7252] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1417'. [ 89.386470][ T7257] pim6reg1: entered promiscuous mode [ 89.391877][ T7257] pim6reg1: entered allmulticast mode [ 89.416400][ T7261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.467046][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1424'. [ 89.476787][ T7273] FAULT_INJECTION: forcing a failure. [ 89.476787][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 89.489535][ T7273] CPU: 0 UID: 0 PID: 7273 Comm: syz.7.1424 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 89.489571][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.489585][ T7273] Call Trace: [ 89.489593][ T7273] [ 89.489601][ T7273] dump_stack_lvl+0xf6/0x150 [ 89.489630][ T7273] dump_stack+0x15/0x1a [ 89.489651][ T7273] should_fail_ex+0x261/0x270 [ 89.489795][ T7273] should_failslab+0x8f/0xb0 [ 89.489857][ T7273] __kmalloc_noprof+0xad/0x410 [ 89.489879][ T7273] ? batadv_hash_new+0x5d/0x190 [ 89.489903][ T7273] batadv_hash_new+0x5d/0x190 [ 89.489960][ T7273] batadv_tt_init+0x3c/0x1f0 [ 89.489979][ T7273] batadv_mesh_init+0x2aa/0x440 [ 89.490062][ T7273] batadv_meshif_init_late+0x3d7/0x450 [ 89.490091][ T7273] register_netdevice+0x297/0xee0 [ 89.490124][ T7273] batadv_meshif_newlink+0x7c/0x90 [ 89.490155][ T7273] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 89.490251][ T7273] rtnl_newlink_create+0x1bb/0x640 [ 89.490277][ T7273] ? __schedule+0x809/0xb70 [ 89.490301][ T7273] ? __cond_resched+0x53/0x90 [ 89.490327][ T7273] rtnl_newlink+0xf38/0x12d0 [ 89.490373][ T7273] ? __rcu_read_unlock+0x34/0x70 [ 89.490477][ T7273] ? bpf_trace_run3+0x134/0x1d0 [ 89.490513][ T7273] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 89.490544][ T7273] ? mod_objcg_state+0x3f9/0x530 [ 89.490582][ T7273] ? __rcu_read_unlock+0x4e/0x70 [ 89.490617][ T7273] ? avc_has_perm_noaudit+0x1cc/0x210 [ 89.490655][ T7273] ? selinux_capable+0x1f9/0x260 [ 89.490714][ T7273] ? security_capable+0x81/0x90 [ 89.490743][ T7273] ? ns_capable+0x7d/0xb0 [ 89.490766][ T7273] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.490877][ T7273] rtnetlink_rcv_msg+0x65a/0x740 [ 89.490915][ T7273] ? should_fail_ex+0xd7/0x270 [ 89.491006][ T7273] ? ref_tracker_free+0x3b8/0x420 [ 89.491115][ T7273] netlink_rcv_skb+0x12f/0x230 [ 89.491137][ T7273] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.491240][ T7273] rtnetlink_rcv+0x1c/0x30 [ 89.491278][ T7273] netlink_unicast+0x605/0x6c0 [ 89.491306][ T7273] netlink_sendmsg+0x609/0x720 [ 89.491341][ T7273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.491369][ T7273] __sock_sendmsg+0x140/0x180 [ 89.491440][ T7273] ____sys_sendmsg+0x350/0x4e0 [ 89.491478][ T7273] __sys_sendmsg+0x1a0/0x240 [ 89.491531][ T7273] __x64_sys_sendmsg+0x46/0x50 [ 89.491594][ T7273] x64_sys_call+0x26f3/0x2e10 [ 89.491617][ T7273] do_syscall_64+0xc9/0x1c0 [ 89.491646][ T7273] ? clear_bhb_loop+0x25/0x80 [ 89.491676][ T7273] ? clear_bhb_loop+0x25/0x80 [ 89.491699][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.491720][ T7273] RIP: 0033:0x7f985125d169 [ 89.491736][ T7273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.491755][ T7273] RSP: 002b:00007f984f8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.491774][ T7273] RAX: ffffffffffffffda RBX: 00007f9851475fa0 RCX: 00007f985125d169 [ 89.491848][ T7273] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 89.491861][ T7273] RBP: 00007f984f8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.491874][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.491887][ T7273] R13: 0000000000000000 R14: 00007f9851475fa0 R15: 00007ffec5e4a228 [ 89.491908][ T7273] [ 89.492406][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 89.492421][ T29] audit: type=1400 audit(2000000019.330:4097): avc: denied { create } for pid=7275 comm="syz.3.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.843015][ T29] audit: type=1400 audit(2000000019.330:4098): avc: denied { connect } for pid=7275 comm="syz.3.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.862688][ T29] audit: type=1400 audit(2000000019.380:4099): avc: denied { read } for pid=7275 comm="syz.3.1426" path="socket:[19198]" dev="sockfs" ino=19198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.899059][ T7285] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1428'. [ 89.909952][ T29] audit: type=1400 audit(2000000019.730:4100): avc: denied { create } for pid=7275 comm="syz.3.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.929601][ T29] audit: type=1400 audit(2000000019.730:4101): avc: denied { write } for pid=7275 comm="syz.3.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.959953][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.984064][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1431'. [ 90.024690][ T7296] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 90.112954][ T7302] netlink: 'syz.6.1435': attribute type 1 has an invalid length. [ 90.132239][ T29] audit: type=1400 audit(2000000019.970:4102): avc: denied { view } for pid=7300 comm="syz.6.1435" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.132751][ T7293] IPVS: length: 135 != 528 [ 90.151466][ T29] audit: type=1326 audit(2000000019.970:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.6.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 90.179465][ T29] audit: type=1326 audit(2000000019.970:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.6.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 90.203377][ T29] audit: type=1326 audit(2000000019.970:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.6.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 90.227014][ T29] audit: type=1326 audit(2000000019.970:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7300 comm="syz.6.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 90.252199][ T7303] SELinux: security_context_str_to_sid () failed with errno=-22 [ 90.279393][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.316999][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1438'. [ 90.371803][ T7319] pim6reg1: entered promiscuous mode [ 90.377186][ T7319] pim6reg1: entered allmulticast mode [ 90.445061][ T7329] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1446'. [ 90.485361][ T7333] loop7: detected capacity change from 0 to 256 [ 90.514944][ T7337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1449'. [ 90.537469][ T7341] siw: device registration error -23 [ 90.544302][ T7341] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 90.576132][ T7344] loop7: detected capacity change from 0 to 2048 [ 90.602138][ T7339] netlink: 'syz.6.1450': attribute type 13 has an invalid length. [ 90.660737][ T7348] loop7: detected capacity change from 0 to 8192 [ 90.668610][ T7348] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.888498][ T7358] FAULT_INJECTION: forcing a failure. [ 90.888498][ T7358] name failslab, interval 1, probability 0, space 0, times 0 [ 90.901436][ T7358] CPU: 0 UID: 0 PID: 7358 Comm: syz.7.1455 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 90.901482][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.901516][ T7358] Call Trace: [ 90.901524][ T7358] [ 90.901533][ T7358] dump_stack_lvl+0xf6/0x150 [ 90.901559][ T7358] dump_stack+0x15/0x1a [ 90.901580][ T7358] should_fail_ex+0x261/0x270 [ 90.901612][ T7358] should_failslab+0x8f/0xb0 [ 90.901650][ T7358] __kmalloc_cache_noprof+0x55/0x320 [ 90.901738][ T7358] ? assoc_array_insert+0x2bf/0x19c0 [ 90.901780][ T7358] assoc_array_insert+0x2bf/0x19c0 [ 90.901819][ T7358] ? __list_add_valid_or_report+0x38/0xe0 [ 90.901877][ T7358] ? _raw_write_unlock+0xd/0x30 [ 90.901902][ T7358] ? keyring_instantiate+0x144/0x160 [ 90.901938][ T7358] __key_link_begin+0x9a/0x150 [ 90.901965][ T7358] key_link+0xbe/0x3d0 [ 90.901989][ T7358] ? keyring_alloc+0x82/0xb0 [ 90.902008][ T7358] call_sbin_request_key+0x29e/0x700 [ 90.902128][ T7358] ? request_key_auth_new+0x437/0x5b0 [ 90.902171][ T7358] ? refcount_dec_and_lock+0xdb/0x180 [ 90.902231][ T7358] request_key_and_link+0x8e8/0xd50 [ 90.902299][ T7358] ? __pfx_key_default_cmp+0x10/0x10 [ 90.902323][ T7358] ? __pfx_keyring_search_iterator+0x10/0x10 [ 90.902365][ T7358] __se_sys_request_key+0x1d9/0x290 [ 90.902394][ T7358] ? fput+0x99/0xd0 [ 90.902533][ T7358] __x64_sys_request_key+0x55/0x70 [ 90.902570][ T7358] x64_sys_call+0x2b17/0x2e10 [ 90.902598][ T7358] do_syscall_64+0xc9/0x1c0 [ 90.902711][ T7358] ? clear_bhb_loop+0x25/0x80 [ 90.902738][ T7358] ? clear_bhb_loop+0x25/0x80 [ 90.902764][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.902791][ T7358] RIP: 0033:0x7f985125d169 [ 90.902809][ T7358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.902872][ T7358] RSP: 002b:00007f984f8a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 90.902896][ T7358] RAX: ffffffffffffffda RBX: 00007f9851476080 RCX: 00007f985125d169 [ 90.902911][ T7358] RDX: 0000200000000340 RSI: 0000200000000200 RDI: 0000200000000080 [ 90.902925][ T7358] RBP: 00007f984f8a6090 R08: 0000000000000000 R09: 0000000000000000 [ 90.902938][ T7358] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 90.902953][ T7358] R13: 0000000000000001 R14: 00007f9851476080 R15: 00007ffec5e4a228 [ 90.902976][ T7358] [ 91.234793][ T7363] IPVS: length: 135 != 528 [ 91.534975][ T7393] siw: device registration error -23 [ 91.590893][ T7391] pim6reg1: entered promiscuous mode [ 91.596249][ T7391] pim6reg1: entered allmulticast mode [ 91.768635][ T7410] loop7: detected capacity change from 0 to 128 [ 91.812344][ T7410] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.835229][ T7410] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.985072][ T5282] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.036563][ T7432] pim6reg1: entered promiscuous mode [ 92.041932][ T7432] pim6reg1: entered allmulticast mode [ 92.141839][ T7443] IPVS: length: 135 != 528 [ 92.284027][ T7450] FAULT_INJECTION: forcing a failure. [ 92.284027][ T7450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.297437][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: syz.6.1492 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 92.297469][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.297484][ T7450] Call Trace: [ 92.297491][ T7450] [ 92.297529][ T7450] dump_stack_lvl+0xf6/0x150 [ 92.297559][ T7450] dump_stack+0x15/0x1a [ 92.297581][ T7450] should_fail_ex+0x261/0x270 [ 92.297614][ T7450] should_fail_alloc_page+0xfd/0x110 [ 92.297717][ T7450] __alloc_frozen_pages_noprof+0x11d/0x360 [ 92.297832][ T7450] alloc_pages_mpol+0xb6/0x260 [ 92.297863][ T7450] vma_alloc_folio_noprof+0x19c/0x300 [ 92.297936][ T7450] do_wp_page+0x64f/0x24e0 [ 92.298016][ T7450] ? __rcu_read_lock+0x36/0x50 [ 92.298054][ T7450] handle_mm_fault+0xc6c/0x2e80 [ 92.298115][ T7450] ? mas_walk+0x204/0x320 [ 92.298200][ T7450] ? __rcu_read_unlock+0x4e/0x70 [ 92.298307][ T7450] exc_page_fault+0x3b9/0x6a0 [ 92.298340][ T7450] asm_exc_page_fault+0x26/0x30 [ 92.298378][ T7450] RIP: 0033:0x7fb93adffc90 [ 92.298397][ T7450] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 92.298419][ T7450] RSP: 002b:00007fb9395a64a0 EFLAGS: 00010202 [ 92.298438][ T7450] RAX: 0000000000006005 RBX: 00007fb9395a6540 RCX: 0000000000000101 [ 92.298454][ T7450] RDX: 00000000000030ff RSI: 0000000000000400 RDI: 00007fb9395a65e0 [ 92.298469][ T7450] RBP: 0000000000000102 R08: 00007fb931187000 R09: 0000000000000004 [ 92.298496][ T7450] R10: 0000200000000402 R11: 0000000000000448 R12: 0000000000000301 [ 92.298510][ T7450] R13: 00007fb93afd98e0 R14: 0000000000000013 R15: 00007fb9395a65e0 [ 92.298532][ T7450] [ 92.298543][ T7450] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 92.529133][ T7452] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1493'. [ 92.545819][ T7460] SELinux: syz.3.1495 (7460) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 92.592671][ T7468] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1498'. [ 92.645783][ T7473] siw: device registration error -23 [ 92.658141][ T7473] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 92.758543][ T7481] vhci_hcd: invalid port number 15 [ 92.954287][ T7487] IPVS: length: 135 != 528 [ 93.207767][ T7489] sd 0:0:1:0: device reset [ 93.392990][ T7506] siw: device registration error -23 [ 93.417237][ T7506] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 93.449526][ T7513] FAULT_INJECTION: forcing a failure. [ 93.449526][ T7513] name failslab, interval 1, probability 0, space 0, times 0 [ 93.462334][ T7513] CPU: 0 UID: 0 PID: 7513 Comm: syz.4.1515 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 93.462385][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.462401][ T7513] Call Trace: [ 93.462408][ T7513] [ 93.462415][ T7513] dump_stack_lvl+0xf6/0x150 [ 93.462439][ T7513] dump_stack+0x15/0x1a [ 93.462489][ T7513] should_fail_ex+0x261/0x270 [ 93.462523][ T7513] should_failslab+0x8f/0xb0 [ 93.462557][ T7513] kmem_cache_alloc_noprof+0x59/0x340 [ 93.462579][ T7513] ? audit_log_start+0x37f/0x6e0 [ 93.462600][ T7513] ? __rcu_read_unlock+0x4e/0x70 [ 93.462698][ T7513] audit_log_start+0x37f/0x6e0 [ 93.462724][ T7513] audit_seccomp+0x4b/0x130 [ 93.462759][ T7513] __seccomp_filter+0x694/0x10e0 [ 93.462789][ T7513] ? __perf_event_task_sched_out+0x13c/0xf00 [ 93.462814][ T7513] ? _raw_spin_unlock+0x26/0x50 [ 93.462839][ T7513] __secure_computing+0x7e/0x160 [ 93.462931][ T7513] syscall_trace_enter+0xcf/0x1f0 [ 93.462969][ T7513] do_syscall_64+0xaa/0x1c0 [ 93.463072][ T7513] ? clear_bhb_loop+0x25/0x80 [ 93.463099][ T7513] ? clear_bhb_loop+0x25/0x80 [ 93.463152][ T7513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.463183][ T7513] RIP: 0033:0x7f6d34b3bb7c [ 93.463201][ T7513] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.463223][ T7513] RSP: 002b:00007f6d331a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.463245][ T7513] RAX: ffffffffffffffda RBX: 00007f6d34d55fa0 RCX: 00007f6d34b3bb7c [ 93.463257][ T7513] RDX: 000000000000000f RSI: 00007f6d331a70a0 RDI: 0000000000000006 [ 93.463269][ T7513] RBP: 00007f6d331a7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.463280][ T7513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.463291][ T7513] R13: 0000000000000000 R14: 00007f6d34d55fa0 R15: 00007ffde9a06d88 [ 93.463334][ T7513] [ 93.712214][ T7522] loop7: detected capacity change from 0 to 128 [ 93.751563][ T7528] IPVS: length: 135 != 528 [ 93.761984][ T7522] FAULT_INJECTION: forcing a failure. [ 93.761984][ T7522] name failslab, interval 1, probability 0, space 0, times 0 [ 93.774732][ T7522] CPU: 1 UID: 0 PID: 7522 Comm: syz.7.1520 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 93.774764][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.774780][ T7522] Call Trace: [ 93.774788][ T7522] [ 93.774797][ T7522] dump_stack_lvl+0xf6/0x150 [ 93.774827][ T7522] dump_stack+0x15/0x1a [ 93.774848][ T7522] should_fail_ex+0x261/0x270 [ 93.774887][ T7522] should_failslab+0x8f/0xb0 [ 93.774924][ T7522] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 93.775020][ T7522] ? fat_alloc_inode+0x38/0xc0 [ 93.775050][ T7522] fat_alloc_inode+0x38/0xc0 [ 93.775102][ T7522] ? __pfx_fat_alloc_inode+0x10/0x10 [ 93.775133][ T7522] alloc_inode+0x40/0x170 [ 93.775164][ T7522] new_inode+0x1e/0xe0 [ 93.775186][ T7522] fat_build_inode+0x159/0x280 [ 93.775254][ T7522] vfat_lookup+0x195/0x2e0 [ 93.775295][ T7522] lookup_one_qstr_excl+0xca/0x250 [ 93.775341][ T7522] do_renameat2+0x3af/0x9f0 [ 93.775371][ T7522] ? proc_fail_nth_write+0x12d/0x160 [ 93.775484][ T7522] __x64_sys_renameat2+0x82/0xa0 [ 93.775523][ T7522] x64_sys_call+0x2cf7/0x2e10 [ 93.775622][ T7522] do_syscall_64+0xc9/0x1c0 [ 93.775652][ T7522] ? clear_bhb_loop+0x25/0x80 [ 93.775716][ T7522] ? clear_bhb_loop+0x25/0x80 [ 93.775737][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.775758][ T7522] RIP: 0033:0x7f985125d169 [ 93.775773][ T7522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.775867][ T7522] RSP: 002b:00007f984f8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 93.775890][ T7522] RAX: ffffffffffffffda RBX: 00007f9851475fa0 RCX: 00007f985125d169 [ 93.775902][ T7522] RDX: 0000000000000005 RSI: 0000200000000240 RDI: 0000000000000005 [ 93.775916][ T7522] RBP: 00007f984f8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.776000][ T7522] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 93.776015][ T7522] R13: 0000000000000000 R14: 00007f9851475fa0 R15: 00007ffec5e4a228 [ 93.776035][ T7522] [ 94.057984][ T7533] dummy0: entered promiscuous mode [ 94.063507][ T7533] macsec1: entered allmulticast mode [ 94.069144][ T7533] dummy0: entered allmulticast mode [ 94.076135][ T7533] dummy0: left allmulticast mode [ 94.081160][ T7533] dummy0: left promiscuous mode [ 94.461427][ T7549] pim6reg1: entered promiscuous mode [ 94.468015][ T7549] pim6reg1: entered allmulticast mode [ 94.491084][ T7551] FAULT_INJECTION: forcing a failure. [ 94.491084][ T7551] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.504480][ T7551] CPU: 1 UID: 0 PID: 7551 Comm: syz.6.1531 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 94.504514][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.504530][ T7551] Call Trace: [ 94.504538][ T7551] [ 94.504547][ T7551] dump_stack_lvl+0xf6/0x150 [ 94.504575][ T7551] dump_stack+0x15/0x1a [ 94.504596][ T7551] should_fail_ex+0x261/0x270 [ 94.504649][ T7551] should_fail_alloc_page+0xfd/0x110 [ 94.504797][ T7551] __alloc_frozen_pages_noprof+0x11d/0x360 [ 94.504839][ T7551] alloc_pages_mpol+0xb6/0x260 [ 94.504868][ T7551] vma_alloc_folio_noprof+0x19c/0x300 [ 94.504900][ T7551] do_wp_page+0x64f/0x24e0 [ 94.505056][ T7551] ? __rcu_read_lock+0x36/0x50 [ 94.505231][ T7551] handle_mm_fault+0xc6c/0x2e80 [ 94.505284][ T7551] ? mas_walk+0x204/0x320 [ 94.505358][ T7551] ? __rcu_read_unlock+0x4e/0x70 [ 94.505401][ T7551] exc_page_fault+0x3b9/0x6a0 [ 94.505434][ T7551] asm_exc_page_fault+0x26/0x30 [ 94.505474][ T7551] RIP: 0033:0x7fb93adffc90 [ 94.505491][ T7551] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 94.505513][ T7551] RSP: 002b:00007fb9395a64a0 EFLAGS: 00010202 [ 94.505529][ T7551] RAX: 0000000000005005 RBX: 00007fb9395a6540 RCX: 0000000000000013 [ 94.505541][ T7551] RDX: 00000000000007ff RSI: 0000000000000800 RDI: 00007fb9395a65e0 [ 94.505553][ T7551] RBP: 0000000000000014 R08: 00007fb931187000 R09: 0000000000000004 [ 94.505565][ T7551] R10: 0000200000000942 R11: 000000000000042d R12: 0000000000000601 [ 94.505617][ T7551] R13: 00007fb93afd98e0 R14: 0000000000000015 R15: 00007fb9395a65e0 [ 94.505641][ T7551] [ 94.505651][ T7551] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 94.715438][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 94.715457][ T29] audit: type=1326 audit(2000000024.550:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b3d169 code=0x7ffc0000 [ 94.716660][ T7559] siw: device registration error -23 [ 94.749012][ T29] audit: type=1326 audit(2000000024.550:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d34b3d169 code=0x7ffc0000 [ 94.753658][ T7559] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 94.773956][ T29] audit: type=1326 audit(2000000024.550:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b3d169 code=0x7ffc0000 [ 94.806274][ T29] audit: type=1326 audit(2000000024.640:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f6d34b3d169 code=0x7ffc0000 [ 94.829905][ T29] audit: type=1326 audit(2000000024.640:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b3d169 code=0x7ffc0000 [ 94.853428][ T29] audit: type=1326 audit(2000000024.640:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b3d169 code=0x7ffc0000 [ 94.877547][ T29] audit: type=1326 audit(2000000024.710:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6d34b3d169 code=0x7ffc0000 [ 94.900989][ T29] audit: type=1326 audit(2000000024.710:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b3d169 code=0x7ffc0000 [ 94.924898][ T29] audit: type=1326 audit(2000000024.710:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b3d169 code=0x7ffc0000 [ 94.978318][ T7568] __nla_validate_parse: 3 callbacks suppressed [ 94.978338][ T7568] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1537'. [ 95.003679][ T7570] loop7: detected capacity change from 0 to 512 [ 95.017349][ T7570] EXT4-fs (loop7): inodes count not valid: 32 vs 115 [ 95.062731][ T7572] IPv6: Can't replace route, no match found [ 95.069597][ T7581] loop7: detected capacity change from 0 to 512 [ 95.090169][ T7581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 95.108813][ T7581] System zones: 0-2, 18-18, 34-34 [ 95.114162][ T29] audit: type=1400 audit(2000000024.940:4648): avc: denied { append } for pid=7576 comm="syz.6.1541" name="pfkey" dev="proc" ino=4026535267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 95.138565][ T7581] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1543: bg 0: block 65: padding at end of block bitmap is not set [ 95.155198][ T7581] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.1543: Failed to acquire dquot type 1 [ 95.176723][ T7581] EXT4-fs (loop7): 1 truncate cleaned up [ 95.185678][ T7581] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.217975][ T7592] securityfs: Unknown parameter '_' [ 95.242226][ T7581] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.283099][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.302635][ T7596] @ÿ: renamed from bond_slave_0 (while UP) [ 95.310701][ T7598] x_tables: duplicate entry at hook 2 [ 95.322473][ T7598] loop7: detected capacity change from 0 to 512 [ 95.329779][ T7598] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.345592][ T7598] EXT4-fs (loop7): orphan cleanup on readonly fs [ 95.354705][ T7598] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 95.369021][ T7598] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 1 [ 95.381193][ T7598] EXT4-fs (loop7): 1 truncate cleaned up [ 95.390985][ T7598] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.427717][ T7603] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1551'. [ 95.438027][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.608617][ T7619] netlink: 'syz.3.1558': attribute type 1 has an invalid length. [ 95.630051][ T7619] bond1: entered promiscuous mode [ 95.635467][ T7619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.701758][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 95.777245][ T7637] IPVS: length: 135 != 528 [ 95.849496][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1568'. [ 96.350963][ T7668] IPVS: stopping master sync thread 7669 ... [ 96.353071][ T7669] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 96.444708][ T7671] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.501906][ T7671] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.581571][ T7671] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.592573][ T7678] siw: device registration error -23 [ 96.599764][ T7678] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 96.626670][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1582'. [ 96.661491][ T7671] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.693077][ T7684] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1584'. [ 96.771261][ T7671] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.804110][ T7671] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.809469][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1587'. [ 96.846800][ T7671] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.900611][ T7671] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.041412][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1594'. [ 97.123812][ T7718] loop7: detected capacity change from 0 to 256 [ 97.147952][ T7716] pim6reg1: entered promiscuous mode [ 97.154079][ T7716] pim6reg1: entered allmulticast mode [ 97.364102][ T7747] loop7: detected capacity change from 0 to 256 [ 97.419950][ T7753] siw: device registration error -23 [ 97.428560][ T7753] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 97.592291][ T7759] pim6reg1: entered promiscuous mode [ 97.598152][ T7759] pim6reg1: entered allmulticast mode [ 97.682241][ T7765] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1621'. [ 98.004516][ T7818] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1633'. [ 98.034321][ T7803] atomic_op ffff8881121a4528 conn xmit_atomic 0000000000000000 [ 99.031938][ T7909] net_ratelimit: 2 callbacks suppressed [ 99.031956][ T7909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.153996][ T7921] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.183641][ T7921] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 99.200463][ T7933] xt_hashlimit: size too large, truncated to 1048576 [ 99.207202][ T7933] xt_hashlimit: max too large, truncated to 1048576 [ 99.370718][ T7953] siw: device registration error -23 [ 99.384484][ T7955] netlink: 'syz.3.1702': attribute type 10 has an invalid length. [ 99.546142][ T7986] siw: device registration error -23 [ 99.553214][ T7986] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 99.579297][ T7988] bridge_slave_0: left allmulticast mode [ 99.585007][ T7988] bridge_slave_0: left promiscuous mode [ 99.590950][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.598766][ T7988] bridge_slave_1: left allmulticast mode [ 99.604533][ T7988] bridge_slave_1: left promiscuous mode [ 99.610532][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.619763][ T7992] netlink: 'syz.3.1717': attribute type 10 has an invalid length. [ 99.620337][ T7988] bond0: (slave bond_slave_0): Releasing backup interface [ 99.633979][ T7993] FAULT_INJECTION: forcing a failure. [ 99.633979][ T7993] name failslab, interval 1, probability 0, space 0, times 0 [ 99.647817][ T7993] CPU: 1 UID: 0 PID: 7993 Comm: syz.6.1715 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 99.647847][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.647860][ T7993] Call Trace: [ 99.647865][ T7993] [ 99.647871][ T7993] dump_stack_lvl+0xf6/0x150 [ 99.647894][ T7993] dump_stack+0x15/0x1a [ 99.648008][ T7993] should_fail_ex+0x261/0x270 [ 99.648044][ T7993] should_failslab+0x8f/0xb0 [ 99.648156][ T7993] kmem_cache_alloc_noprof+0x59/0x340 [ 99.648182][ T7993] ? alloc_empty_file+0x78/0x200 [ 99.648211][ T7993] alloc_empty_file+0x78/0x200 [ 99.648249][ T7993] dentry_open+0x2d/0x90 [ 99.648272][ T7993] do_mq_open+0x3c5/0x4e0 [ 99.648349][ T7993] __x64_sys_mq_open+0xd1/0x100 [ 99.648379][ T7993] x64_sys_call+0x27a7/0x2e10 [ 99.648406][ T7993] do_syscall_64+0xc9/0x1c0 [ 99.648511][ T7993] ? clear_bhb_loop+0x25/0x80 [ 99.648559][ T7993] ? clear_bhb_loop+0x25/0x80 [ 99.648586][ T7993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.648660][ T7993] RIP: 0033:0x7fb93af3d169 [ 99.648675][ T7993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.648695][ T7993] RSP: 002b:00007fb939586038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 99.648716][ T7993] RAX: ffffffffffffffda RBX: 00007fb93b156080 RCX: 00007fb93af3d169 [ 99.648730][ T7993] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 99.648744][ T7993] RBP: 00007fb939586090 R08: 0000000000000000 R09: 0000000000000000 [ 99.648758][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.648834][ T7993] R13: 0000000000000000 R14: 00007fb93b156080 R15: 00007ffd3f0d7fd8 [ 99.648855][ T7993] [ 99.830334][ T7988] bond0: (slave bond_slave_1): Releasing backup interface [ 99.839424][ T7988] team0: Port device team_slave_0 removed [ 99.846246][ T7988] team0: Port device team_slave_1 removed [ 99.852449][ T7988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.860339][ T7988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.868448][ T7988] bond1: (slave ip6gretap1): Removing an active aggregator [ 99.876182][ T7988] bond1: (slave ip6gretap1): Releasing backup interface [ 99.901895][ T7996] FAULT_INJECTION: forcing a failure. [ 99.901895][ T7996] name failslab, interval 1, probability 0, space 0, times 0 [ 99.914667][ T7996] CPU: 1 UID: 0 PID: 7996 Comm: +}[@ Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 99.914738][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.914753][ T7996] Call Trace: [ 99.914761][ T7996] [ 99.914768][ T7996] dump_stack_lvl+0xf6/0x150 [ 99.914788][ T7996] dump_stack+0x15/0x1a [ 99.914802][ T7996] should_fail_ex+0x261/0x270 [ 99.914825][ T7996] should_failslab+0x8f/0xb0 [ 99.914854][ T7996] __kmalloc_cache_noprof+0x55/0x320 [ 99.914874][ T7996] ? nf_tables_parse_netdev_hooks+0xe3/0x450 [ 99.914899][ T7996] ? strcmp+0x21/0x50 [ 99.914925][ T7996] nf_tables_parse_netdev_hooks+0xe3/0x450 [ 99.915096][ T7996] nft_flowtable_parse_hook+0x2c7/0x400 [ 99.915173][ T7996] nf_tables_delflowtable+0x784/0xd30 [ 99.915202][ T7996] nfnetlink_rcv+0xb6e/0x1610 [ 99.915300][ T7996] ? __kfree_skb+0x102/0x150 [ 99.915347][ T7996] netlink_unicast+0x605/0x6c0 [ 99.915370][ T7996] netlink_sendmsg+0x609/0x720 [ 99.915396][ T7996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.915457][ T7996] __sock_sendmsg+0x140/0x180 [ 99.915494][ T7996] ____sys_sendmsg+0x350/0x4e0 [ 99.915520][ T7996] __sys_sendmsg+0x1a0/0x240 [ 99.915556][ T7996] __x64_sys_sendmsg+0x46/0x50 [ 99.915579][ T7996] x64_sys_call+0x26f3/0x2e10 [ 99.915676][ T7996] do_syscall_64+0xc9/0x1c0 [ 99.915706][ T7996] ? clear_bhb_loop+0x25/0x80 [ 99.915731][ T7996] ? clear_bhb_loop+0x25/0x80 [ 99.915750][ T7996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.915786][ T7996] RIP: 0033:0x7f44f6ddd169 [ 99.915799][ T7996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.915813][ T7996] RSP: 002b:00007f44f5447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.915829][ T7996] RAX: ffffffffffffffda RBX: 00007f44f6ff5fa0 RCX: 00007f44f6ddd169 [ 99.915839][ T7996] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 99.915930][ T7996] RBP: 00007f44f5447090 R08: 0000000000000000 R09: 0000000000000000 [ 99.915940][ T7996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.915950][ T7996] R13: 0000000000000000 R14: 00007f44f6ff5fa0 R15: 00007ffe662713d8 [ 99.915966][ T7996] [ 100.212892][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 100.212911][ T29] audit: type=1326 audit(2000000030.050:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 100.243806][ T29] audit: type=1326 audit(2000000030.050:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 100.267384][ T29] audit: type=1326 audit(2000000030.060:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 100.291315][ T29] audit: type=1326 audit(2000000030.060:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 100.314749][ T29] audit: type=1326 audit(2000000030.060:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 100.338274][ T29] audit: type=1326 audit(2000000030.080:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 100.362477][ T29] audit: type=1326 audit(2000000030.080:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93af3d169 code=0x7ffc0000 [ 100.394730][ T29] audit: type=1326 audit(2000000030.230:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8003 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 100.418298][ T29] audit: type=1326 audit(2000000030.230:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8003 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 100.442237][ T29] audit: type=1326 audit(2000000030.230:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8003 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 100.487565][ T8012] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 100.601315][ T8024] __nla_validate_parse: 1 callbacks suppressed [ 100.601399][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1731'. [ 100.768469][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1732'. [ 100.811569][ T8029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 100.916447][ T10] IPVS: starting estimator thread 0... [ 101.019507][ T8035] IPVS: using max 2304 ests per chain, 115200 per kthread [ 101.185565][ T8056] loop7: detected capacity change from 0 to 512 [ 101.192596][ T8056] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 101.204399][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1745'. [ 101.206747][ T8056] EXT4-fs (loop7): 1 truncate cleaned up [ 101.222091][ T8056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.292224][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.320321][ T8062] netlink: 'syz.7.1746': attribute type 13 has an invalid length. [ 101.371140][ T3365] IPVS: starting estimator thread 0... [ 101.386913][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.394252][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.436916][ T8062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.448180][ T8062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.458976][ T8067] IPVS: using max 2256 ests per chain, 112800 per kthread [ 101.467617][ T8071] loop7: detected capacity change from 0 to 512 [ 101.474997][ T8071] journal_path: Non-blockdev passed as './bus' [ 101.481446][ T8071] EXT4-fs: error: could not find journal device path [ 101.506947][ T8062] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.515408][ T8062] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.525042][ T8062] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.534441][ T8062] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.547964][ T1037] syz1: Port: 1 Link DOWN [ 101.596847][ T8075] pim6reg1: entered promiscuous mode [ 101.602451][ T8075] pim6reg1: entered allmulticast mode [ 101.675879][ T8080] FAULT_INJECTION: forcing a failure. [ 101.675879][ T8080] name failslab, interval 1, probability 0, space 0, times 0 [ 101.688700][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz.3.1752 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 101.688734][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.688805][ T8080] Call Trace: [ 101.688812][ T8080] [ 101.688821][ T8080] dump_stack_lvl+0xf6/0x150 [ 101.688848][ T8080] dump_stack+0x15/0x1a [ 101.688873][ T8080] should_fail_ex+0x261/0x270 [ 101.688903][ T8080] should_failslab+0x8f/0xb0 [ 101.688985][ T8080] __kmalloc_cache_noprof+0x55/0x320 [ 101.689012][ T8080] ? audit_log_d_path+0x8e/0x150 [ 101.689042][ T8080] audit_log_d_path+0x8e/0x150 [ 101.689070][ T8080] audit_log_d_path_exe+0x42/0x70 [ 101.689172][ T8080] audit_log_task+0x1f1/0x250 [ 101.689196][ T8080] audit_seccomp+0x68/0x130 [ 101.689220][ T8080] __seccomp_filter+0x694/0x10e0 [ 101.689256][ T8080] ? vfs_write+0x669/0x950 [ 101.689328][ T8080] ? putname+0xe1/0x100 [ 101.689353][ T8080] __secure_computing+0x7e/0x160 [ 101.689381][ T8080] syscall_trace_enter+0xcf/0x1f0 [ 101.689450][ T8080] ? fpregs_assert_state_consistent+0x83/0xa0 [ 101.689491][ T8080] do_syscall_64+0xaa/0x1c0 [ 101.689526][ T8080] ? clear_bhb_loop+0x25/0x80 [ 101.689586][ T8080] ? clear_bhb_loop+0x25/0x80 [ 101.689607][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.689675][ T8080] RIP: 0033:0x7f44f6ddbb7c [ 101.689693][ T8080] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.689711][ T8080] RSP: 002b:00007f44f5447030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.689732][ T8080] RAX: ffffffffffffffda RBX: 00007f44f6ff5fa0 RCX: 00007f44f6ddbb7c [ 101.689747][ T8080] RDX: 000000000000000f RSI: 00007f44f54470a0 RDI: 0000000000000006 [ 101.689826][ T8080] RBP: 00007f44f5447090 R08: 0000000000000000 R09: 0000000000000000 [ 101.689836][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.689846][ T8080] R13: 0000000000000000 R14: 00007f44f6ff5fa0 R15: 00007ffe662713d8 [ 101.689863][ T8080] [ 101.968145][ T8089] netlink: 'syz.7.1753': attribute type 4 has an invalid length. [ 102.047096][ T8099] netlink: 'syz.3.1754': attribute type 4 has an invalid length. [ 102.181042][ T8110] pim6reg1: entered promiscuous mode [ 102.186372][ T8110] pim6reg1: entered allmulticast mode [ 102.794500][ T8135] FAULT_INJECTION: forcing a failure. [ 102.794500][ T8135] name failslab, interval 1, probability 0, space 0, times 0 [ 102.807298][ T8135] CPU: 0 UID: 0 PID: 8135 Comm: syz.7.1774 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 102.807382][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.807398][ T8135] Call Trace: [ 102.807405][ T8135] [ 102.807414][ T8135] dump_stack_lvl+0xf6/0x150 [ 102.807444][ T8135] dump_stack+0x15/0x1a [ 102.807465][ T8135] should_fail_ex+0x261/0x270 [ 102.807499][ T8135] should_failslab+0x8f/0xb0 [ 102.807537][ T8135] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 102.807711][ T8135] ? __alloc_skb+0x10d/0x320 [ 102.807741][ T8135] __alloc_skb+0x10d/0x320 [ 102.807771][ T8135] rtmsg_ifinfo_build_skb+0x63/0x1b0 [ 102.807805][ T8135] ? mac802154_slave_close+0x199/0x200 [ 102.807968][ T8135] rtmsg_ifinfo+0x6b/0x100 [ 102.808002][ T8135] dev_close_many+0x153/0x250 [ 102.808043][ T8135] ? _raw_spin_unlock+0x26/0x50 [ 102.808096][ T8135] __dev_change_net_namespace+0x689/0x1480 [ 102.808139][ T8135] ? __nla_validate_parse+0x1843/0x1f60 [ 102.808213][ T8135] dev_change_net_namespace+0x2a/0x40 [ 102.808239][ T8135] cfg802154_switch_netns+0x85/0x290 [ 102.808291][ T8135] nl802154_wpan_phy_netns+0xc9/0x150 [ 102.808324][ T8135] genl_rcv_msg+0x69b/0x6f0 [ 102.808360][ T8135] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 102.808389][ T8135] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 102.808443][ T8135] ? __pfx_nl802154_post_doit+0x10/0x10 [ 102.808469][ T8135] ? should_fail_ex+0x31/0x270 [ 102.808499][ T8135] ? __rcu_read_unlock+0x4e/0x70 [ 102.808625][ T8135] netlink_rcv_skb+0x12f/0x230 [ 102.808652][ T8135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.808707][ T8135] genl_rcv+0x28/0x40 [ 102.808739][ T8135] netlink_unicast+0x605/0x6c0 [ 102.808832][ T8135] netlink_sendmsg+0x609/0x720 [ 102.808871][ T8135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.808901][ T8135] __sock_sendmsg+0x140/0x180 [ 102.809016][ T8135] ____sys_sendmsg+0x350/0x4e0 [ 102.809067][ T8135] __sys_sendmsg+0x1a0/0x240 [ 102.809129][ T8135] __x64_sys_sendmsg+0x46/0x50 [ 102.809204][ T8135] x64_sys_call+0x26f3/0x2e10 [ 102.809233][ T8135] do_syscall_64+0xc9/0x1c0 [ 102.809275][ T8135] ? clear_bhb_loop+0x25/0x80 [ 102.809304][ T8135] ? clear_bhb_loop+0x25/0x80 [ 102.809371][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.809397][ T8135] RIP: 0033:0x7f985125d169 [ 102.809415][ T8135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.809438][ T8135] RSP: 002b:00007f984f8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.809459][ T8135] RAX: ffffffffffffffda RBX: 00007f9851475fa0 RCX: 00007f985125d169 [ 102.809512][ T8135] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 000000000000000c [ 102.809527][ T8135] RBP: 00007f984f8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.809578][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.809593][ T8135] R13: 0000000000000000 R14: 00007f9851475fa0 R15: 00007ffec5e4a228 [ 102.809617][ T8135] [ 103.211283][ T8140] loop7: detected capacity change from 0 to 512 [ 103.243239][ T8140] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.259483][ T8140] EXT4-fs (loop7): orphan cleanup on readonly fs [ 103.266543][ T8140] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1777: bg 0: block 248: padding at end of block bitmap is not set [ 103.289530][ T8140] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.1777: Failed to acquire dquot type 1 [ 103.309392][ T8140] EXT4-fs (loop7): 1 truncate cleaned up [ 103.318733][ T8140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.344217][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.354895][ T8152] pim6reg1: entered promiscuous mode [ 103.360447][ T8152] pim6reg1: entered allmulticast mode [ 103.406836][ T8159] siw: device registration error -23 [ 103.448658][ T8163] loop7: detected capacity change from 0 to 512 [ 103.476290][ T8163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.490533][ T8173] xt_hashlimit: max too large, truncated to 1048576 [ 103.498257][ T8163] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.577152][ T8183] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1790'. [ 103.596222][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.610108][ T8181] pim6reg1: entered promiscuous mode [ 103.616228][ T8181] pim6reg1: entered allmulticast mode [ 103.645480][ T8189] loop7: detected capacity change from 0 to 128 [ 103.661212][ T8189] bio_check_eod: 3 callbacks suppressed [ 103.661225][ T8189] +}[@: attempt to access beyond end of device [ 103.661225][ T8189] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 103.680315][ T8189] +}[@: attempt to access beyond end of device [ 103.680315][ T8189] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 103.693374][ T8189] +}[@: attempt to access beyond end of device [ 103.693374][ T8189] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 103.707219][ T8189] +}[@: attempt to access beyond end of device [ 103.707219][ T8189] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 103.721219][ T8189] +}[@: attempt to access beyond end of device [ 103.721219][ T8189] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 103.735439][ T8189] +}[@: attempt to access beyond end of device [ 103.735439][ T8189] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 103.748596][ T8189] +}[@: attempt to access beyond end of device [ 103.748596][ T8189] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 103.765850][ T8189] +}[@: attempt to access beyond end of device [ 103.765850][ T8189] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 103.778997][ T8189] +}[@: attempt to access beyond end of device [ 103.778997][ T8189] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 103.792436][ T8189] +}[@: attempt to access beyond end of device [ 103.792436][ T8189] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 103.796027][ T8194] pim6reg1: entered promiscuous mode [ 103.805879][ T8189] Buffer I/O error on dev loop7, logical block 345, lost async page write [ 103.810706][ T8194] pim6reg1: entered allmulticast mode [ 103.819776][ T8189] Buffer I/O error on dev loop7, logical block 346, lost async page write [ 103.833758][ T8189] Buffer I/O error on dev loop7, logical block 347, lost async page write [ 103.842793][ T8189] Buffer I/O error on dev loop7, logical block 348, lost async page write [ 103.851582][ T8189] Buffer I/O error on dev loop7, logical block 349, lost async page write [ 103.860299][ T8189] Buffer I/O error on dev loop7, logical block 350, lost async page write [ 103.869052][ T8189] Buffer I/O error on dev loop7, logical block 351, lost async page write [ 103.921468][ T8197] siw: device registration error -23 [ 103.929528][ T8197] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 103.993088][ T8205] FAULT_INJECTION: forcing a failure. [ 103.993088][ T8205] name failslab, interval 1, probability 0, space 0, times 0 [ 104.005985][ T8205] CPU: 0 UID: 0 PID: 8205 Comm: gtp Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 104.006091][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.006107][ T8205] Call Trace: [ 104.006114][ T8205] [ 104.006122][ T8205] dump_stack_lvl+0xf6/0x150 [ 104.006152][ T8205] dump_stack+0x15/0x1a [ 104.006228][ T8205] should_fail_ex+0x261/0x270 [ 104.006261][ T8205] should_failslab+0x8f/0xb0 [ 104.006297][ T8205] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 104.006372][ T8205] ? v9fs_session_init+0x7b/0xdb0 [ 104.006403][ T8205] kstrdup+0x3d/0xd0 [ 104.006427][ T8205] v9fs_session_init+0x7b/0xdb0 [ 104.006451][ T8205] ? copy_from_kernel_nofault+0x186/0x1d0 [ 104.006501][ T8205] ? bpf_probe_read_compat+0x123/0x130 [ 104.006528][ T8205] ? should_fail_ex+0xd7/0x270 [ 104.006560][ T8205] ? should_failslab+0x8f/0xb0 [ 104.006597][ T8205] ? __kmalloc_cache_noprof+0x18d/0x320 [ 104.006621][ T8205] ? v9fs_mount+0x56/0x580 [ 104.006654][ T8205] v9fs_mount+0x6c/0x580 [ 104.006700][ T8205] ? __pfx_v9fs_mount+0x10/0x10 [ 104.006734][ T8205] legacy_get_tree+0x77/0xd0 [ 104.006774][ T8205] vfs_get_tree+0x56/0x1e0 [ 104.006811][ T8205] do_new_mount+0x246/0x6b0 [ 104.006882][ T8205] path_mount+0x49b/0xb30 [ 104.006916][ T8205] __se_sys_mount+0x28f/0x2e0 [ 104.006967][ T8205] __x64_sys_mount+0x67/0x80 [ 104.007007][ T8205] x64_sys_call+0xd11/0x2e10 [ 104.007060][ T8205] do_syscall_64+0xc9/0x1c0 [ 104.007095][ T8205] ? clear_bhb_loop+0x25/0x80 [ 104.007117][ T8205] ? clear_bhb_loop+0x25/0x80 [ 104.007143][ T8205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.007164][ T8205] RIP: 0033:0x7f6d34b3d169 [ 104.007239][ T8205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.007269][ T8205] RSP: 002b:00007f6d331a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.007291][ T8205] RAX: ffffffffffffffda RBX: 00007f6d34d55fa0 RCX: 00007f6d34b3d169 [ 104.007306][ T8205] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 104.007321][ T8205] RBP: 00007f6d331a7090 R08: 0000200000000300 R09: 0000000000000000 [ 104.007335][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.007350][ T8205] R13: 0000000000000000 R14: 00007f6d34d55fa0 R15: 00007ffde9a06d88 [ 104.007373][ T8205] [ 104.265818][ T8213] FAULT_INJECTION: forcing a failure. [ 104.265818][ T8213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.279037][ T8213] CPU: 1 UID: 0 PID: 8213 Comm: syz.3.1805 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 104.279176][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.279190][ T8213] Call Trace: [ 104.279203][ T8213] [ 104.279211][ T8213] dump_stack_lvl+0xf6/0x150 [ 104.279239][ T8213] dump_stack+0x15/0x1a [ 104.279256][ T8213] should_fail_ex+0x261/0x270 [ 104.279287][ T8213] should_fail+0xb/0x10 [ 104.279327][ T8213] should_fail_usercopy+0x1a/0x20 [ 104.279362][ T8213] _copy_from_user+0x1c/0xa0 [ 104.279400][ T8213] vmemdup_user+0x66/0xd0 [ 104.279431][ T8213] con_set_unimap+0x41/0x700 [ 104.279471][ T8213] ? should_fail_ex+0xd7/0x270 [ 104.279639][ T8213] vt_ioctl+0x1111/0x18e0 [ 104.279664][ T8213] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 104.279869][ T8213] tty_ioctl+0x813/0xbd0 [ 104.279897][ T8213] ? __pfx_tty_ioctl+0x10/0x10 [ 104.279925][ T8213] __se_sys_ioctl+0xc9/0x140 [ 104.279960][ T8213] __x64_sys_ioctl+0x43/0x50 [ 104.280006][ T8213] x64_sys_call+0x168d/0x2e10 [ 104.280033][ T8213] do_syscall_64+0xc9/0x1c0 [ 104.280068][ T8213] ? clear_bhb_loop+0x25/0x80 [ 104.280094][ T8213] ? clear_bhb_loop+0x25/0x80 [ 104.280150][ T8213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.280203][ T8213] RIP: 0033:0x7f44f6ddd169 [ 104.280221][ T8213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.280242][ T8213] RSP: 002b:00007f44f5447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.280265][ T8213] RAX: ffffffffffffffda RBX: 00007f44f6ff5fa0 RCX: 00007f44f6ddd169 [ 104.280280][ T8213] RDX: 0000200000000180 RSI: 0000000000004b67 RDI: 0000000000000003 [ 104.280294][ T8213] RBP: 00007f44f5447090 R08: 0000000000000000 R09: 0000000000000000 [ 104.280308][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.280388][ T8213] R13: 0000000000000000 R14: 00007f44f6ff5fa0 R15: 00007ffe662713d8 [ 104.280412][ T8213] [ 104.316249][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1802'. [ 104.575381][ T8253] IPVS: length: 135 != 528 [ 104.604389][ T8255] siw: device registration error -23 [ 104.978220][ T8270] pim6reg1: entered promiscuous mode [ 104.984319][ T8270] pim6reg1: entered allmulticast mode [ 105.091702][ T8278] pim6reg1: entered promiscuous mode [ 105.097084][ T8278] pim6reg1: entered allmulticast mode [ 105.197988][ T8280] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 105.248648][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1824'. [ 105.258161][ T8284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48968 sclass=netlink_route_socket pid=8284 comm=syz.4.1824 [ 105.372362][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 105.372385][ T29] audit: type=1400 audit(2000000035.210:5553): avc: denied { setopt } for pid=8289 comm="syz.4.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 105.398386][ T29] audit: type=1400 audit(2000000035.210:5554): avc: denied { nlmsg_read } for pid=8289 comm="syz.4.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.496402][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'. [ 105.510497][ T29] audit: type=1400 audit(2000000035.350:5555): avc: denied { ioctl } for pid=8293 comm="syz.4.1829" path="socket:[22267]" dev="sockfs" ino=22267 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.568337][ T8301] siw: device registration error -23 [ 105.584866][ T8301] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 105.628203][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1835'. [ 105.672165][ T29] audit: type=1400 audit(2000000035.510:5556): avc: denied { getopt } for pid=8309 comm="syz.5.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.719746][ T8321] FAULT_INJECTION: forcing a failure. [ 105.719746][ T8321] name failslab, interval 1, probability 0, space 0, times 0 [ 105.732524][ T8321] CPU: 1 UID: 0 PID: 8321 Comm: syz.6.1839 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 105.732551][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.732571][ T8321] Call Trace: [ 105.732579][ T8321] [ 105.732587][ T8321] dump_stack_lvl+0xf6/0x150 [ 105.732613][ T8321] dump_stack+0x15/0x1a [ 105.732632][ T8321] should_fail_ex+0x261/0x270 [ 105.732744][ T8321] should_failslab+0x8f/0xb0 [ 105.732778][ T8321] __kmalloc_cache_noprof+0x55/0x320 [ 105.732802][ T8321] ? x509_cert_parse+0x3b/0x440 [ 105.732833][ T8321] x509_cert_parse+0x3b/0x440 [ 105.732861][ T8321] x509_key_preparse+0x3c/0x440 [ 105.733021][ T8321] asymmetric_key_preparse+0x6b/0xc0 [ 105.733049][ T8321] __key_create_or_update+0x2ad/0x780 [ 105.733093][ T8321] key_create_or_update+0x42/0x60 [ 105.733183][ T8321] __se_sys_add_key+0x2a1/0x330 [ 105.733206][ T8321] ? fput+0x99/0xd0 [ 105.733232][ T8321] __x64_sys_add_key+0x67/0x80 [ 105.733332][ T8321] x64_sys_call+0x1f10/0x2e10 [ 105.733355][ T8321] do_syscall_64+0xc9/0x1c0 [ 105.733451][ T8321] ? clear_bhb_loop+0x25/0x80 [ 105.733476][ T8321] ? clear_bhb_loop+0x25/0x80 [ 105.733499][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.733531][ T8321] RIP: 0033:0x7fb93af3d169 [ 105.733549][ T8321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.733569][ T8321] RSP: 002b:00007fb9395a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 105.733588][ T8321] RAX: ffffffffffffffda RBX: 00007fb93b155fa0 RCX: 00007fb93af3d169 [ 105.733600][ T8321] RDX: 0000200000000280 RSI: 0000000000000000 RDI: 0000200000000440 [ 105.733612][ T8321] RBP: 00007fb9395a7090 R08: 0000000030baf75c R09: 0000000000000000 [ 105.733653][ T8321] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 105.733665][ T8321] R13: 0000000000000000 R14: 00007fb93b155fa0 R15: 00007ffd3f0d7fd8 [ 105.733685][ T8321] [ 105.989745][ T8331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1842'. [ 106.138053][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1847'. [ 106.372295][ T8354] pim6reg1: entered promiscuous mode [ 106.378188][ T8354] pim6reg1: entered allmulticast mode [ 106.581068][ T8363] program syz.6.1856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.646164][ T8365] siw: device registration error -23 [ 106.664999][ T8365] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 106.737519][ T8369] SELinux: Context Ü is not valid (left unmapped). [ 106.751237][ T29] audit: type=1326 audit(2000000036.580:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 106.774832][ T29] audit: type=1326 audit(2000000036.580:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 106.798524][ T29] audit: type=1326 audit(2000000036.580:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 106.822255][ T29] audit: type=1326 audit(2000000036.580:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 106.845742][ T29] audit: type=1326 audit(2000000036.580:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 106.869397][ T29] audit: type=1326 audit(2000000036.580:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 107.229040][ T8403] IPVS: length: 135 != 528 [ 107.248100][ T8404] siw: device registration error -23 [ 107.256300][ T8404] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 107.312019][ T8408] 9pnet: Could not find request transport: 0xffffffffffffffff [ 107.652958][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1877'. [ 107.858010][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1882'. [ 107.917940][ T8438] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1884'. [ 107.968917][ T8443] siw: device registration error -23 [ 107.979250][ T8443] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 108.168765][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1896'. [ 108.184209][ T8459] loop7: detected capacity change from 0 to 128 [ 108.200925][ T8465] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1897'. [ 108.272779][ T8476] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.295327][ T31] Buffer I/O error on dev loop7, logical block 345, lost async page write [ 108.304363][ T31] Buffer I/O error on dev loop7, logical block 346, lost async page write [ 108.316751][ T31] Buffer I/O error on dev loop7, logical block 347, lost async page write [ 108.328233][ T8476] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.382449][ T8476] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.405300][ T8485] xt_TPROXY: Can be used only with -p tcp or -p udp [ 108.419503][ T8488] IPVS: length: 135 != 528 [ 108.439532][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1908'. [ 108.517298][ T8476] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.591613][ T8476] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.604044][ T8476] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.616547][ T8476] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.629566][ T8476] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.701047][ T8501] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1913'. [ 108.863868][ T8520] pim6reg1: entered promiscuous mode [ 108.870880][ T8520] pim6reg1: entered allmulticast mode [ 109.109683][ T8531] netlink: 'syz.4.1927': attribute type 10 has an invalid length. [ 109.216333][ T8538] netlink: 'syz.7.1928': attribute type 4 has an invalid length. [ 109.456061][ T8550] pim6reg1: entered promiscuous mode [ 109.461872][ T8550] pim6reg1: entered allmulticast mode [ 109.656559][ T8552] netlink: 'syz.3.1936': attribute type 2 has an invalid length. [ 109.671907][ T8552] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 109.682123][ T8552] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 109.788974][ T8555] IPVS: length: 135 != 8 [ 109.904989][ T8559] siw: device registration error -23 [ 109.916462][ T8559] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 110.317991][ T8569] loop7: detected capacity change from 0 to 512 [ 110.340276][ T8569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.371768][ T8569] EXT4-fs (loop7): orphan cleanup on readonly fs [ 110.391775][ T8569] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1944: bg 0: block 248: padding at end of block bitmap is not set [ 110.450133][ T8569] __quota_error: 200 callbacks suppressed [ 110.450150][ T8569] Quota error (device loop7): write_blk: dquota write failed [ 110.463426][ T8569] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 110.473422][ T8569] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.1944: Failed to acquire dquot type 1 [ 110.497487][ T8569] EXT4-fs (loop7): 1 truncate cleaned up [ 110.518343][ T8569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.548383][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.655457][ T8574] loop7: detected capacity change from 0 to 256 [ 110.665977][ T8576] __nla_validate_parse: 4 callbacks suppressed [ 110.665992][ T8576] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1945'. [ 110.673171][ T29] audit: type=1326 audit(2000000040.500:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.7.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 110.699458][ T8578] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 110.704858][ T29] audit: type=1326 audit(2000000040.500:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.7.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 110.736828][ T29] audit: type=1326 audit(2000000040.500:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.7.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 110.760515][ T29] audit: type=1326 audit(2000000040.500:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.7.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f985125bad0 code=0x7ffc0000 [ 110.783977][ T29] audit: type=1326 audit(2000000040.500:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.7.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f985125bad0 code=0x7ffc0000 [ 110.807507][ T29] audit: type=1326 audit(2000000040.500:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.7.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 110.831240][ T29] audit: type=1326 audit(2000000040.500:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.7.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f985125bad0 code=0x7ffc0000 [ 110.840461][ T8584] netlink: 'syz.7.1949': attribute type 10 has an invalid length. [ 110.854713][ T29] audit: type=1326 audit(2000000040.500:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.7.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f985125bad0 code=0x7ffc0000 [ 110.886441][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1945'. [ 110.941518][ T8588] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1951'. [ 111.185345][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1953'. [ 111.194567][ T8601] netlink: 'syz.6.1953': attribute type 1 has an invalid length. [ 111.203263][ T8601] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1953'. [ 111.523636][ T8604] IPVS: length: 135 != 8 [ 111.718703][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1960'. [ 111.731651][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1960'. [ 111.764557][ T8612] netlink: 'syz.3.1961': attribute type 10 has an invalid length. [ 111.961749][ T8618] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1964'. [ 112.152728][ T8627] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 112.159382][ T8627] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.167063][ T8627] vhci_hcd vhci_hcd.0: Device attached [ 112.253636][ T8634] siw: device registration error -23 [ 112.279616][ T8634] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 112.349437][ T3379] vhci_hcd: vhci_device speed not set [ 112.409949][ T3379] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 112.434962][ T8642] netlink: 'syz.7.1972': attribute type 10 has an invalid length. [ 112.623145][ T8658] siw: device registration error -23 [ 112.632844][ T8658] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 112.791684][ T8631] vhci_hcd: connection reset by peer [ 112.797497][ T37] vhci_hcd: stop threads [ 112.799260][ T8663] IPVS: length: 135 != 8 [ 112.801957][ T37] vhci_hcd: release socket [ 112.810619][ T37] vhci_hcd: disconnect device [ 112.848039][ T8667] netlink: 'syz.3.1985': attribute type 10 has an invalid length. [ 113.388968][ T8686] siw: device registration error -23 [ 113.395963][ T8686] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 113.628407][ T8692] pim6reg1: entered promiscuous mode [ 113.635217][ T8692] pim6reg1: entered allmulticast mode [ 113.636015][ T8696] netlink: 'syz.7.1996': attribute type 10 has an invalid length. [ 113.731194][ T8703] pim6reg1: entered promiscuous mode [ 113.737747][ T8703] pim6reg1: entered allmulticast mode [ 113.908602][ T8713] loop7: detected capacity change from 0 to 512 [ 113.914978][ T8710] wireguard0: entered promiscuous mode [ 113.919682][ T8713] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 113.920620][ T8710] wireguard0: entered allmulticast mode [ 113.944622][ T8713] EXT4-fs (loop7): 1 truncate cleaned up [ 113.950804][ T8713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.003157][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.105229][ T8722] IPVS: length: 135 != 528 [ 114.500926][ T8734] pim6reg1: entered promiscuous mode [ 114.507835][ T8734] pim6reg1: entered allmulticast mode [ 114.695179][ T8738] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2015'. [ 114.855355][ T8746] netlink: 'syz.6.2018': attribute type 4 has an invalid length. [ 115.076825][ T8750] loop7: detected capacity change from 0 to 128 [ 115.115362][ T8750] bio_check_eod: 51 callbacks suppressed [ 115.115383][ T8750] +}[@: attempt to access beyond end of device [ 115.115383][ T8750] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 115.154487][ T8750] +}[@: attempt to access beyond end of device [ 115.154487][ T8750] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 115.189433][ T8750] +}[@: attempt to access beyond end of device [ 115.189433][ T8750] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 115.230909][ T8750] +}[@: attempt to access beyond end of device [ 115.230909][ T8750] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 115.266709][ T8750] +}[@: attempt to access beyond end of device [ 115.266709][ T8750] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 115.289017][ T8750] +}[@: attempt to access beyond end of device [ 115.289017][ T8750] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 115.303923][ T8750] +}[@: attempt to access beyond end of device [ 115.303923][ T8750] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 115.347381][ T8750] +}[@: attempt to access beyond end of device [ 115.347381][ T8750] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 115.388972][ T8750] +}[@: attempt to access beyond end of device [ 115.388972][ T8750] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 115.408963][ T8750] +}[@: attempt to access beyond end of device [ 115.408963][ T8750] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 115.440613][ T8750] buffer_io_error: 4 callbacks suppressed [ 115.440631][ T8750] Buffer I/O error on dev loop7, logical block 345, lost async page write [ 115.488959][ T8750] Buffer I/O error on dev loop7, logical block 346, lost async page write [ 115.497618][ T8750] Buffer I/O error on dev loop7, logical block 347, lost async page write [ 115.520885][ T8750] Buffer I/O error on dev loop7, logical block 348, lost async page write [ 115.529531][ T8750] Buffer I/O error on dev loop7, logical block 349, lost async page write [ 115.549028][ T8750] Buffer I/O error on dev loop7, logical block 350, lost async page write [ 115.557856][ T8750] Buffer I/O error on dev loop7, logical block 351, lost async page write [ 115.652179][ T8758] siw: device registration error -23 [ 115.653493][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 115.653509][ T29] audit: type=1326 audit(2000000045.480:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 115.659199][ T8758] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 115.663736][ T29] audit: type=1326 audit(2000000045.480:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 115.717874][ T29] audit: type=1326 audit(2000000045.480:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 115.741891][ T29] audit: type=1326 audit(2000000045.480:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f6ddbad0 code=0x7ffc0000 [ 115.765325][ T29] audit: type=1326 audit(2000000045.480:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f6ddbad0 code=0x7ffc0000 [ 115.788959][ T29] audit: type=1326 audit(2000000045.490:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 115.812561][ T29] audit: type=1326 audit(2000000045.490:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f6ddbad0 code=0x7ffc0000 [ 115.836070][ T29] audit: type=1326 audit(2000000045.490:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f6ddbad0 code=0x7ffc0000 [ 115.859522][ T29] audit: type=1326 audit(2000000045.490:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 115.883028][ T29] audit: type=1326 audit(2000000045.490:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f44f6ddd169 code=0x7ffc0000 [ 115.947311][ T8762] loop7: detected capacity change from 0 to 512 [ 115.964921][ T8762] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 115.981905][ T8762] EXT4-fs (loop7): 1 truncate cleaned up [ 115.987928][ T8762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.016884][ T8776] __nla_validate_parse: 2 callbacks suppressed [ 116.016903][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2031'. [ 116.035870][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2031'. [ 116.147833][ T8796] netlink: 'syz.6.2036': attribute type 4 has an invalid length. [ 116.188716][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.496245][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 116.521991][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 116.671753][ T8817] loop7: detected capacity change from 0 to 256 [ 116.755543][ T8825] loop7: detected capacity change from 0 to 512 [ 116.818146][ T8825] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.827274][ T8825] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 116.879536][ T8825] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 116.891068][ T8825] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 116.910898][ T8825] System zones: 0-2, 18-18, 34-34 [ 116.916769][ T8825] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 116.921097][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 116.943190][ T8825] EXT4-fs (loop7): 1 truncate cleaned up [ 116.949587][ T8825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.968679][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 117.048216][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2061'. [ 117.074800][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.151299][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2068'. [ 117.177738][ T8867] pim6reg1: entered promiscuous mode [ 117.184338][ T8867] pim6reg1: entered allmulticast mode [ 117.202226][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2068'. [ 117.357964][ T8892] loop7: detected capacity change from 0 to 2048 [ 117.374859][ T8898] netlink: 'syz.6.2084': attribute type 10 has an invalid length. [ 117.386610][ T8892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.422863][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2081'. [ 117.477294][ T8911] pim6reg1: entered promiscuous mode [ 117.485400][ T8911] pim6reg1: entered allmulticast mode [ 117.489019][ T3379] usb 13-1: enqueue for inactive port 0 [ 117.498818][ T8914] siw: device registration error -23 [ 117.505792][ T8914] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 117.533301][ T3379] usb 13-1: enqueue for inactive port 0 [ 117.553037][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.611296][ T3379] vhci_hcd: vhci_device speed not set [ 117.652119][ T8932] netlink: 'syz.6.2096': attribute type 10 has an invalid length. [ 117.715321][ T8940] siw: device registration error -23 [ 117.722884][ T8940] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 117.819449][ T8952] pim6reg1: entered promiscuous mode [ 117.825257][ T8952] pim6reg1: entered allmulticast mode [ 117.994140][ T8971] siw: device registration error -23 [ 118.003107][ T8971] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 118.152994][ T8986] netlink: 'syz.4.2111': attribute type 1 has an invalid length. [ 118.391489][ T8987] loop7: detected capacity change from 0 to 128 [ 118.475414][ T8983] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 118.483631][ T8983] FAT-fs (loop7): Filesystem has been set read-only [ 118.558042][ T8996] sd 0:0:1:0: device reset [ 118.569707][ T8983] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 118.577690][ T8983] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 118.615941][ T8984] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 118.625599][ T8984] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 118.633714][ T8984] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 118.635173][ T9000] siw: device registration error -23 [ 118.651323][ T9000] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 118.665163][ T9001] pim6reg1: entered promiscuous mode [ 118.671282][ T9001] pim6reg1: entered allmulticast mode [ 118.896864][ T9028] siw: device registration error -23 [ 118.913086][ T9028] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 118.991569][ T9040] loop7: detected capacity change from 0 to 512 [ 119.039155][ T9040] EXT4-fs: Ignoring removed orlov option [ 119.061303][ T9040] EXT4-fs error (device loop7): __ext4_iget:5004: inode #11: block 1: comm syz.7.2144: invalid block [ 119.081136][ T9040] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.2144: couldn't read orphan inode 11 (err -117) [ 119.094241][ T9040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.202680][ T9046] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 119.225970][ T9062] pim6reg1: entered promiscuous mode [ 119.231371][ T9062] pim6reg1: entered allmulticast mode [ 119.339502][ T9068] netlink: 'syz.3.2154': attribute type 10 has an invalid length. [ 119.433629][ T9078] rdma_op ffff88813e04ed80 conn xmit_rdma 0000000000000000 [ 119.452981][ T9078] bond0: (slave bridge0): Releasing backup interface [ 119.461176][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.468447][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.484143][ T9078] bridge_slave_0: left allmulticast mode [ 119.489927][ T9078] bridge_slave_0: left promiscuous mode [ 119.495606][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.504551][ T9078] bridge_slave_1: left allmulticast mode [ 119.510255][ T9078] bridge_slave_1: left promiscuous mode [ 119.515946][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.525965][ T9078] bond0: (slave 1@ÿ): Releasing backup interface [ 119.535675][ T9078] bond0: (slave bond_slave_1): Releasing backup interface [ 119.548118][ T9078] team0: Port device team_slave_0 removed [ 119.557007][ T9078] team0: Port device team_slave_1 removed [ 119.564254][ T9078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.571855][ T9078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.582677][ T9078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.590465][ T9078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.609116][ T9078] team0: Port device geneve1 removed [ 119.622950][ T3379] srz1: Port: 1 Link DOWN [ 119.820529][ T9093] pim6reg1: entered promiscuous mode [ 119.825909][ T9093] pim6reg1: entered allmulticast mode [ 119.916728][ T9099] netlink: 'syz.4.2168': attribute type 10 has an invalid length. [ 120.003420][ T9107] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 120.093525][ T9124] pim6reg1: entered promiscuous mode [ 120.098936][ T9124] pim6reg1: entered allmulticast mode [ 120.122787][ T9126] netlink: 'syz.6.2180': attribute type 10 has an invalid length. [ 120.219314][ T9136] siw: device registration error -23 [ 120.226523][ T9136] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 120.404336][ T9152] netlink: 'syz.3.2192': attribute type 10 has an invalid length. [ 120.472164][ T9156] pim6reg1: entered promiscuous mode [ 120.477552][ T9156] pim6reg1: entered allmulticast mode [ 120.598663][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.780834][ T9168] Invalid logical block size (2047) [ 120.829969][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.848732][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.864701][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 120.864719][ T29] audit: type=1326 audit(2000000050.700:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.7.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 120.894551][ T29] audit: type=1326 audit(2000000050.700:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.7.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 120.918066][ T29] audit: type=1326 audit(2000000050.700:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.7.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 120.941712][ T29] audit: type=1326 audit(2000000050.760:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.7.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 120.965269][ T29] audit: type=1326 audit(2000000050.760:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.7.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 120.989953][ T29] audit: type=1326 audit(2000000050.760:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.7.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 121.013928][ T29] audit: type=1326 audit(2000000050.760:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.7.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 121.037343][ T29] audit: type=1326 audit(2000000050.760:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.7.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 121.061528][ T29] audit: type=1326 audit(2000000050.760:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.7.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 121.085598][ T29] audit: type=1326 audit(2000000050.760:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.7.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 121.427993][ T9187] __nla_validate_parse: 13 callbacks suppressed [ 121.428010][ T9187] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2202'. [ 121.443509][ T9187] netlink: 'syz.7.2202': attribute type 1 has an invalid length. [ 121.451266][ T9187] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2202'. [ 121.469765][ T9187] loop7: detected capacity change from 0 to 512 [ 121.569870][ T9187] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 121.578268][ T9187] EXT4-fs (loop7): orphan cleanup on readonly fs [ 121.585391][ T9187] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 121.600914][ T9187] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 121.607973][ T9187] EXT4-fs error (device loop7): ext4_orphan_get:1390: inode #16: comm syz.7.2202: iget: immutable or append flags not allowed on symlinks [ 121.624123][ T9187] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.2202: couldn't read orphan inode 16 (err -117) [ 121.637891][ T9187] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.863214][ T9179] chnl_net:caif_netlink_parms(): no params data found [ 121.965434][ T9196] netlink: 'syz.3.2204': attribute type 10 has an invalid length. [ 121.997809][ T9179] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.005128][ T9179] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.019119][ T9179] bridge_slave_0: entered allmulticast mode [ 122.025857][ T9179] bridge_slave_0: entered promiscuous mode [ 122.033347][ T9179] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.041075][ T9179] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.048535][ T9179] bridge_slave_1: entered allmulticast mode [ 122.110028][ T9179] bridge_slave_1: entered promiscuous mode [ 122.118027][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.150771][ T9179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.180540][ T9179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.203472][ T9179] team0: Port device team_slave_0 added [ 122.210420][ T9179] team0: Port device team_slave_1 added [ 122.260630][ T9179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.267615][ T9179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.293824][ T9179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.343381][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2209'. [ 122.399835][ T9179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.406914][ T9179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.433167][ T9179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.510956][ T9215] netlink: 'syz.7.2208': attribute type 4 has an invalid length. [ 122.581562][ T9179] hsr_slave_0: entered promiscuous mode [ 122.611251][ T9179] hsr_slave_1: entered promiscuous mode [ 122.636352][ T9217] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2210'. [ 122.851946][ T9179] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 122.878570][ T9179] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 122.920602][ T9179] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 122.973703][ T9179] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 123.095562][ T9231] pim6reg1: entered promiscuous mode [ 123.105393][ T9231] pim6reg1: entered allmulticast mode [ 123.132266][ T9179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.176420][ T9179] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.193554][ T3417] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.200725][ T3417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.250615][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.257720][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.317144][ T9247] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2223'. [ 123.415613][ T9260] netlink: 'syz.6.2225': attribute type 4 has an invalid length. [ 123.426321][ T9179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.436181][ T9261] loop7: detected capacity change from 0 to 512 [ 123.445316][ T9261] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 123.470087][ T9261] EXT4-fs (loop7): 1 truncate cleaned up [ 123.476118][ T9261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.581300][ T9277] pim6reg1: entered promiscuous mode [ 123.587891][ T9277] pim6reg1: entered allmulticast mode [ 123.611790][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.726583][ T9285] siw: device registration error -23 [ 123.755471][ T9285] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 123.803083][ T9179] veth0_vlan: entered promiscuous mode [ 123.813316][ T9179] veth1_vlan: entered promiscuous mode [ 123.845489][ T9179] veth0_macvtap: entered promiscuous mode [ 123.860335][ T9179] veth1_macvtap: entered promiscuous mode [ 123.893360][ T9179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.903918][ T9179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.913865][ T9179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.924338][ T9179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.937506][ T9179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.949196][ T9179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.959722][ T9179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.969696][ T9179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.980186][ T9179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.997656][ T9179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.008159][ T9179] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.016997][ T9179] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.025785][ T9179] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.034652][ T9179] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.046454][ T9305] loop7: detected capacity change from 0 to 128 [ 124.062296][ T9305] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.074613][ T9305] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.099687][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2241'. [ 124.165663][ T9316] usb usb1: usbfs: process 9316 (syz.8.2200) did not claim interface 0 before use [ 124.177742][ T9316] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 124.240568][ T9319] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.250767][ T9319] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.266255][ T9321] loop8: detected capacity change from 0 to 512 [ 124.284530][ T9321] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 124.310740][ T9319] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.320759][ T9319] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.334935][ T9321] EXT4-fs (loop8): 1 truncate cleaned up [ 124.360046][ T9321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.396397][ T9319] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.406509][ T9319] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.407191][ T9336] IPVS: length: 135 != 446676598688 [ 124.509793][ T9319] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.510447][ T9179] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.519647][ T9319] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.604356][ T9344] loop8: detected capacity change from 0 to 512 [ 124.620838][ T9319] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.629267][ T9319] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 124.643627][ T9319] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.652003][ T9319] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 124.683505][ T9319] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.691881][ T9319] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 124.733704][ T9344] EXT4-fs (loop8): 1 orphan inode deleted [ 124.742837][ T9319] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.747510][ T9344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.751401][ T9319] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 124.778958][ T9344] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.779053][ T37] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 124.908427][ T9179] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.935795][ T9350] sctp: [Deprecated]: syz.7.2258 (pid 9350) Use of int in max_burst socket option deprecated. [ 124.935795][ T9350] Use struct sctp_assoc_value instead [ 125.032419][ T9358] netlink: 'syz.8.2262': attribute type 13 has an invalid length. [ 125.088486][ T9364] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2265'. [ 125.104718][ T9358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.143785][ T9366] loop8: detected capacity change from 0 to 1024 [ 125.167266][ T9366] EXT4-fs: Ignoring removed nobh option [ 125.173114][ T9366] EXT4-fs: Ignoring removed bh option [ 125.203642][ T9366] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.264158][ T9381] netlink: 'syz.6.2270': attribute type 10 has an invalid length. [ 125.281148][ T9179] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.531141][ T9409] IPVS: length: 135 != 446676598688 [ 125.543518][ T9413] loop8: detected capacity change from 0 to 128 [ 125.561425][ T9413] bio_check_eod: 21 callbacks suppressed [ 125.561445][ T9413] +}[@: attempt to access beyond end of device [ 125.561445][ T9413] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 125.582491][ T9413] +}[@: attempt to access beyond end of device [ 125.582491][ T9413] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 125.604050][ T9413] +}[@: attempt to access beyond end of device [ 125.604050][ T9413] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 125.617401][ T9413] +}[@: attempt to access beyond end of device [ 125.617401][ T9413] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 125.643332][ T9413] +}[@: attempt to access beyond end of device [ 125.643332][ T9413] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 125.663161][ T9413] +}[@: attempt to access beyond end of device [ 125.663161][ T9413] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 125.682812][ T9413] +}[@: attempt to access beyond end of device [ 125.682812][ T9413] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 125.699811][ T9413] +}[@: attempt to access beyond end of device [ 125.699811][ T9413] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 125.715130][ T9415] netlink: 'syz.4.2286': attribute type 10 has an invalid length. [ 125.716050][ T9413] +}[@: attempt to access beyond end of device [ 125.716050][ T9413] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 125.746614][ T9413] +}[@: attempt to access beyond end of device [ 125.746614][ T9413] loop8: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 125.769671][ T9413] Buffer I/O error on dev loop8, logical block 345, lost async page write [ 125.781068][ T9413] Buffer I/O error on dev loop8, logical block 346, lost async page write [ 125.790612][ T9413] Buffer I/O error on dev loop8, logical block 347, lost async page write [ 125.802985][ T9413] Buffer I/O error on dev loop8, logical block 348, lost async page write [ 125.812085][ T9413] Buffer I/O error on dev loop8, logical block 349, lost async page write [ 125.826311][ T9413] Buffer I/O error on dev loop8, logical block 350, lost async page write [ 125.835300][ T9413] Buffer I/O error on dev loop8, logical block 351, lost async page write [ 125.916359][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2290'. [ 125.955345][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 125.955362][ T29] audit: type=1326 audit(2000000055.790:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 125.968225][ T9436] loop8: detected capacity change from 0 to 2048 [ 126.015217][ T29] audit: type=1326 audit(2000000055.830:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 126.038826][ T29] audit: type=1326 audit(2000000055.830:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 126.062416][ T29] audit: type=1326 audit(2000000055.830:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 126.086229][ T29] audit: type=1326 audit(2000000055.830:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 126.109704][ T29] audit: type=1326 audit(2000000055.830:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 126.133588][ T29] audit: type=1326 audit(2000000055.830:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 126.157120][ T29] audit: type=1326 audit(2000000055.830:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 126.180770][ T29] audit: type=1326 audit(2000000055.830:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 126.204335][ T29] audit: type=1326 audit(2000000055.830:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.7.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985125d169 code=0x7ffc0000 [ 126.253559][ T9436] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.322150][ T9454] netlink: 'syz.7.2302': attribute type 10 has an invalid length. [ 126.532965][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2301'. [ 126.542117][ T9460] netlink: 'syz.6.2301': attribute type 1 has an invalid length. [ 126.549998][ T9460] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2301'. [ 126.993575][ T9179] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.038838][ T9470] pim6reg1: entered promiscuous mode [ 127.044668][ T9470] pim6reg1: entered allmulticast mode [ 127.098804][ T9480] netlink: 'syz.7.2314': attribute type 10 has an invalid length. [ 127.124364][ T9484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.135204][ T9484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.165170][ T9486] SELinux: ebitmap: truncated map [ 127.174252][ T9486] SELinux: failed to load policy [ 127.200079][ T9488] loop8: detected capacity change from 0 to 512 [ 127.217874][ T9488] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.258831][ T9488] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.273753][ T9488] 9pnet_fd: Insufficient options for proto=fd [ 127.293564][ T9488] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 127.309532][ T9498] pim6reg1: entered promiscuous mode [ 127.314871][ T9498] pim6reg1: entered allmulticast mode [ 127.337064][ T9179] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.507528][ T9505] loop7: detected capacity change from 0 to 512 [ 127.532531][ T9505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.547614][ T9505] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.561338][ T9505] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.2325: path /260/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 127.584185][ T9505] EXT4-fs (loop7): Remounting filesystem read-only [ 127.693099][ T9515] siw: device registration error -23 [ 127.699775][ T9515] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 127.734781][ T9519] netlink: 'syz.6.2330': attribute type 10 has an invalid length. [ 127.830780][ T9527] netlink: 'syz.4.2334': attribute type 13 has an invalid length. [ 127.952991][ T9527] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.961478][ T9527] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.969885][ T9527] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.978258][ T9527] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.238246][ T9541] loop8: detected capacity change from 0 to 2048 [ 128.355468][ T5282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.371097][ T9541] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.401120][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2341'. [ 128.429547][ T9549] ================================================================== [ 128.437663][ T9549] BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk [ 128.445228][ T9549] [ 128.447555][ T9549] write to 0xffff88811665b600 of 8 bytes by task 9547 on cpu 1: [ 128.455185][ T9549] mas_replace_node+0x1b8/0x430 [ 128.460135][ T9549] mas_wr_store_entry+0x1e80/0x2460 [ 128.465347][ T9549] mas_store_prealloc+0x6d5/0x960 [ 128.470383][ T9549] vma_iter_store_new+0x1d3/0x210 [ 128.475413][ T9549] vma_complete+0x12b/0x570 [ 128.479935][ T9549] __split_vma+0x56c/0x630 [ 128.484359][ T9549] vma_modify+0x105/0x200 [ 128.488705][ T9549] vma_modify_flags+0x10a/0x140 [ 128.493580][ T9549] mprotect_fixup+0x30f/0x5d0 [ 128.498350][ T9549] do_mprotect_pkey+0x6ce/0x9a0 [ 128.503206][ T9549] __x64_sys_mprotect+0x48/0x60 [ 128.508060][ T9549] x64_sys_call+0x272f/0x2e10 [ 128.512748][ T9549] do_syscall_64+0xc9/0x1c0 [ 128.517298][ T9549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.523200][ T9549] [ 128.525527][ T9549] read to 0xffff88811665b600 of 8 bytes by task 9549 on cpu 0: [ 128.533071][ T9549] mtree_range_walk+0x347/0x460 [ 128.537949][ T9549] mas_walk+0x16e/0x320 [ 128.542132][ T9549] lock_vma_under_rcu+0xa7/0x340 [ 128.547098][ T9549] exc_page_fault+0x150/0x6a0 [ 128.551834][ T9549] asm_exc_page_fault+0x26/0x30 [ 128.556689][ T9549] [ 128.559011][ T9549] value changed: 0xffff88810466110e -> 0xffff88811665b600 [ 128.566118][ T9549] [ 128.568440][ T9549] Reported by Kernel Concurrency Sanitizer on: [ 128.574600][ T9549] CPU: 0 UID: 0 PID: 9549 Comm: syz.7.2342 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 128.587014][ T9549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.597085][ T9549] ================================================================== [ 128.699396][ T9179] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.